Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa
File:                     3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa (raw, json)
Hash identifier:          9Hp5hT14coLwfDiFTBDYUkC+CRPw5Jn5U2wpmGlOFjM=
Subject key identifier:   52:C9:C1:A4:DB:D9:09:90:64:6A:B4:96:12:FF:7B:FD:35:75:99:23
Certificate issuer:       /CN=CC636745385A9BA13F5D3C7C8027EB2D6F4252D8
Certificate serial:       54E229A0FBE9B38E4B552D3ECF4903BEE39629FD
Authority key identifier: CC:63:67:45:38:5A:9B:A1:3F:5D:3C:7C:80:27:EB:2D:6F:42:52:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa
Signing time:             Mon 12 Aug 2024 17:31:41 +0000
ROA not before:           Mon 12 Aug 2024 17:26:41 +0000
ROA not after:            Mon 11 Aug 2025 17:31:41 +0000
asID:                     262290
IP address blocks:        186.226.200.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e2:29:a0:fb:e9:b3:8e:4b:55:2d:3e:cf:49:03:be:e3:96:29:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC636745385A9BA13F5D3C7C8027EB2D6F4252D8
        Validity
            Not Before: Aug 12 17:26:41 2024 GMT
            Not After : Aug 11 17:31:41 2025 GMT
        Subject: CN=52C9C1A4DBD90990646AB49612FF7BFD35759923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:3c:6f:92:23:45:55:84:06:34:59:99:c6:
                    a5:35:0b:f7:54:52:ee:33:cf:21:eb:9f:44:21:ba:
                    18:c2:93:ad:ce:fe:61:06:72:9e:6e:cd:69:71:c7:
                    fa:9c:99:d1:df:80:53:23:f0:dd:ea:ab:a3:51:2e:
                    6d:a7:00:11:58:b8:e7:b8:64:ee:ea:34:eb:a4:04:
                    9a:66:ae:be:5f:05:24:12:44:7f:a1:2e:31:a5:e9:
                    81:4e:90:eb:cb:a0:dc:be:09:8c:08:f4:f6:ef:da:
                    9b:64:57:9c:1c:6f:af:70:1a:70:86:ad:cb:7f:25:
                    10:0b:75:07:b4:c2:31:25:a0:20:1a:de:85:c8:4a:
                    d4:f6:cc:f0:67:0c:9c:b3:d3:e4:c5:c9:c8:3b:04:
                    1a:4f:c6:9d:07:c4:97:73:d1:52:1b:a8:cf:b1:66:
                    00:49:c2:d2:d1:fa:82:21:06:10:29:d3:f2:c7:a8:
                    75:9d:3d:80:ba:86:61:ac:1b:90:14:1b:20:70:04:
                    12:cb:9c:89:75:9c:ad:ed:62:65:f0:b3:ae:ff:b6:
                    29:25:4a:cd:68:69:1c:3e:13:09:d4:1c:76:b4:8a:
                    8a:52:88:f7:df:c2:ad:80:07:84:5a:61:89:bb:35:
                    06:68:76:27:82:09:24:a7:2e:10:04:08:bc:c0:c2:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C9:C1:A4:DB:D9:09:90:64:6A:B4:96:12:FF:7B:FD:35:75:99:23
            X509v3 Authority Key Identifier:
                keyid:CC:63:67:45:38:5A:9B:A1:3F:5D:3C:7C:80:27:EB:2D:6F:42:52:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC636745385A9BA13F5D3C7C8027EB2D6F4252D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/3138362e3232362e3230302e302f32312d3332203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:1e:95:1d:3b:60:c5:50:62:05:58:c4:c1:f9:bd:9f:75:4b:
         1e:73:8a:b3:17:31:9f:11:89:60:e2:a5:1e:77:8a:1c:dd:0f:
         9c:4c:6a:d2:3b:04:92:0c:89:10:06:2d:d9:c7:fe:ab:86:51:
         39:5a:ab:4a:fc:28:7a:cc:ab:56:a1:fa:8f:74:86:1e:b8:4e:
         91:7f:1c:6e:a2:dd:85:01:0b:86:b4:e9:9d:b3:98:96:25:69:
         2a:fe:04:54:fd:d0:ba:0a:bb:b2:bf:9b:37:b3:4f:d3:60:9e:
         bc:16:c7:d9:bc:5c:fe:c6:5d:0c:f9:fa:a6:66:c1:ee:d6:39:
         43:1a:f4:87:1a:aa:e2:98:d1:40:a8:8a:dc:89:0c:3d:e0:09:
         76:98:4b:1d:3c:b7:b5:4d:d0:67:23:c8:e8:d0:1c:28:08:c9:
         2e:f3:90:ed:ee:2b:84:f2:ae:e6:11:46:70:90:98:6c:f2:e8:
         6f:ab:88:7d:a1:a4:e2:30:d9:97:bd:eb:29:ae:09:f7:f1:f4:
         02:4a:52:5d:a8:a4:0f:49:da:2d:8c:a3:d0:d8:f7:54:ed:b2:
         f3:c7:d5:42:ba:e1:5d:48:1a:28:d3:bf:57:4e:6c:71:84:3c:
         82:5c:98:51:51:b2:91:38:01:49:70:12:fe:5f:c6:7d:45:69:
         2a:7a:27:db
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVOIpoPvps45LVS0+z0kDvuOWKf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M2MzY3NDUzODVBOUJBMTNGNUQzQzdDODAyN0VCMkQ2
RjQyNTJEODAeFw0yNDA4MTIxNzI2NDFaFw0yNTA4MTExNzMxNDFaMDMxMTAvBgNV
BAMTKDUyQzlDMUE0REJEOTA5OTA2NDZBQjQ5NjEyRkY3QkZEMzU3NTk5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+jxvkiNFVYQGNFmZxqU1C/dU
Uu4zzyHrn0QhuhjCk63O/mEGcp5uzWlxx/qcmdHfgFMj8N3qq6NRLm2nABFYuOe4
ZO7qNOukBJpmrr5fBSQSRH+hLjGl6YFOkOvLoNy+CYwI9Pbv2ptkV5wcb69wGnCG
rct/JRALdQe0wjEloCAa3oXIStT2zPBnDJyz0+TFycg7BBpPxp0HxJdz0VIbqM+x
ZgBJwtLR+oIhBhAp0/LHqHWdPYC6hmGsG5AUGyBwBBLLnIl1nK3tYmXws67/tikl
Ss1oaRw+EwnUHHa0iopSiPffwq2AB4RaYYm7NQZodieCCSSnLhAECLzAwmDBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUsnBpNvZCZBkarSWEv97/TV1mSMwHwYDVR0j
BBgwFoAUzGNnRTham6E/XTx8gCfrLW9CUtgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR005VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVi
cG4vMC9DQzYzNjc0NTM4NUE5QkExM0Y1RDNDN0M4MDI3RUIyRDZGNDI1MkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNjM2NzQ1Mzg1QTlCQTEz
RjVEM0M3QzgwMjdFQjJENkY0MjUyRDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNOVVQaldTUVJHTTgxTWFjYmY2dDhxVEZlVDhSR2lSUUhSdUhtcHFlYnBuLzAv
MzEzODM2MmUzMjMyMzYyZTMyMzAzMDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7riyDANBgkqhkiG9w0BAQsFAAOCAQEApx6V
HTtgxVBiBVjEwfm9n3VLHnOKsxcxnxGJYOKlHneKHN0PnExq0jsEkgyJEAYt2cf+
q4ZROVqrSvwoesyrVqH6j3SGHrhOkX8cbqLdhQELhrTpnbOYliVpKv4EVP3Qugq7
sr+bN7NP02CevBbH2bxc/sZdDPn6pmbB7tY5Qxr0hxqq4pjRQKiK3IkMPeAJdphL
HTy3tU3QZyPI6NAcKAjJLvOQ7e4rhPKu5hFGcJCYbPLob6uIfaGk4jDZl73rKa4J
9/H0AkpSXaikD0naLYyj0Nj3VO2y88fVQrrhXUgaKNO/V05scYQ8glyYUVGykTgB
SXAS/l/GfUVpKnon2w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:57 2024 by rpki-client on console-fra.rpki-client.org