Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa
File:                     3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa (raw, json)
Hash identifier:          wpMAcrjnvj2VbIEFhZ9/ncQkKY86MrBxaDQzBHE3RO4=
Subject key identifier:   67:D7:88:1F:10:3C:B3:EC:7A:F9:98:01:35:6B:A9:60:E8:0C:B5:70
Certificate issuer:       /CN=0050F00442C4353C599B01694D108E34D78665F8
Certificate serial:       28F0D35A76E6F4690AD12B3E4C3847F942C02D
Authority key identifier: 00:50:F0:04:42:C4:35:3C:59:9B:01:69:4D:10:8E:34:D7:86:65:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0050F00442C4353C599B01694D108E34D78665F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa
Signing time:             Fri 19 Jul 2024 14:30:00 +0000
ROA not before:           Fri 19 Jul 2024 14:25:00 +0000
ROA not after:            Fri 18 Jul 2025 14:30:00 +0000
asID:                     53123
IP address blocks:        187.111.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/0050F00442C4353C599B01694D108E34D78665F8.crl
                          rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/0050F00442C4353C599B01694D108E34D78665F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0050F00442C4353C599B01694D108E34D78665F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f0:d3:5a:76:e6:f4:69:0a:d1:2b:3e:4c:38:47:f9:42:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0050F00442C4353C599B01694D108E34D78665F8
        Validity
            Not Before: Jul 19 14:25:00 2024 GMT
            Not After : Jul 18 14:30:00 2025 GMT
        Subject: CN=67D7881F103CB3EC7AF99801356BA960E80CB570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:ea:c2:c2:51:b0:7a:14:dd:99:c6:f5:aa:
                    35:e0:98:99:6a:0b:5d:e7:20:df:bc:45:9e:1a:c8:
                    20:a5:5c:74:e9:b7:6f:c0:65:20:14:78:65:ab:65:
                    2a:5e:1a:32:20:1e:e8:aa:5d:f6:1f:90:b2:e6:da:
                    32:59:96:f0:3b:48:a8:0c:19:b0:67:d9:89:46:c3:
                    ec:52:a6:fd:ed:87:19:b0:1d:65:f3:44:d2:f9:b0:
                    05:30:8a:6d:95:a3:1f:49:56:d0:ae:53:27:f7:0c:
                    62:a7:cb:e2:10:d7:c6:79:84:18:73:7b:68:33:5f:
                    2d:c3:cc:23:15:49:7d:19:26:97:2e:81:b7:85:e8:
                    c7:a2:68:28:fa:65:46:9d:3f:39:d8:0f:5d:8d:55:
                    76:76:e3:b2:c1:66:52:a8:88:d0:bc:20:15:23:ec:
                    7c:5e:0a:15:ca:d9:89:65:aa:83:58:8f:06:48:42:
                    ba:28:82:94:a6:4d:9c:33:08:16:41:c8:2e:e4:df:
                    6d:43:70:d9:e0:c9:ba:92:ab:0d:34:ff:6f:be:38:
                    36:70:1a:56:ab:bc:79:f3:49:ce:e9:1b:9e:a3:80:
                    24:b3:2c:3e:74:1e:4f:7f:96:ea:be:b9:3a:52:a5:
                    52:19:7b:11:b3:df:0f:21:cc:7f:2a:9b:ea:bc:1d:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:88:1F:10:3C:B3:EC:7A:F9:98:01:35:6B:A9:60:E8:0C:B5:70
            X509v3 Authority Key Identifier:
                keyid:00:50:F0:04:42:C4:35:3C:59:9B:01:69:4D:10:8E:34:D7:86:65:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/0050F00442C4353C599B01694D108E34D78665F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0050F00442C4353C599B01694D108E34D78665F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:4e:fc:ba:cc:be:84:5d:22:8d:02:c9:04:b1:db:20:ad:
         79:56:b3:0f:26:96:34:12:8f:92:a6:50:3b:38:0c:05:af:40:
         47:c0:16:3f:8e:ba:d4:d5:e4:d6:1a:02:d9:8a:5b:34:35:71:
         63:76:3d:c1:27:53:93:fc:41:cc:e9:ae:70:9a:cc:31:42:89:
         26:24:c0:3e:43:ea:c4:f7:3e:bc:cf:86:fe:e2:30:2e:73:8a:
         ea:cf:a0:91:e4:a5:e0:6b:25:fd:c6:72:87:7e:66:09:80:e2:
         12:14:b7:3c:95:4f:41:4e:3d:8a:8c:cc:6b:61:2f:b1:8d:01:
         7c:f8:d0:ae:63:44:81:e9:4b:90:25:7c:f3:32:00:a9:f6:26:
         e9:33:83:ea:6d:9c:c7:ef:59:5b:b0:3b:0f:e9:8f:1a:dd:b4:
         c8:1f:5d:d2:ab:e5:f4:19:e8:f5:94:0a:7d:4f:da:ad:15:85:
         49:73:7c:41:72:eb:a3:2b:a5:79:30:15:2b:99:de:8f:1c:c5:
         06:5b:51:b9:66:e3:06:ea:64:05:06:81:af:99:66:1d:a6:2d:
         ea:16:30:22:e3:17:02:90:93:6d:80:c9:ac:1d:92:24:5a:23:
         e3:f5:8c:c1:19:c1:bc:f5:01:55:5b:05:04:1e:a6:a9:c9:9b:
         7e:b9:cf:6d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITKPDTWnbm9GkK0Ss+TDhH+ULALTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygwMDUwRjAwNDQyQzQzNTNDNTk5QjAxNjk0RDEwOEUzNEQ3
ODY2NUY4MB4XDTI0MDcxOTE0MjUwMFoXDTI1MDcxODE0MzAwMFowMzExMC8GA1UE
AxMoNjdENzg4MUYxMDNDQjNFQzdBRjk5ODAxMzU2QkE5NjBFODBDQjU3MDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCt6sLCUbB6FN2ZxvWqNeCYmWoL
Xecg37xFnhrIIKVcdOm3b8BlIBR4ZatlKl4aMiAe6Kpd9h+QsubaMlmW8DtIqAwZ
sGfZiUbD7FKm/e2HGbAdZfNE0vmwBTCKbZWjH0lW0K5TJ/cMYqfL4hDXxnmEGHN7
aDNfLcPMIxVJfRkmly6Bt4Xox6JoKPplRp0/OdgPXY1VdnbjssFmUqiI0LwgFSPs
fF4KFcrZiWWqg1iPBkhCuiiClKZNnDMIFkHILuTfbUNw2eDJupKrDTT/b744NnAa
Vqu8efNJzukbnqOAJLMsPnQeT3+W6r65OlKlUhl7EbPfDyHMfyqb6rwdhBMCAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBRn14gfEDyz7Hr5mAE1a6lg6Ay1cDAfBgNVHSME
GDAWgBQAUPAEQsQ1PFmbAWlNEI4014Zl+DAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HVWFCMlhyN25YUFJySFlFRnU1d3dCVm5YMnR3QzhrZFhUODZodVVmZFVn
eC8wLzAwNTBGMDA0NDJDNDM1M0M1OTlCMDE2OTREMTA4RTM0RDc4NjY1RjguY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMDA1MEYwMDQ0MkM0MzUzQzU5
OUIwMTY5NEQxMDhFMzRENzg2NjVGOC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1VhQjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRVZ3gvMC8z
MTM4MzcyZTMxMzEzMTJlMzEzOTMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUz
MzMxMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEBLtvwDANBgkqhkiG9w0BAQsFAAOCAQEACJ1O/LrM
voRdIo0CyQSx2yCteVazDyaWNBKPkqZQOzgMBa9AR8AWP4661NXk1hoC2YpbNDVx
Y3Y9wSdTk/xBzOmucJrMMUKJJiTAPkPqxPc+vM+G/uIwLnOK6s+gkeSl4Gsl/cZy
h35mCYDiEhS3PJVPQU49iozMa2EvsY0BfPjQrmNEgelLkCV88zIAqfYm6TOD6m2c
x+9ZW7A7D+mPGt20yB9d0qvl9Bno9ZQKfU/arRWFSXN8QXLroyuleTAVK5nejxzF
BltRuWbjBupkBQaBr5lmHaYt6hYwIuMXApCTbYDJrB2SJFoj4/WMwRnBvPUBVVsF
BB6mqcmbfrnPbQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org