Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa
File:                     3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa (raw, json)
Hash identifier:          6bDm9YZnMZvZfnz123y8gFjNCTaRb+wsV9fbpUbzt9w=
Subject key identifier:   D1:64:1C:C2:DD:74:17:A0:A4:9B:07:2B:96:DA:47:4E:8D:30:AC:F5
Certificate issuer:       /CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
Certificate serial:       035D6A4C0883A20607779B676BD43FC9B8F234BD
Authority key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa
Signing time:             Thu 30 May 2024 23:22:59 +0000
ROA not before:           Thu 30 May 2024 23:17:59 +0000
ROA not after:            Thu 29 May 2025 23:22:59 +0000
asID:                     28145
IP address blocks:        186.192.224.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5d:6a:4c:08:83:a2:06:07:77:9b:67:6b:d4:3f:c9:b8:f2:34:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
        Validity
            Not Before: May 30 23:17:59 2024 GMT
            Not After : May 29 23:22:59 2025 GMT
        Subject: CN=D1641CC2DD7417A0A49B072B96DA474E8D30ACF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:44:ed:91:ca:bd:ed:fb:e5:f8:d5:2a:b1:
                    30:12:6d:91:db:65:0a:16:1a:30:1e:4d:fe:3b:c0:
                    8a:21:f3:95:96:4f:f1:c1:b7:64:29:7d:a4:1d:ec:
                    4f:43:e2:de:8a:98:77:05:34:47:f3:8b:d7:06:b6:
                    87:79:19:b4:1b:d9:d1:45:ed:88:92:cd:7f:cd:45:
                    d1:c4:bb:d9:3d:4a:d3:c2:dc:41:f2:71:9d:bc:6c:
                    78:23:39:f0:37:06:bd:4e:eb:23:bc:7a:db:09:0c:
                    4b:17:d7:cc:24:22:2b:e7:d5:7c:d6:c4:d9:1d:60:
                    58:e6:4e:90:eb:d2:72:7d:63:67:00:12:26:46:50:
                    0e:ac:97:e2:54:83:05:09:8e:61:76:4a:d8:48:c5:
                    82:f7:41:80:29:09:b2:db:ee:32:a5:a1:43:9f:88:
                    9e:ea:70:19:51:bb:a9:a8:ea:68:61:84:d5:27:59:
                    44:09:86:fa:e6:10:d1:37:2f:09:6b:6c:f8:51:b9:
                    03:e8:a9:68:b9:85:9c:1d:81:6e:ec:d3:41:b3:fe:
                    96:11:c7:d8:4d:df:19:3a:7a:03:7d:27:b9:e2:51:
                    fa:08:3d:ae:5a:1e:26:39:47:3d:75:ed:43:fd:b0:
                    8b:11:01:3c:6a:fd:03:db:78:b6:3e:11:e1:a6:e6:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:1C:C2:DD:74:17:A0:A4:9B:07:2B:96:DA:47:4E:8D:30:AC:F5
            X509v3 Authority Key Identifier:
                keyid:64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:b6:2c:9d:78:14:ad:0a:71:df:bb:84:c6:1b:e7:2b:7e:
         0c:c9:23:13:64:7c:de:24:57:e7:be:8e:a9:e9:e8:3b:b3:6a:
         79:c5:69:03:d3:4c:fe:62:fd:56:47:90:ce:d0:28:ee:24:48:
         c5:77:00:3d:bc:f7:3d:bd:8d:3b:99:a8:5c:30:87:dd:f2:cd:
         49:6c:53:18:b1:01:2f:5f:65:ce:df:ea:11:da:b4:12:08:fe:
         74:2d:76:0e:66:82:85:62:51:b8:11:fa:53:a8:21:97:ec:5b:
         87:9d:ea:85:0c:78:db:bf:b2:af:d9:13:06:c3:62:76:a4:60:
         15:ac:13:7f:3e:d1:73:bf:74:0b:81:2c:97:b6:49:d6:4d:f2:
         0c:08:15:0b:8b:5a:0d:2a:a0:df:fe:cd:48:d0:3a:aa:59:da:
         55:fb:5f:2d:ec:4c:43:46:a7:6c:3a:86:95:86:d5:bf:ee:7a:
         99:9c:58:81:73:d7:2c:ca:98:45:6b:7b:98:4c:0f:c2:4e:75:
         03:b3:ba:e1:09:d8:7c:66:8f:d2:2f:57:50:af:57:1c:fe:22:
         6c:bd:a8:7d:84:2e:cf:b3:b7:6e:e8:61:38:c6:fe:81:81:3b:
         96:9b:72:7b:c6:e3:47:76:4d:f5:bc:75:79:16:54:0a:e2:f6:
         f6:e8:3c:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA11qTAiDogYHd5tna9Q/ybjyNL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ1QUMwQzk0OEE1RkY2MTg5RDlEQ0ZFRkExMzg4Njg1
NDg1QkVCMTAeFw0yNDA1MzAyMzE3NTlaFw0yNTA1MjkyMzIyNTlaMDMxMTAvBgNV
BAMTKEQxNjQxQ0MyREQ3NDE3QTBBNDlCMDcyQjk2REE0NzRFOEQzMEFDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwkTtkcq97fvl+NUqsTASbZHb
ZQoWGjAeTf47wIoh85WWT/HBt2QpfaQd7E9D4t6KmHcFNEfzi9cGtod5GbQb2dFF
7YiSzX/NRdHEu9k9StPC3EHycZ28bHgjOfA3Br1O6yO8etsJDEsX18wkIivn1XzW
xNkdYFjmTpDr0nJ9Y2cAEiZGUA6sl+JUgwUJjmF2SthIxYL3QYApCbLb7jKloUOf
iJ7qcBlRu6mo6mhhhNUnWUQJhvrmENE3LwlrbPhRuQPoqWi5hZwdgW7s00Gz/pYR
x9hN3xk6egN9J7niUfoIPa5aHiY5Rz117UP9sIsRATxq/QPbeLY+EeGm5oJ1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0WQcwt10F6CkmwcrltpHTo0wrPUwHwYDVR0j
BBgwFoAUZFrAyUil/2GJ2dz++hOIaFSFvrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx
RVUvMC82NDVBQzBDOTQ4QTVGRjYxODlEOURDRkVGQTEzODg2ODU0ODVCRUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NUFDMEM5NDhBNUZGNjE4
OUQ5RENGRUZBMTM4ODY4NTQ4NUJFQjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXRmhtN2hNaWp1ejNEWmtRMlJ0NDVmbWVuQ1g0MjRiajluTlBaMndMMUVVLzAv
MzEzODM2MmUzMTM5MzIyZTMyMzIzNDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzgzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6wOAwDQYJKoZIhvcNAQELBQADggEBAJuvtiyd
eBStCnHfu4TGG+crfgzJIxNkfN4kV+e+jqnp6DuzannFaQPTTP5i/VZHkM7QKO4k
SMV3AD289z29jTuZqFwwh93yzUlsUxixAS9fZc7f6hHatBII/nQtdg5mgoViUbgR
+lOoIZfsW4ed6oUMeNu/sq/ZEwbDYnakYBWsE38+0XO/dAuBLJe2SdZN8gwIFQuL
Wg0qoN/+zUjQOqpZ2lX7Xy3sTENGp2w6hpWG1b/uepmcWIFz1yzKmEVre5hMD8JO
dQOzuuEJ2Hxmj9IvV1CvVxz+Imy9qH2ELs+zt27oYTjG/oGBO5abcnvG40d2TfW8
dXkWVAri9vboPBs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:59 2024 by rpki-client on console-fra.rpki-client.org