Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130362e302f32332d3233203d3e203238323736.roa
File:                     3138372e3130322e3130362e302f32332d3233203d3e203238323736.roa (raw, json)
Hash identifier:          QC0cICtqCFUJXn7qNadCXdW1Nd0ElRRxjRUwny8xS1Q=
Subject key identifier:   CA:1D:F4:94:5B:16:E1:6A:88:CD:25:0A:A1:09:B4:FF:68:C1:8E:DA
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       204C76799CD14C991B141B16C423C773BE3247E1
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130362e302f32332d3233203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:03:55 +0000
ROA not before:           Tue 23 Apr 2024 18:58:55 +0000
ROA not after:            Tue 22 Apr 2025 19:03:55 +0000
asID:                     28276
IP address blocks:        187.102.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4c:76:79:9c:d1:4c:99:1b:14:1b:16:c4:23:c7:73:be:32:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:58:55 2024 GMT
            Not After : Apr 22 19:03:55 2025 GMT
        Subject: CN=CA1DF4945B16E16A88CD250AA109B4FF68C18EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:da:63:e7:73:7f:05:3c:81:ae:bb:dd:3a:
                    cf:a7:e4:6c:d7:36:7b:9f:d3:fc:ce:c3:e3:2e:3e:
                    14:f4:03:72:e8:ee:3f:de:db:a1:9a:c7:8e:78:5c:
                    7a:71:b5:27:7d:94:1f:b6:45:cf:81:c5:bb:41:56:
                    e0:4e:34:f1:c0:76:cb:38:53:de:26:85:e6:e1:f7:
                    5d:f1:6c:94:66:84:26:43:10:1d:e9:70:e0:36:50:
                    8d:98:f0:c5:a0:6d:69:fa:2a:38:06:94:48:15:a4:
                    83:90:cd:e1:9a:13:ac:4d:d6:b3:a5:1d:cb:71:cd:
                    10:77:85:2a:65:4e:c7:17:bd:8c:15:5a:9e:d6:2a:
                    1a:85:2e:dd:da:00:00:97:12:1e:0e:49:75:9f:bb:
                    a5:83:04:81:f0:fb:2a:37:6e:bf:b1:74:e7:f2:69:
                    86:c9:b0:d5:98:b8:c3:a1:6f:3c:46:7e:e9:1e:6d:
                    51:2e:62:61:0e:9e:cc:54:66:fd:01:ee:ab:03:7c:
                    7a:63:c9:3a:af:29:b3:e5:6b:16:42:77:59:0b:df:
                    b5:ea:f4:e6:0a:56:5c:9e:6a:9d:3e:25:b8:cb:b0:
                    d3:9a:09:b9:7e:06:cb:91:13:a1:d7:34:0b:05:4e:
                    9f:3e:5c:4b:4a:47:0d:d4:83:07:27:42:d5:dd:30:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1D:F4:94:5B:16:E1:6A:88:CD:25:0A:A1:09:B4:FF:68:C1:8E:DA
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130362e302f32332d3233203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:0a:a9:1a:55:58:d1:c2:2a:b4:f3:29:27:61:1d:2c:78:
         eb:cd:7d:7a:e3:fd:61:f9:64:6f:ab:74:fc:ee:1a:b4:de:64:
         17:e5:16:23:80:17:68:ac:4d:d3:86:e1:25:f6:33:83:58:c8:
         58:c5:d4:01:23:0a:c2:e3:fa:25:04:54:f2:ae:52:83:52:08:
         f3:57:2e:b2:f9:4e:86:65:6c:15:41:47:d0:99:34:21:80:db:
         39:45:b5:0e:21:a5:2c:c3:4d:47:b1:42:d8:87:98:ac:2d:c9:
         fb:ed:98:55:97:9d:11:32:9d:be:10:b1:28:fc:e5:38:cf:f0:
         01:89:b4:09:33:f3:21:c9:5a:0c:dc:f6:d6:4d:1b:19:9a:87:
         04:be:dc:c4:a1:ba:15:1b:33:b6:c8:41:dc:93:9c:2c:dc:60:
         a8:98:87:59:67:96:1c:49:71:89:89:1d:65:33:45:c1:c9:59:
         4d:38:18:01:7b:5b:1f:95:64:86:36:e4:5f:b8:47:14:ca:c5:
         b4:35:17:e9:60:83:5d:9a:78:90:5f:fe:5b:16:1f:e9:92:f5:
         bc:a0:e2:58:32:4d:4a:4f:d4:df:99:5c:69:3c:80:3e:a4:c2:
         88:0c:e2:bb:f0:a4:1c:3e:87:6d:49:f1:b0:58:d4:51:e8:bf:
         b5:fb:a1:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIEx2eZzRTJkbFBsWxCPHc74yR+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQzA4NEI1M0Y5Nzk4NzE0QzA2QTY0MkI2OThERDkw
RUMyRjI1RTAeFw0yNDA0MjMxODU4NTVaFw0yNTA0MjIxOTAzNTVaMDMxMTAvBgNV
BAMTKENBMURGNDk0NUIxNkUxNkE4OENEMjUwQUExMDlCNEZGNjhDMThFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wtpj53N/BTyBrrvdOs+n5GzX
Nnuf0/zOw+MuPhT0A3Lo7j/e26Gax454XHpxtSd9lB+2Rc+BxbtBVuBONPHAdss4
U94mhebh913xbJRmhCZDEB3pcOA2UI2Y8MWgbWn6KjgGlEgVpIOQzeGaE6xN1rOl
HctxzRB3hSplTscXvYwVWp7WKhqFLt3aAACXEh4OSXWfu6WDBIHw+yo3br+xdOfy
aYbJsNWYuMOhbzxGfukebVEuYmEOnsxUZv0B7qsDfHpjyTqvKbPlaxZCd1kL37Xq
9OYKVlyeap0+JbjLsNOaCbl+BsuRE6HXNAsFTp8+XEtKRw3UgwcnQtXdMKU9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyh30lFsW4WqIzSUKoQm0/2jBjtowHwYDVR0j
BBgwFoAUirwIS1P5eYcUwGpkK2mN2Q7C8l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43aERCNEFMVHFI
bjgvMC84QUJDMDg0QjUzRjk3OTg3MTRDMDZBNjQyQjY5OEREOTBFQzJGMjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkMwODRCNTNGOTc5ODcx
NEMwNkE2NDJCNjk4REQ5MEVDMkYyNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxZ0xyZVdMZmNMczJQNHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAv
MzEzODM3MmUzMTMwMzIyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7ZmowDQYJKoZIhvcNAQELBQADggEBABsUCqka
VVjRwiq08yknYR0seOvNfXrj/WH5ZG+rdPzuGrTeZBflFiOAF2isTdOG4SX2M4NY
yFjF1AEjCsLj+iUEVPKuUoNSCPNXLrL5ToZlbBVBR9CZNCGA2zlFtQ4hpSzDTUex
QtiHmKwtyfvtmFWXnREynb4QsSj85TjP8AGJtAkz8yHJWgzc9tZNGxmahwS+3MSh
uhUbM7bIQdyTnCzcYKiYh1lnlhxJcYmJHWUzRcHJWU04GAF7Wx+VZIY25F+4RxTK
xbQ1F+lgg12aeJBf/lsWH+mS9byg4lgyTUpP1N+ZXGk8gD6kwogM4rvwpBw+h21J
8bBY1FHov7X7oYk=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:18 2024 by rpki-client on console-fra.rpki-client.org