Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130382e302f32332d3233203d3e203238323736.roa
File:                     3138372e3130322e3130382e302f32332d3233203d3e203238323736.roa (raw, json)
Hash identifier:          ck8ke9VAA2yhp86+Pe33vRYnsqx8aIT9wSSZSPUqHA8=
Subject key identifier:   D2:AD:B4:66:E7:DA:A1:98:DE:4C:94:13:8F:02:51:B5:F2:87:F5:2D
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       7C723BD8DCEA1B23290B967F01EA3706B29D62CE
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130382e302f32332d3233203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:03:58 +0000
ROA not before:           Tue 23 Apr 2024 18:58:58 +0000
ROA not after:            Tue 22 Apr 2025 19:03:58 +0000
asID:                     28276
IP address blocks:        187.102.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:72:3b:d8:dc:ea:1b:23:29:0b:96:7f:01:ea:37:06:b2:9d:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:58:58 2024 GMT
            Not After : Apr 22 19:03:58 2025 GMT
        Subject: CN=D2ADB466E7DAA198DE4C94138F0251B5F287F52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:c7:7f:e2:e1:f5:9b:98:f3:2a:a3:3a:54:
                    f9:7e:ae:57:7f:9e:7c:f6:41:86:f9:54:d5:97:8a:
                    f2:7a:19:0c:00:e3:a7:18:74:6f:ae:08:3a:af:e2:
                    ec:ac:1e:ce:34:08:b2:50:77:30:b7:4b:14:08:a0:
                    50:8f:da:af:2b:1a:d0:4b:9a:8a:c9:8d:27:e2:dd:
                    bb:84:a5:34:1f:b8:fb:ea:c8:27:cb:c1:2f:c8:bf:
                    06:2e:8c:b8:d2:1c:e7:4d:c2:23:ee:5a:7e:c9:fa:
                    e8:12:61:35:21:b1:9a:0a:10:30:db:4c:f6:22:1b:
                    d5:0d:5d:ee:22:12:72:c6:45:22:42:ce:08:1c:5d:
                    1e:50:52:da:50:c8:de:6f:3d:b3:7e:7f:29:48:b4:
                    55:9b:50:10:30:4e:d2:a7:92:69:08:b2:80:b1:57:
                    21:63:89:e9:79:9f:e6:ab:60:f1:47:8e:7e:9e:bc:
                    b5:8b:22:c5:83:02:75:55:b4:ec:c9:72:7c:ec:05:
                    e9:13:cf:bb:b1:b3:42:fd:54:3d:ca:f8:c7:ad:d0:
                    b4:e5:a0:a7:2d:f7:38:32:48:91:60:93:5b:a2:a1:
                    ef:16:53:3f:cf:38:ee:4d:02:80:5d:94:c6:e1:9b:
                    09:d2:13:8c:1c:9c:56:bc:a0:e1:40:33:12:e0:1c:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:B4:66:E7:DA:A1:98:DE:4C:94:13:8F:02:51:B5:F2:87:F5:2D
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130382e302f32332d3233203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:8d:2a:fe:14:b7:88:fa:37:3c:d4:f0:bd:d5:63:72:ca:
         a3:58:4c:f4:92:6a:b5:a8:6b:ad:2d:4a:3e:58:05:0c:e7:5b:
         44:30:b8:54:de:de:72:68:75:ad:23:a6:8b:f3:65:82:0d:67:
         95:6f:8e:9d:17:59:b9:09:90:ad:3f:1d:9d:36:cd:cb:1b:c4:
         c2:3f:03:e9:b7:f6:dc:b3:28:9d:11:f5:ca:b7:26:60:c3:9d:
         03:18:f4:3f:33:af:2e:b4:31:01:d4:b2:ba:07:ce:84:99:d1:
         0a:ad:85:45:31:0d:33:24:e3:41:99:75:f0:ad:dc:84:25:09:
         26:81:79:8b:96:5e:cc:c3:15:38:27:ff:b5:16:d0:d5:57:d5:
         0f:19:3d:c2:2d:04:31:61:74:5f:6e:15:44:77:a3:62:3f:c2:
         ad:03:5e:85:6d:ed:00:78:7c:2f:cb:6e:b9:29:25:06:9f:ed:
         63:d4:2d:b4:91:b7:af:1b:18:ad:3f:aa:d0:e2:0d:6e:59:72:
         d2:78:cf:ab:98:f1:97:3c:bf:a5:cc:a2:19:d5:80:d3:e6:e2:
         e7:94:9b:fd:b8:71:2a:88:33:96:72:cf:97:23:32:2a:3c:b3:
         ca:65:ee:a9:e3:5b:10:f0:a7:da:f2:79:23:21:3c:9a:c6:64:
         12:fe:2f:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfHI72NzqGyMpC5Z/Aeo3BrKdYs4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCQzA4NEI1M0Y5Nzk4NzE0QzA2QTY0MkI2OThERDkw
RUMyRjI1RTAeFw0yNDA0MjMxODU4NThaFw0yNTA0MjIxOTAzNThaMDMxMTAvBgNV
BAMTKEQyQURCNDY2RTdEQUExOThERTRDOTQxMzhGMDI1MUI1RjI4N0Y1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqcd/4uH1m5jzKqM6VPl+rld/
nnz2QYb5VNWXivJ6GQwA46cYdG+uCDqv4uysHs40CLJQdzC3SxQIoFCP2q8rGtBL
morJjSfi3buEpTQfuPvqyCfLwS/IvwYujLjSHOdNwiPuWn7J+ugSYTUhsZoKEDDb
TPYiG9UNXe4iEnLGRSJCzggcXR5QUtpQyN5vPbN+fylItFWbUBAwTtKnkmkIsoCx
VyFjiel5n+arYPFHjn6evLWLIsWDAnVVtOzJcnzsBekTz7uxs0L9VD3K+Met0LTl
oKct9zgySJFgk1uioe8WUz/POO5NAoBdlMbhmwnSE4wcnFa8oOFAMxLgHLZPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0q20ZufaoZjeTJQTjwJRtfKH9S0wHwYDVR0j
BBgwFoAUirwIS1P5eYcUwGpkK2mN2Q7C8l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43aERCNEFMVHFI
bjgvMC84QUJDMDg0QjUzRjk3OTg3MTRDMDZBNjQyQjY5OEREOTBFQzJGMjVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkMwODRCNTNGOTc5ODcx
NEMwNkE2NDJCNjk4REQ5MEVDMkYyNUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxZ0xyZVdMZmNMczJQNHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAv
MzEzODM3MmUzMTMwMzIyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7ZmwwDQYJKoZIhvcNAQELBQADggEBAAa/jSr+
FLeI+jc81PC91WNyyqNYTPSSarWoa60tSj5YBQznW0QwuFTe3nJoda0jpovzZYIN
Z5Vvjp0XWbkJkK0/HZ02zcsbxMI/A+m39tyzKJ0R9cq3JmDDnQMY9D8zry60MQHU
sroHzoSZ0QqthUUxDTMk40GZdfCt3IQlCSaBeYuWXszDFTgn/7UW0NVX1Q8ZPcIt
BDFhdF9uFUR3o2I/wq0DXoVt7QB4fC/LbrkpJQaf7WPULbSRt68bGK0/qtDiDW5Z
ctJ4z6uY8Zc8v6XMohnVgNPm4ueUm/24cSqIM5Zyz5cjMio8s8pl7qnjWxDwp9ry
eSMhPJrGZBL+L5c=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:51 2024 by rpki-client on console-ams.rpki-client.org