Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3234203d3e203232303835.roa
File:                     3138372e36382e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          V0CUZsTvbJ+pgOhRxF44wZVp0/H4VAdHE2UN/aHAeCc=
Subject key identifier:   1B:7F:46:AE:A9:B6:5D:0E:B8:67:0F:4A:59:03:F0:E5:C0:0A:34:49
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       2E87F403B0D39352A0A1D075BD069D39D067E039
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:25:19 +0000
ROA not before:           Tue 16 Jul 2024 14:20:19 +0000
ROA not after:            Tue 15 Jul 2025 14:25:19 +0000
asID:                     22085
IP address blocks:        187.68.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:87:f4:03:b0:d3:93:52:a0:a1:d0:75:bd:06:9d:39:d0:67:e0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:20:19 2024 GMT
            Not After : Jul 15 14:25:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:7d:dc:b1:fc:70:c8:c7:1f:6d:79:aa:93:
                    54:a5:79:81:5b:54:e6:97:f1:d1:77:ba:7f:bc:b7:
                    3f:28:03:a8:f2:7e:3e:6f:58:af:aa:6f:7e:f9:28:
                    b0:b0:16:8c:66:4f:68:e8:23:17:5c:c9:60:62:2d:
                    9e:b1:34:21:d7:36:7e:47:e1:2d:6c:34:76:fd:20:
                    78:de:83:c3:0d:7d:ed:ee:30:26:ab:b0:19:26:53:
                    74:76:59:64:58:53:03:2c:47:48:56:7c:60:5d:97:
                    4c:44:42:42:c6:35:c6:b6:60:52:44:84:e5:c5:52:
                    29:3f:3d:d8:3d:17:44:46:f2:fc:35:98:7a:d3:50:
                    ed:5a:05:39:bd:b4:d5:d9:bf:8b:d7:58:3d:4b:a7:
                    5a:d9:44:13:68:ee:17:19:93:f9:a9:04:95:01:1a:
                    f0:15:29:e2:ad:7b:db:d6:a4:0e:22:8b:50:2b:c6:
                    ed:2d:da:0c:28:18:4d:9f:22:9a:ae:b6:80:91:25:
                    99:19:fb:86:af:93:d7:7a:39:39:2a:75:cf:c3:c1:
                    6a:da:04:60:cf:dc:36:fe:49:99:72:8a:fe:b2:8c:
                    72:ab:f8:f8:73:a4:3f:0c:19:e0:ce:41:78:a7:17:
                    a6:9c:84:d8:91:b4:f0:64:a6:18:37:0b:0e:b1:40:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7F:46:AE:A9:B6:5D:0E:B8:67:0F:4A:59:03:F0:E5:C0:0A:34:49
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e36382e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:85:57:bd:ac:d2:97:b6:7f:c4:bf:ca:2e:69:98:26:c2:
         c4:44:ea:bb:7d:29:b2:5f:a5:a2:7d:61:ed:4a:70:3b:2f:ac:
         c8:e6:ad:95:b0:ca:c9:c6:b1:e4:d2:6c:2d:94:c1:66:4a:b8:
         c1:39:e9:04:40:ba:72:40:35:14:65:8c:44:de:0e:3f:41:cb:
         5b:00:44:53:d7:40:ff:63:63:86:65:a0:86:7c:97:19:fe:c0:
         04:1a:13:28:98:f3:41:ea:11:d0:63:41:13:3d:52:fa:27:b1:
         1a:05:66:f7:50:05:09:01:15:54:8f:21:34:ef:0e:48:94:8e:
         3d:d4:77:4f:40:15:b8:c8:cc:46:fb:ea:f1:65:70:ba:62:b7:
         30:e1:bf:22:5d:8a:3a:44:42:fb:9f:53:69:c4:64:81:f4:67:
         1a:93:8b:de:a0:e8:6b:c8:5d:8c:8c:13:06:a3:d4:74:a5:6a:
         42:95:08:79:a9:9a:9b:db:3b:98:4d:bc:0d:90:fb:f1:0c:8d:
         25:23:ab:b9:a3:68:e5:fd:ba:09:ab:03:f2:6c:65:bd:21:90:
         f4:df:b6:aa:1a:6d:20:27:dd:63:4e:47:33:5b:e4:01:e5:c3:
         0a:5d:c0:8b:9e:52:4a:b0:09:a5:09:8f:ba:1a:bb:d8:7f:f9:
         fe:a1:48:75
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIULof0A7DTk1KgodB1vQadOdBn4DkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNDA3MTYxNDIwMTlaFw0yNTA3MTUxNDI1MTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTM4NTdERENCMUZDNzBDOEM3
MUY2RDc5QUE5MzU0QTU3OTgxNUI1NEU2OTdGMUQxNzdCQTdGQkNCNzNGMjgwM0E4
RjI3RTNFNkY1OEFGQUE2RjdFRjkyOEIwQjAxNjhDNjY0RjY4RTgyMzE3NUNDOTYw
NjIyRDlFQjEzNDIxRDczNjdFNDdFMTJENkMzNDc2RkQyMDc4REU4M0MzMEQ3REVE
RUUzMDI2QUJCMDE5MjY1Mzc0NzY1OTY0NTg1MzAzMkM0NzQ4NTY3QzYwNUQ5NzRD
NDQ0MjQyQzYzNUM2QjY2MDUyNDQ4NEU1QzU1MjI5M0YzREQ4M0QxNzQ0NDZGMkZD
MzU5ODdBRDM1MEVENUEwNTM5QkRCNEQ1RDlCRjhCRDc1ODNENEJBNzVBRDk0NDEz
NjhFRTE3MTk5M0Y5QTkwNDk1MDExQUYwMTUyOUUyQUQ3QkRCRDZBNDBFMjI4QjUw
MkJDNkVEMkREQTBDMjgxODREOUYyMjlBQUVCNjgwOTEyNTk5MTlGQjg2QUY5M0Q3
N0EzOTM5MkE3NUNGQzNDMTZBREEwNDYwQ0ZEQzM2RkU0OTk5NzI4QUZFQjI4Qzcy
QUJGOEY4NzNBNDNGMEMxOUUwQ0U0MTc4QTcxN0E2OUM4NEQ4OTFCNEYwNjRBNjE4
MzcwQjBFQjE0MDZGRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo4V93LH8cMjHH215qpNUpXmBW1Tml/HRd7p/vLc/KAOo8n4+b1iv
qm9++SiwsBaMZk9o6CMXXMlgYi2esTQh1zZ+R+EtbDR2/SB43oPDDX3t7jAmq7AZ
JlN0dllkWFMDLEdIVnxgXZdMREJCxjXGtmBSRITlxVIpPz3YPRdERvL8NZh601Dt
WgU5vbTV2b+L11g9S6da2UQTaO4XGZP5qQSVARrwFSnirXvb1qQOIotQK8btLdoM
KBhNnyKarraAkSWZGfuGr5PXejk5KnXPw8Fq2gRgz9w2/kmZcor+soxyq/j4c6Q/
DBngzkF4pxemnITYkbTwZKYYNwsOsUBv0QIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FBt/Rq6ptl0OuGcPSlkD8OXACjRJMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8xLzMxMzgzNzJlMzYzODJlMzAyZTMw
MmYzMTM0MmQzMjM0MjAzZDNlMjAzMjMyMzAzODM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCu0QwDQYJ
KoZIhvcNAQELBQADggEBAEwOhVe9rNKXtn/Ev8ouaZgmwsRE6rt9KbJfpaJ9Ye1K
cDsvrMjmrZWwysnGseTSbC2UwWZKuME56QRAunJANRRljETeDj9By1sARFPXQP9j
Y4ZloIZ8lxn+wAQaEyiY80HqEdBjQRM9UvonsRoFZvdQBQkBFVSPITTvDkiUjj3U
d09AFbjIzEb76vFlcLpitzDhvyJdijpEQvufU2nEZIH0ZxqTi96g6GvIXYyMEwaj
1HSlakKVCHmpmpvbO5hNvA2Q+/EMjSUjq7mjaOX9ugmrA/JsZb0hkPTftqoabSAn
3WNORzNb5AHlwwpdwIueUkqwCaUJj7oau9h/+f6hSHU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org