Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e31382e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e31382e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          xzEFbsLXHPEEskvhqHkhihfXNovhTALYC9e7pnbEU7o=
Subject key identifier:   E0:1C:DD:04:E3:DC:F8:CC:48:6E:FE:FF:B9:7A:3C:61:57:09:D0:F2
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       32984758823E8932D1A0731393C23E04E68C201F
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e31382e302f32342d3234203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:42 +0000
ROA not before:           Thu 04 Apr 2024 20:05:42 +0000
ROA not after:            Thu 03 Apr 2025 20:10:42 +0000
asID:                     28135
IP address blocks:        187.86.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:98:47:58:82:3e:89:32:d1:a0:73:13:93:c2:3e:04:e6:8c:20:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:42 2024 GMT
            Not After : Apr  3 20:10:42 2025 GMT
        Subject: CN=E01CDD04E3DCF8CC486EFEFFB97A3C615709D0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:0f:23:b4:76:ff:3e:36:31:a2:e7:99:5c:
                    31:fd:c0:56:01:8e:a3:bb:27:77:d1:66:23:09:67:
                    e4:97:52:6c:9c:3e:97:56:12:0f:19:7d:26:29:b8:
                    dd:f9:8f:9c:11:07:92:5e:cb:97:87:df:ee:76:22:
                    e4:cc:a4:38:2c:f1:d6:05:c0:90:80:70:cb:f8:0f:
                    69:85:3b:35:c2:15:4f:18:94:2e:c1:cb:42:64:c1:
                    4d:c0:11:ec:55:23:28:b1:72:26:f1:77:11:a3:0b:
                    5b:09:6e:95:05:03:9e:7c:e0:f4:94:93:47:a4:87:
                    d0:2f:13:6a:ef:87:c0:e1:c4:a8:ba:aa:88:23:bc:
                    68:77:6c:5a:8e:0a:c7:3a:2b:cc:f5:e6:37:a7:11:
                    d1:38:dd:ec:2c:c9:46:4f:ad:7b:17:7f:2c:fa:70:
                    b2:b6:19:d7:10:9c:54:6b:1c:92:7c:6f:c9:6d:58:
                    19:37:3d:43:f0:a7:5c:44:58:c5:2b:ad:fa:e3:e1:
                    d5:08:a2:cf:f1:fb:08:4b:b9:7f:aa:c1:22:02:2e:
                    95:30:81:97:a6:f8:dd:12:11:71:ba:ed:86:bc:27:
                    d1:91:d2:b1:8d:04:83:dc:b8:d8:4b:2e:bf:6d:7d:
                    a2:a2:93:ea:eb:38:80:0c:4e:0d:7c:74:74:11:16:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:DD:04:E3:DC:F8:CC:48:6E:FE:FF:B9:7A:3C:61:57:09:D0:F2
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e31382e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:ea:ae:29:f7:c4:21:ec:82:71:51:60:35:cc:f6:4c:b5:
         67:1b:62:d5:68:88:16:5e:3e:1c:89:76:fb:ba:82:a6:59:10:
         20:69:69:ce:40:b4:9e:50:a5:2f:53:54:35:c2:86:98:78:c7:
         71:a2:86:c5:97:7b:f4:e4:8c:f3:71:63:a5:d4:06:10:a9:fb:
         10:f0:56:73:b4:95:15:a7:06:a8:58:e7:14:9e:2b:5c:13:a3:
         00:78:62:94:71:ac:6e:b4:bc:86:da:df:ea:9d:07:e6:65:2f:
         13:66:de:e6:48:9d:90:47:15:31:27:80:d8:01:52:41:36:c7:
         d9:18:e8:33:91:8b:99:d1:58:b0:a6:81:c4:fa:5a:b2:94:8d:
         d1:d5:6a:bb:d9:40:98:f6:44:6b:65:07:68:ce:64:b1:6c:93:
         bc:81:ae:9f:e0:10:db:69:dd:eb:3b:9e:9c:ba:98:31:80:89:
         a5:bf:69:ed:ba:a4:25:60:4e:34:e3:18:f7:ed:a2:18:48:c1:
         7a:9c:e1:66:79:de:c5:91:71:09:7d:5c:c0:c9:9a:4e:83:08:
         2e:ac:33:b8:16:7d:97:99:5b:22:4b:cc:69:6e:56:c5:1f:d1:
         8f:62:6a:58:5c:75:fb:00:f3:f7:0a:d3:41:12:f3:40:8f:4e:
         50:12:24:6e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMphHWII+iTLRoHMTk8I+BOaMIB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QjkyREY3OEU3MEIzOTAzNzZGQzk5RTgzMjQyODYw
MEVFREZCNzAeFw0yNDA0MDQyMDA1NDJaFw0yNTA0MDMyMDEwNDJaMDMxMTAvBgNV
BAMTKEUwMUNERDA0RTNEQ0Y4Q0M0ODZFRkVGRkI5N0EzQzYxNTcwOUQwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRw8jtHb/PjYxoueZXDH9wFYB
jqO7J3fRZiMJZ+SXUmycPpdWEg8ZfSYpuN35j5wRB5Jey5eH3+52IuTMpDgs8dYF
wJCAcMv4D2mFOzXCFU8YlC7By0JkwU3AEexVIyixcibxdxGjC1sJbpUFA5584PSU
k0ekh9AvE2rvh8DhxKi6qogjvGh3bFqOCsc6K8z15jenEdE43ewsyUZPrXsXfyz6
cLK2GdcQnFRrHJJ8b8ltWBk3PUPwp1xEWMUrrfrj4dUIos/x+whLuX+qwSICLpUw
gZem+N0SEXG67Ya8J9GR0rGNBIPcuNhLLr9tfaKik+rrOIAMTg18dHQRFmVBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4BzdBOPc+MxIbv7/uXo8YVcJ0PIwHwYDVR0j
BBgwFoAUzWuS33jnCzkDdvyZ6DJChgDu37cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMS9DRDZCOTJERjc4RTcwQjM5MDM3NkZDOTlFODMyNDI4NjAwRUVERkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkI5MkRGNzhFNzBCMzkw
Mzc2RkM5OUU4MzI0Mjg2MDBFRURGQjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzEv
MzEzODM3MmUzODM2MmUzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALtWEjANBgkqhkiG9w0BAQsFAAOCAQEAeanqrin3xCHs
gnFRYDXM9ky1Zxti1WiIFl4+HIl2+7qCplkQIGlpzkC0nlClL1NUNcKGmHjHcaKG
xZd79OSM83FjpdQGEKn7EPBWc7SVFacGqFjnFJ4rXBOjAHhilHGsbrS8htrf6p0H
5mUvE2be5kidkEcVMSeA2AFSQTbH2RjoM5GLmdFYsKaBxPpaspSN0dVqu9lAmPZE
a2UHaM5ksWyTvIGun+AQ22nd6zuenLqYMYCJpb9p7bqkJWBONOMY9+2iGEjBepzh
ZnnexZFxCX1cwMmaToMILqwzuBZ9l5lbIkvMaW5WxR/Rj2JqWFx1+wDz9wrTQRLz
QI9OUBIkbg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org