Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e322e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e322e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          whE/ytsHighzBmPclqrcLqJ8kLjxynAwCTiaOBFA2lY=
Subject key identifier:   6E:1B:D8:56:8F:C6:9C:5C:CE:56:CC:CA:4E:A5:7E:0D:A9:01:B3:5F
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       4E9FE1B1D2FDFDD4E4B4A4FBDDD462968DA7D088
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e322e302f32342d3234203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:43 +0000
ROA not before:           Thu 04 Apr 2024 20:05:43 +0000
ROA not after:            Thu 03 Apr 2025 20:10:43 +0000
asID:                     28135
IP address blocks:        187.86.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9f:e1:b1:d2:fd:fd:d4:e4:b4:a4:fb:dd:d4:62:96:8d:a7:d0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:43 2024 GMT
            Not After : Apr  3 20:10:43 2025 GMT
        Subject: CN=6E1BD8568FC69C5CCE56CCCA4EA57E0DA901B35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:17:70:12:e8:6b:b1:4b:0f:a0:20:52:a7:
                    3e:b8:87:4f:15:27:86:4e:1e:ed:23:4b:9c:57:2e:
                    4f:22:43:91:1a:72:4c:64:59:dc:31:ab:29:7b:30:
                    f6:ae:fc:91:37:43:ad:ee:22:5c:75:80:4d:96:e3:
                    6d:fb:f3:d5:a9:6a:31:e5:9b:8b:82:74:ba:29:65:
                    df:0b:de:a8:16:1d:8f:f8:22:a1:98:d6:0b:dc:59:
                    1b:82:47:62:04:10:13:f2:ef:5a:f4:54:e5:e2:72:
                    31:4d:d1:f4:92:00:ea:e0:84:1b:38:51:6f:ee:e4:
                    51:dd:9a:a8:da:c4:a0:61:4c:2c:65:61:33:3a:36:
                    0a:58:ad:e3:55:19:42:80:a1:fe:04:c9:20:05:39:
                    2b:13:06:10:c3:a5:96:a3:e3:66:29:ef:97:e2:eb:
                    23:a1:b3:2c:f5:81:ab:36:84:77:45:87:5c:73:24:
                    6b:ea:bf:da:96:ae:d6:85:76:48:53:c4:15:ec:ac:
                    2a:89:ec:19:23:b3:fb:b3:b8:85:f3:4b:97:ea:39:
                    4e:74:63:2e:5e:66:fb:69:0f:a6:dd:63:e0:3d:8b:
                    a5:40:63:07:27:7a:f0:c3:8f:66:d2:31:86:35:28:
                    0d:35:c3:d0:34:a2:d8:43:6b:49:33:e8:8c:6d:48:
                    0b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1B:D8:56:8F:C6:9C:5C:CE:56:CC:CA:4E:A5:7E:0D:A9:01:B3:5F
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e322e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:6d:a4:aa:8e:23:13:f6:04:0f:b6:09:0f:c5:f3:e3:b5:
         26:a6:bd:b1:ff:54:a1:1b:a1:45:59:af:6d:22:3a:21:b7:40:
         07:07:0e:4a:79:e4:89:b6:4d:37:c8:16:95:7b:66:74:ac:0c:
         ad:73:5f:28:fd:d9:10:62:d7:37:55:e0:17:99:73:0b:bd:8f:
         69:c8:f9:87:2e:87:88:e1:ee:e5:f3:31:38:34:c1:6b:88:d2:
         ef:18:d6:4a:4e:57:69:f2:60:4c:1c:b4:d0:92:d0:0a:4c:75:
         5a:4e:6e:7a:af:58:b0:d1:92:1a:13:d2:19:59:43:ce:56:ab:
         a8:46:76:b9:2a:32:fc:c2:99:69:92:c1:5d:53:a1:88:5a:b6:
         e0:f0:74:4a:14:27:ed:61:f7:d5:d4:a7:7d:b6:99:73:f0:b8:
         fc:cc:15:65:63:84:0b:fc:de:54:ba:ca:1e:69:85:8c:be:f9:
         1f:c8:70:3c:5b:28:d2:6d:ba:b9:81:b4:51:b3:c6:aa:5e:88:
         a5:a1:0e:b8:9b:8a:20:11:2b:63:48:09:60:bd:b7:ed:72:ae:
         91:6b:6f:a8:66:86:16:2a:b2:60:79:2f:cd:a6:be:7e:9f:9a:
         29:45:f0:02:05:72:67:a0:32:19:f0:5e:8f:86:ca:c9:6f:56:
         1a:2a:89:71
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTp/hsdL9/dTktKT73dRilo2n0IgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QjkyREY3OEU3MEIzOTAzNzZGQzk5RTgzMjQyODYw
MEVFREZCNzAeFw0yNDA0MDQyMDA1NDNaFw0yNTA0MDMyMDEwNDNaMDMxMTAvBgNV
BAMTKDZFMUJEODU2OEZDNjlDNUNDRTU2Q0NDQTRFQTU3RTBEQTkwMUIzNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mRdwEuhrsUsPoCBSpz64h08V
J4ZOHu0jS5xXLk8iQ5EackxkWdwxqyl7MPau/JE3Q63uIlx1gE2W423789WpajHl
m4uCdLopZd8L3qgWHY/4IqGY1gvcWRuCR2IEEBPy71r0VOXicjFN0fSSAOrghBs4
UW/u5FHdmqjaxKBhTCxlYTM6NgpYreNVGUKAof4EySAFOSsTBhDDpZaj42Yp75fi
6yOhsyz1gas2hHdFh1xzJGvqv9qWrtaFdkhTxBXsrCqJ7Bkjs/uzuIXzS5fqOU50
Yy5eZvtpD6bdY+A9i6VAYwcnevDDj2bSMYY1KA01w9A0othDa0kz6IxtSAvLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUbhvYVo/GnFzOVszKTqV+DakBs18wHwYDVR0j
BBgwFoAUzWuS33jnCzkDdvyZ6DJChgDu37cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMS9DRDZCOTJERjc4RTcwQjM5MDM3NkZDOTlFODMyNDI4NjAwRUVERkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkI5MkRGNzhFNzBCMzkw
Mzc2RkM5OUU4MzI0Mjg2MDBFRURGQjcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzEv
MzEzODM3MmUzODM2MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMTMz
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC7VgIwDQYJKoZIhvcNAQELBQADggEBAE0RbaSqjiMT9gQP
tgkPxfPjtSamvbH/VKEboUVZr20iOiG3QAcHDkp55Im2TTfIFpV7ZnSsDK1zXyj9
2RBi1zdV4BeZcwu9j2nI+Ycuh4jh7uXzMTg0wWuI0u8Y1kpOV2nyYEwctNCS0ApM
dVpObnqvWLDRkhoT0hlZQ85Wq6hGdrkqMvzCmWmSwV1ToYhatuDwdEoUJ+1h99XU
p322mXPwuPzMFWVjhAv83lS6yh5phYy++R/IcDxbKNJturmBtFGzxqpeiKWhDrib
iiARK2NICWC9t+1yrpFrb6hmhhYqsmB5L82mvn6fmilF8AIFcmegMhnwXo+Gyslv
VhoqiXE=
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org