Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e32382e302f32332d3233203d3e203238313335.roa
File:                     3138372e38362e32382e302f32332d3233203d3e203238313335.roa (raw, json)
Hash identifier:          7wj0nY6NP+eKhu+1TDtbwq0ewQ0s6jW8l5Is88e5Dpk=
Subject key identifier:   C3:E1:29:76:A0:F1:8E:4F:0C:7B:71:4A:49:FE:63:43:87:F8:5C:BC
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       05D2EC4B13FCAD72D8E6DA997E08E65C6CF6796D
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e32382e302f32332d3233203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:40 +0000
ROA not before:           Thu 04 Apr 2024 20:05:40 +0000
ROA not after:            Thu 03 Apr 2025 20:10:40 +0000
asID:                     28135
IP address blocks:        187.86.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d2:ec:4b:13:fc:ad:72:d8:e6:da:99:7e:08:e6:5c:6c:f6:79:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:40 2024 GMT
            Not After : Apr  3 20:10:40 2025 GMT
        Subject: CN=C3E12976A0F18E4F0C7B714A49FE634387F85CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:dd:7c:97:49:26:6c:73:f8:d0:3a:0d:e5:
                    a2:cb:46:e6:ba:13:62:02:63:73:39:18:8d:5a:d1:
                    9b:33:47:2f:79:54:a1:9e:68:02:74:82:2f:33:58:
                    85:81:a1:01:47:26:dc:de:04:e4:ba:85:2e:92:6a:
                    96:9c:32:ad:98:95:da:bd:58:d8:7e:06:c0:2b:be:
                    92:9c:5e:ce:a1:16:ab:72:c4:41:59:0c:66:ba:40:
                    0d:fa:ec:72:c7:0b:f0:66:24:83:10:ea:b8:4e:a9:
                    f9:5b:34:48:ee:24:20:4d:06:5e:15:0a:45:71:6c:
                    2c:ab:9d:6d:d5:15:a0:1b:5c:61:c8:68:0f:59:ee:
                    c9:2a:bc:90:b6:ef:aa:e0:6a:c6:0c:74:10:a2:97:
                    77:a5:b2:ba:b8:8e:c5:c4:60:42:31:d9:e6:64:02:
                    8f:d1:a1:2f:be:23:50:27:23:a3:e4:d1:fb:05:d7:
                    78:ff:46:ce:b4:c7:f8:2c:b0:ce:dc:3f:51:bf:c7:
                    b3:37:cf:40:fd:6b:ec:57:71:1b:9e:83:6f:19:35:
                    ae:9d:6a:37:36:2c:be:0a:b2:d8:93:66:19:cd:7f:
                    fd:10:c0:c1:ef:10:5b:47:be:06:8e:63:bc:91:cf:
                    ce:a7:bf:f9:de:1f:50:26:31:9c:ee:8f:66:47:04:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E1:29:76:A0:F1:8E:4F:0C:7B:71:4A:49:FE:63:43:87:F8:5C:BC
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e32382e302f32332d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:56:6a:8b:ff:0f:9d:b3:0e:e6:92:a0:fd:ea:66:0c:fc:db:
         4e:42:73:a8:de:bf:74:41:90:a6:a8:9b:2e:40:31:8a:c1:0a:
         aa:4a:94:36:38:16:12:e0:9d:4d:56:8a:72:2f:e3:66:cc:6b:
         70:ed:0f:ab:ed:d3:39:1c:f7:93:33:6b:fa:54:69:7c:e5:ab:
         ea:1e:e9:f5:f1:19:5c:a1:eb:3c:1d:51:00:73:22:60:cf:93:
         03:b1:98:dd:9c:2d:e7:b0:27:01:f6:99:c1:ac:5b:8a:df:45:
         51:79:ea:29:27:76:80:78:6c:61:97:fe:fa:1b:0f:72:67:f1:
         05:8e:c3:ac:b8:c1:fe:61:23:18:f8:98:bf:45:31:61:29:c7:
         04:b3:6a:35:e5:4c:b7:1c:d3:3f:90:0d:1b:91:9f:d9:0a:28:
         ce:c8:a9:a7:1f:4e:70:52:51:5f:72:6b:b3:38:48:1a:93:59:
         cb:1a:b0:2b:c1:bd:66:f4:55:83:89:55:c6:c4:40:55:bd:bf:
         08:61:2d:d8:cd:22:46:d0:51:04:74:8d:31:32:dc:24:ed:3e:
         9e:10:09:d1:30:ce:9b:28:17:70:3b:6e:1e:e7:d9:cd:eb:19:
         49:e1:63:cb:67:63:70:bb:28:1b:bb:62:6d:71:a3:b5:16:b0:
         e3:c7:7c:ca
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBdLsSxP8rXLY5tqZfgjmXGz2eW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QjkyREY3OEU3MEIzOTAzNzZGQzk5RTgzMjQyODYw
MEVFREZCNzAeFw0yNDA0MDQyMDA1NDBaFw0yNTA0MDMyMDEwNDBaMDMxMTAvBgNV
BAMTKEMzRTEyOTc2QTBGMThFNEYwQzdCNzE0QTQ5RkU2MzQzODdGODVDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgN18l0kmbHP40DoN5aLLRua6
E2ICY3M5GI1a0ZszRy95VKGeaAJ0gi8zWIWBoQFHJtzeBOS6hS6SapacMq2Yldq9
WNh+BsArvpKcXs6hFqtyxEFZDGa6QA367HLHC/BmJIMQ6rhOqflbNEjuJCBNBl4V
CkVxbCyrnW3VFaAbXGHIaA9Z7skqvJC276rgasYMdBCil3elsrq4jsXEYEIx2eZk
Ao/RoS++I1AnI6Pk0fsF13j/Rs60x/gssM7cP1G/x7M3z0D9a+xXcRueg28ZNa6d
ajc2LL4KstiTZhnNf/0QwMHvEFtHvgaOY7yRz86nv/neH1AmMZzuj2ZHBALTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUw+EpdqDxjk8Me3FKSf5jQ4f4XLwwHwYDVR0j
BBgwFoAUzWuS33jnCzkDdvyZ6DJChgDu37cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhuaU1udjh5OUVtSkNqeDJ1dTlCV0M5MUw2VGR5bkZIRzhVZ05ab3c3
YVovMS9DRDZCOTJERjc4RTcwQjM5MDM3NkZDOTlFODMyNDI4NjAwRUVERkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENkI5MkRGNzhFNzBCMzkw
Mzc2RkM5OUU4MzI0Mjg2MDBFRURGQjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYbmlNbnY4eTlFbUpDangydXU5QldDOTFMNlRkeW5GSEc4VWdOWm93N2FaLzEv
MzEzODM3MmUzODM2MmUzMjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMx
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbtWHDANBgkqhkiG9w0BAQsFAAOCAQEAQFZqi/8PnbMO
5pKg/epmDPzbTkJzqN6/dEGQpqibLkAxisEKqkqUNjgWEuCdTVaKci/jZsxrcO0P
q+3TORz3kzNr+lRpfOWr6h7p9fEZXKHrPB1RAHMiYM+TA7GY3Zwt57AnAfaZwaxb
it9FUXnqKSd2gHhsYZf++hsPcmfxBY7DrLjB/mEjGPiYv0UxYSnHBLNqNeVMtxzT
P5ANG5Gf2Qoozsippx9OcFJRX3JrszhIGpNZyxqwK8G9ZvRVg4lVxsRAVb2/CGEt
2M0iRtBRBHSNMTLcJO0+nhAJ0TDOmygXcDtuHufZzesZSeFjy2djcLsoG7tibXGj
tRaw48d8yg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org