Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa
File:                     3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa (raw, json)
Hash identifier:          Ugyt+b+EoMGSK/0sOugvyrosdwGl+fgElv3vU5hBGU0=
Subject key identifier:   45:73:BF:B8:10:28:35:E9:E4:22:18:D0:0A:3C:C4:98:D7:31:D5:62
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       0879F037DEF06EB5D4CCA2C5889AE06ED2A1C222
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 00:58:46 +0000
ROA not before:           Wed 20 Nov 2024 00:53:46 +0000
ROA not after:            Wed 19 Nov 2025 00:58:46 +0000
asID:                     61621
IP address blocks:        186.209.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:79:f0:37:de:f0:6e:b5:d4:cc:a2:c5:88:9a:e0:6e:d2:a1:c2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 00:53:46 2024 GMT
            Not After : Nov 19 00:58:46 2025 GMT
        Subject: CN=4573BFB8102835E9E42218D00A3CC498D731D562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:72:4d:f5:b8:a9:06:4a:ed:f0:2f:f6:88:
                    f0:b4:77:27:6f:d8:48:31:2f:e6:9d:4e:5c:f9:1a:
                    10:b2:ef:3f:e4:df:98:22:10:1e:36:ce:68:40:2a:
                    49:35:0e:01:0d:c8:ca:e4:c7:dd:aa:2a:91:5d:91:
                    b9:42:66:13:3a:76:e9:d5:bf:21:88:e2:ba:fa:cd:
                    17:3d:a5:a8:e0:59:64:6d:48:f0:f2:fc:af:60:3f:
                    d3:58:0e:5e:fa:59:eb:43:64:1a:33:f4:f9:c1:2f:
                    f3:aa:87:70:30:75:80:98:95:aa:49:ed:3a:2f:4b:
                    64:81:0a:e2:56:65:c2:8c:f6:3e:0b:2a:cf:e3:6c:
                    dd:17:59:28:04:b1:6e:5e:4b:a4:2f:ed:10:d9:98:
                    8a:14:07:1e:48:2a:c4:9f:6e:c3:02:05:b0:a8:ce:
                    f4:2f:42:2b:ea:c3:1d:c3:85:b7:75:4d:7f:d1:43:
                    62:ea:60:ad:ba:ae:c4:4f:c9:ee:a8:34:ec:4b:d1:
                    f8:5c:34:d7:c8:a6:18:03:5a:10:05:69:b6:8f:c6:
                    88:c3:a4:82:56:83:c4:db:fb:0a:63:5b:4f:04:67:
                    00:ea:5d:d5:39:5d:99:91:a7:9c:a8:fc:95:18:7e:
                    ab:dd:ab:8d:de:2e:26:67:ca:f4:b9:f6:13:86:6e:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:73:BF:B8:10:28:35:E9:E4:22:18:D0:0A:3C:C4:98:D7:31:D5:62
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3232322e302f32332d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:46:18:74:4f:32:fe:8a:2c:c1:8d:f6:0c:7d:01:fe:9a:
         96:b2:21:9f:15:b5:ee:58:dc:7b:8e:ab:17:d0:f9:c9:8e:53:
         e0:5f:88:49:31:00:fc:c4:37:13:d2:a4:6f:d0:6f:1d:3b:cc:
         21:a8:23:ec:f6:8e:ff:25:17:7d:67:b7:fd:7f:dd:4c:8f:32:
         0b:14:03:82:2e:3d:51:d5:3f:76:f0:9b:af:ca:04:73:46:4b:
         be:11:2c:96:91:e2:ef:e7:ee:9c:62:b6:99:4f:5b:0e:97:f1:
         7d:c1:a9:27:6a:ab:bf:f0:1a:ae:ca:22:2b:7f:af:25:9d:17:
         3a:dd:54:39:11:0e:b1:a8:05:50:1e:95:38:cc:6d:3f:a9:b2:
         4a:5e:d8:22:9c:9e:38:ce:a9:ac:54:5a:4c:97:21:cb:72:16:
         ec:64:83:49:f8:53:6a:54:48:02:6d:4f:85:83:fe:a3:5d:41:
         18:8d:98:d8:d3:d9:65:de:93:b6:31:ef:b9:2c:d1:d1:56:5a:
         15:f4:88:ee:4c:6d:ce:22:02:38:7c:96:e2:c1:76:f8:af:a1:
         b4:b3:83:cf:38:8e:ca:70:3d:3e:0a:1d:bd:a0:cf:54:2b:7a:
         eb:bb:b8:3e:a4:fa:76:f5:91:af:17:4c:cc:90:42:96:3c:bd:
         b9:cf:f8:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCHnwN97wbrXUzKLFiJrgbtKhwiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3QkE5Mjk0NDY0QkUwMUI0QzJBNTAwNzA4REQ1NUNB
ODc5NTg0RDAeFw0yNDExMjAwMDUzNDZaFw0yNTExMTkwMDU4NDZaMDMxMTAvBgNV
BAMTKDQ1NzNCRkI4MTAyODM1RTlFNDIyMThEMDBBM0NDNDk4RDczMUQ1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK3JN9bipBkrt8C/2iPC0dydv
2EgxL+adTlz5GhCy7z/k35giEB42zmhAKkk1DgENyMrkx92qKpFdkblCZhM6dunV
vyGI4rr6zRc9pajgWWRtSPDy/K9gP9NYDl76WetDZBoz9PnBL/Oqh3AwdYCYlapJ
7TovS2SBCuJWZcKM9j4LKs/jbN0XWSgEsW5eS6Qv7RDZmIoUBx5IKsSfbsMCBbCo
zvQvQivqwx3Dhbd1TX/RQ2LqYK26rsRPye6oNOxL0fhcNNfIphgDWhAFabaPxojD
pIJWg8Tb+wpjW08EZwDqXdU5XZmRp5yo/JUYfqvdq43eLiZnyvS59hOGbuWRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURXO/uBAoNenkIhjQCjzEmNcx1WIwHwYDVR0j
BBgwFoAUPHupKURkvgG0wqUAcI3VXKh5WE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC8zQzdCQTkyOTQ0NjRCRTAxQjRDMkE1MDA3MDhERDU1Q0E4Nzk1ODRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0JBOTI5NDQ2NEJFMDFC
NEMyQTUwMDcwOERENTVDQTg3OTU4NEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzEzODM2MmUzMjMwMzkyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2
MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG60d4wDQYJKoZIhvcNAQELBQADggEBACDVRhh0
TzL+iizBjfYMfQH+mpayIZ8Vte5Y3HuOqxfQ+cmOU+BfiEkxAPzENxPSpG/Qbx07
zCGoI+z2jv8lF31nt/1/3UyPMgsUA4IuPVHVP3bwm6/KBHNGS74RLJaR4u/n7pxi
tplPWw6X8X3BqSdqq7/wGq7KIit/ryWdFzrdVDkRDrGoBVAelTjMbT+pskpe2CKc
njjOqaxUWkyXIctyFuxkg0n4U2pUSAJtT4WD/qNdQRiNmNjT2WXek7Yx77ks0dFW
WhX0iO5Mbc4iAjh8luLBdvivobSzg884jspwPT4KHb2gz1Qreuu7uD6k+nb1ka8X
TMyQQpY8vbnP+O4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:16 2024 by rpki-client on console-ams.rpki-client.org