Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa
File:                     3138362e3232362e302e302f32302d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          k5ChPtKigThg/TdW5c3GhnR3Tsp/2Tuw0kOZXaCpAss=
Subject key identifier:   B3:B9:89:2B:72:BE:EC:ED:27:54:35:13:E6:FB:31:0E:12:FB:16:3C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       54E6D9D2E52E53614CEDFA6C8A51DA2AB06786DD
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 15:07:27 +0000
ROA not before:           Mon 09 Sep 2024 15:02:27 +0000
ROA not after:            Mon 08 Sep 2025 15:07:27 +0000
asID:                     262773
IP address blocks:        186.226.0.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e6:d9:d2:e5:2e:53:61:4c:ed:fa:6c:8a:51:da:2a:b0:67:86:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 15:02:27 2024 GMT
            Not After : Sep  8 15:07:27 2025 GMT
        Subject: CN=B3B9892B72BEECED27543513E6FB310E12FB163C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:42:e1:3a:c5:f0:e3:7d:0c:3c:98:6d:c2:5a:
                    62:62:19:c6:fc:e9:d7:3b:fa:93:7b:9a:6f:e7:40:
                    b5:16:26:93:34:00:44:61:f1:3e:0c:fb:f4:a7:d2:
                    28:8b:a7:8d:89:14:e1:31:11:d2:3b:e8:f2:fa:b0:
                    de:3e:2d:97:30:02:22:46:ee:4c:69:41:2f:01:c4:
                    bd:a0:e0:25:82:d5:7c:68:c6:36:26:48:5c:96:47:
                    6a:07:1c:c9:b9:d7:0d:88:79:77:a1:f7:8a:d9:00:
                    15:52:8b:90:54:cb:b9:50:38:c0:46:c7:4d:c7:40:
                    e1:de:9e:a8:4d:1e:7d:5b:c9:50:03:e5:07:ff:2f:
                    66:52:57:cb:4d:b9:6d:01:c1:a0:46:a5:b6:73:5e:
                    ef:83:81:cf:36:24:c9:a3:92:f9:6a:9d:90:65:b6:
                    a7:df:dc:6e:00:78:c3:e3:06:bd:98:bb:a4:78:ef:
                    ae:19:0a:d1:c7:ed:0e:88:34:30:95:2d:3b:14:a8:
                    94:c2:f0:cc:82:42:e3:7a:89:53:7a:60:e4:40:2f:
                    44:76:66:31:39:9e:54:32:22:07:55:f7:fc:7f:15:
                    df:f1:7e:69:67:06:51:dc:47:e1:e7:68:da:cd:36:
                    4f:e5:99:54:78:30:f8:47:09:f4:fc:21:97:06:99:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B9:89:2B:72:BE:EC:ED:27:54:35:13:E6:FB:31:0E:12:FB:16:3C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138362e3232362e302e302f32302d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:8a:bd:ff:a6:3f:81:26:ed:49:8d:6e:c2:44:c3:5a:0f:
         60:1e:d7:b2:a8:e8:47:4c:28:67:8b:ce:79:03:ff:d0:d2:7e:
         eb:4f:a2:39:f5:d4:36:32:6d:af:dc:a1:1f:f2:13:09:7d:fd:
         d2:07:22:7c:c0:dc:8e:78:7f:f2:ec:ce:21:89:c6:7b:f8:b5:
         df:88:66:fb:52:d3:d4:15:24:7e:f4:79:6e:17:2c:b8:30:05:
         66:b4:5a:4f:e5:b3:a1:87:4f:36:07:91:11:61:68:35:05:4f:
         29:1a:7f:a4:17:0e:fd:e0:d3:52:98:ca:0c:d7:99:ac:2d:f8:
         40:bd:99:d0:98:8a:f0:8a:b7:b5:fe:9a:a2:4d:bc:74:b1:ce:
         cf:12:68:90:93:0c:3c:31:51:44:58:6c:67:f8:34:ed:01:9e:
         fc:45:ae:27:74:fb:6c:69:9e:17:43:b1:20:8b:21:ef:a0:35:
         61:5f:48:0e:bd:62:5f:3a:a8:3d:47:fc:3b:b9:b6:a5:9b:c9:
         1e:cb:71:54:b2:56:08:4e:cc:e0:30:5a:00:3f:11:d2:c0:c9:
         c3:4f:9f:79:bd:f1:57:d6:6d:0e:46:9e:45:0b:fe:7e:9b:42:
         1a:00:84:25:6a:ff:1b:e7:3c:60:39:8a:18:40:19:e7:30:21:
         42:54:16:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVObZ0uUuU2FM7fpsilHaKrBnht0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA5MDkxNTAyMjdaFw0yNTA5MDgxNTA3MjdaMDMxMTAvBgNV
BAMTKEIzQjk4OTJCNzJCRUVDRUQyNzU0MzUxM0U2RkIzMTBFMTJGQjE2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQuE6xfDjfQw8mG3CWmJiGcb8
6dc7+pN7mm/nQLUWJpM0AERh8T4M+/Sn0iiLp42JFOExEdI76PL6sN4+LZcwAiJG
7kxpQS8BxL2g4CWC1XxoxjYmSFyWR2oHHMm51w2IeXeh94rZABVSi5BUy7lQOMBG
x03HQOHenqhNHn1byVAD5Qf/L2ZSV8tNuW0BwaBGpbZzXu+Dgc82JMmjkvlqnZBl
tqff3G4AeMPjBr2Yu6R4764ZCtHH7Q6INDCVLTsUqJTC8MyCQuN6iVN6YORAL0R2
ZjE5nlQyIgdV9/x/Fd/xfmlnBlHcR+HnaNrNNk/lmVR4MPhHCfT8IZcGmcKLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs7mJK3K+7O0nVDUT5vsxDhL7FjwwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzODM2MmUzMjMyMzYyZTMwMmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzNjMy
MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuIAMA0GCSqGSIb3DQEBCwUAA4IBAQB45Iq9/6Y/
gSbtSY1uwkTDWg9gHteyqOhHTChni855A//Q0n7rT6I59dQ2Mm2v3KEf8hMJff3S
ByJ8wNyOeH/y7M4hicZ7+LXfiGb7UtPUFSR+9HluFyy4MAVmtFpP5bOhh082B5ER
YWg1BU8pGn+kFw794NNSmMoM15msLfhAvZnQmIrwire1/pqiTbx0sc7PEmiQkww8
MVFEWGxn+DTtAZ78Ra4ndPtsaZ4XQ7EgiyHvoDVhX0gOvWJfOqg9R/w7ubalm8ke
y3FUslYITszgMFoAPxHSwMnDT595vfFX1m0ORp5FC/5+m0IaAIQlav8b5zxgOYoY
QBnnMCFCVBYR
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org