Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa
File:                     3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa (raw, json)
Hash identifier:          Fy9HQDKKeZUOsm3GyQVN2g2mZjyZf+uYdN5F8MPFRMs=
Subject key identifier:   5E:CB:6D:22:BD:58:15:B4:A2:4E:7A:11:2B:EC:13:CE:0D:43:B1:CA
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       43AF1155D24AC27BD94B8D4C38B414A2F912F33C
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa
Signing time:             Thu 01 Aug 2024 20:04:14 +0000
ROA not before:           Thu 01 Aug 2024 19:59:14 +0000
ROA not after:            Thu 31 Jul 2025 20:04:14 +0000
asID:                     28140
IP address blocks:        187.103.208.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:af:11:55:d2:4a:c2:7b:d9:4b:8d:4c:38:b4:14:a2:f9:12:f3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Aug  1 19:59:14 2024 GMT
            Not After : Jul 31 20:04:14 2025 GMT
        Subject: CN=5ECB6D22BD5815B4A24E7A112BEC13CE0D43B1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:33:25:92:78:3b:24:3f:16:64:f3:ed:15:
                    57:08:ba:7d:ad:19:78:13:03:5e:84:2c:4a:9a:ea:
                    2e:82:5c:5a:6d:05:80:31:7d:3f:e6:05:15:23:23:
                    ec:64:84:52:30:75:33:66:5a:05:db:7f:2e:4c:85:
                    7d:f1:39:ec:a2:2c:f8:d7:2b:21:4a:47:d5:56:53:
                    19:a1:d2:32:5f:83:41:2a:57:30:47:56:d4:0e:5f:
                    be:f2:37:96:8d:7c:bc:ea:5a:26:22:45:01:d5:43:
                    f9:c3:1d:47:85:73:66:8b:d2:52:f4:2c:22:24:9b:
                    a5:9e:8e:68:ca:0c:1f:ef:1d:8a:dc:5e:4a:e6:6d:
                    80:9d:bb:9a:8f:a5:68:02:13:b7:95:f0:7f:2d:ae:
                    c0:e0:24:d3:70:0c:e8:a1:76:b9:f6:04:be:fa:fb:
                    78:4b:d1:69:4c:7c:d4:49:98:9b:f1:95:1c:be:23:
                    5b:43:d1:53:fb:86:e5:3b:f0:da:47:ae:10:f3:cd:
                    f4:f3:81:23:f9:da:a6:b2:50:1c:66:58:b6:dd:1f:
                    b2:79:82:6e:5d:34:cf:ba:d6:20:8d:91:1c:b8:09:
                    7b:03:25:86:e9:6d:91:83:93:b2:78:a5:31:eb:14:
                    05:37:da:8e:13:89:fa:92:4c:20:12:e2:59:f1:f5:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CB:6D:22:BD:58:15:B4:A2:4E:7A:11:2B:EC:13:CE:0D:43:B1:CA
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/3138372e3130332e3230382e302f32302d3332203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:2c:73:e4:50:1c:e3:90:c0:c4:e9:e9:1a:b3:8a:19:58:
         f1:c2:04:d5:62:ef:52:62:5a:8b:ec:ef:50:a5:91:f5:d1:4b:
         44:6f:16:ed:7e:af:a3:bf:8d:47:42:de:44:45:f5:af:f2:7e:
         8b:d2:c3:33:20:5f:2a:37:1e:20:84:ec:86:f5:76:1c:06:e6:
         b3:26:c4:de:88:3f:13:3c:79:fc:56:6f:f1:93:fe:b5:e2:a4:
         fa:9c:6d:5b:87:1e:53:66:db:01:dc:6d:49:d7:bb:4e:bf:2b:
         69:5f:e0:c2:a8:11:38:33:7a:05:b3:b5:b8:76:b1:fc:cf:43:
         93:54:82:21:df:70:78:22:c5:e7:ca:bd:54:74:65:3d:08:61:
         a5:f6:9c:07:cd:35:92:62:5d:a1:d0:3d:1c:90:8c:d7:f8:aa:
         6e:c5:c7:19:6e:6f:37:e3:35:79:3b:1a:6a:c8:78:2c:f4:30:
         c3:45:11:f0:61:68:05:76:ee:6f:6c:87:be:b7:78:3a:30:1a:
         13:0b:c9:a9:c6:16:4b:ee:21:99:58:7d:af:ea:17:4d:51:90:
         2d:dc:b0:76:ff:91:d4:10:a9:34:41:1a:b3:a2:47:25:cf:b7:
         b3:0c:4b:d3:71:6d:de:e8:98:ec:e6:52:b4:6f:6e:aa:f2:89:
         aa:ff:ff:11
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ68RVdJKwnvZS41MOLQUovkS8zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5RjczNDQ4Njk0NjQ5QzRGOTg4RDk4QTBGMTI3NTdB
NjkxM0MyRDAeFw0yNDA4MDExOTU5MTRaFw0yNTA3MzEyMDA0MTRaMDMxMTAvBgNV
BAMTKDVFQ0I2RDIyQkQ1ODE1QjRBMjRFN0ExMTJCRUMxM0NFMEQ0M0IxQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoDMlkng7JD8WZPPtFVcIun2t
GXgTA16ELEqa6i6CXFptBYAxfT/mBRUjI+xkhFIwdTNmWgXbfy5MhX3xOeyiLPjX
KyFKR9VWUxmh0jJfg0EqVzBHVtQOX77yN5aNfLzqWiYiRQHVQ/nDHUeFc2aL0lL0
LCIkm6WejmjKDB/vHYrcXkrmbYCdu5qPpWgCE7eV8H8trsDgJNNwDOihdrn2BL76
+3hL0WlMfNRJmJvxlRy+I1tD0VP7huU78NpHrhDzzfTzgSP52qayUBxmWLbdH7J5
gm5dNM+61iCNkRy4CXsDJYbpbZGDk7J4pTHrFAU32o4TifqSTCAS4lnx9UmVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXsttIr1YFbSiTnoRK+wTzg1DscowHwYDVR0j
BBgwFoAUnZ9zRIaUZJxPmI2YoPEnV6aRPC0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjhVd3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3
aUovMS85RDlGNzM0NDg2OTQ2NDlDNEY5ODhEOThBMEYxMjc1N0E2OTEzQzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEOUY3MzQ0ODY5NDY0OUM0
Rjk4OEQ5OEEwRjEyNzU3QTY5MTNDMkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o4VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzEv
MzEzODM3MmUzMTMwMzMyZTMyMzAzODJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzgzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7Z9AwDQYJKoZIhvcNAQELBQADggEBAEX2LHPk
UBzjkMDE6ekas4oZWPHCBNVi71JiWovs71ClkfXRS0RvFu1+r6O/jUdC3kRF9a/y
fovSwzMgXyo3HiCE7Ib1dhwG5rMmxN6IPxM8efxWb/GT/rXipPqcbVuHHlNm2wHc
bUnXu06/K2lf4MKoETgzegWztbh2sfzPQ5NUgiHfcHgixefKvVR0ZT0IYaX2nAfN
NZJiXaHQPRyQjNf4qm7FxxlubzfjNXk7GmrIeCz0MMNFEfBhaAV27m9sh763eDow
GhMLyanGFkvuIZlYfa/qF01RkC3csHb/kdQQqTRBGrOiRyXPt7MMS9Nxbd7omOzm
UrRvbqryiar//xE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:55 2024 by rpki-client on console-fra.rpki-client.org