Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3232372e39362e302f32302d3234203d3e203238313330.roa
File:                     3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (raw, json)
Hash identifier:          ImpFlhZjI75QQQSzjSW42xs+/mU72O/JdNySzBFOW8E=
Subject key identifier:   6C:00:62:B3:57:77:4C:7E:88:82:B8:F6:05:8A:BE:4F:C8:88:EC:3D
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       2965AAF87D308BC4AD663718FF9138D90FA27588
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3232372e39362e302f32302d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:49 +0000
ROA not before:           Thu 04 Apr 2024 07:27:49 +0000
ROA not after:            Thu 03 Apr 2025 07:32:49 +0000
asID:                     28130
IP address blocks:        186.227.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:65:aa:f8:7d:30:8b:c4:ad:66:37:18:ff:91:38:d9:0f:a2:75:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:49 2024 GMT
            Not After : Apr  3 07:32:49 2025 GMT
        Subject: CN=6C0062B357774C7E8882B8F6058ABE4FC888EC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:52:50:c5:10:2c:14:05:fd:94:1e:fb:87:
                    7f:4d:b4:50:82:a0:8d:c8:37:57:a6:16:df:60:86:
                    1b:f7:75:4d:9d:04:e8:12:bf:41:84:82:dd:fe:2f:
                    07:2a:93:1a:bd:a0:86:81:95:17:70:14:bd:db:b6:
                    3c:1c:07:7d:96:19:72:29:8a:e7:8b:e7:33:fb:50:
                    51:7c:19:3b:20:b2:c0:ae:d6:f5:a8:a9:a6:9d:2d:
                    b7:15:a9:e3:2e:54:df:8e:97:84:24:fe:25:98:d0:
                    ef:fc:53:85:5b:58:ff:ee:a6:0d:89:45:d9:f3:88:
                    24:99:74:b9:87:30:cd:40:1c:1c:56:d0:56:86:8e:
                    3c:4a:15:d0:90:9b:57:9b:db:32:44:94:1b:58:c4:
                    64:ad:ac:2e:70:97:1a:94:68:fc:99:d0:a2:bd:0a:
                    e5:fa:68:1f:e9:7a:c5:50:ad:64:6a:79:32:4b:86:
                    bb:f2:df:2a:94:1e:5b:03:bf:cb:b2:a0:31:fe:08:
                    5d:ae:5b:ee:01:f4:77:58:f1:03:0f:76:37:e7:3e:
                    98:d7:15:3b:cc:88:19:8e:95:05:ea:3f:5a:2d:54:
                    3a:d5:4f:88:f8:36:f8:fa:09:db:26:04:32:d7:28:
                    c7:13:0e:fa:00:fa:c0:33:08:1a:d8:9c:26:5c:ac:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:62:B3:57:77:4C:7E:88:82:B8:F6:05:8A:BE:4F:C8:88:EC:3D
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3232372e39362e302f32302d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:31:ab:1c:91:32:58:8e:0a:67:f6:e9:c8:d9:22:b6:20:6c:
         46:91:70:a2:83:4a:d8:9b:28:6b:cd:a8:5e:19:bf:6b:f5:de:
         f3:d0:ea:40:92:4e:a8:c6:c3:6e:f3:8a:29:0f:17:2b:30:35:
         01:46:2e:09:3a:07:37:58:20:af:cd:90:59:68:ae:33:56:76:
         88:e9:8f:e7:67:6c:26:5b:a1:90:29:11:1e:84:4f:39:62:6b:
         e9:5d:6b:5d:73:4d:85:76:40:6a:ed:2f:c8:0b:01:71:ab:5b:
         87:65:9c:39:8c:fa:fb:73:86:27:ff:c4:10:4f:4f:b5:ac:49:
         df:7b:1c:89:20:1f:09:e8:74:ba:0b:c8:34:2b:ee:0b:80:2e:
         91:56:6e:10:73:e6:b5:3b:3a:aa:a8:cc:57:8e:9e:d8:c2:e5:
         8b:37:09:5e:3f:af:42:09:55:e8:a9:65:34:1b:6c:23:31:64:
         df:8a:cd:67:8b:cc:56:4d:c4:0e:b8:fe:79:7b:a0:fe:2a:49:
         76:0b:1b:b4:10:ff:f9:5c:d0:7a:fe:d4:f5:e9:8f:59:f1:ce:
         9e:90:6b:42:cf:55:ea:00:17:d9:52:1f:d8:ff:df:9f:9b:ff:
         be:b8:fc:e6:a4:25:4d:45:48:ea:89:b0:71:d3:8f:53:7c:6c:
         67:d4:4e:a4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUKWWq+H0wi8StZjcY/5E42Q+idYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNDA0MDQwNzI3NDlaFw0yNTA0MDMwNzMyNDlaMDMxMTAvBgNV
BAMTKDZDMDA2MkIzNTc3NzRDN0U4ODgyQjhGNjA1OEFCRTRGQzg4OEVDM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJVJQxRAsFAX9lB77h39NtFCC
oI3IN1emFt9ghhv3dU2dBOgSv0GEgt3+Lwcqkxq9oIaBlRdwFL3btjwcB32WGXIp
iueL5zP7UFF8GTsgssCu1vWoqaadLbcVqeMuVN+Ol4Qk/iWY0O/8U4VbWP/upg2J
RdnziCSZdLmHMM1AHBxW0FaGjjxKFdCQm1eb2zJElBtYxGStrC5wlxqUaPyZ0KK9
CuX6aB/pesVQrWRqeTJLhrvy3yqUHlsDv8uyoDH+CF2uW+4B9HdY8QMPdjfnPpjX
FTvMiBmOlQXqP1otVDrVT4j4Nvj6CdsmBDLXKMcTDvoA+sAzCBrYnCZcrF59AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUbABis1d3TH6Igrj2BYq+T8iI7D0wHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz
ODM2MmUzMjMyMzcyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzEz
MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEuuNgMA0GCSqGSIb3DQEBCwUAA4IBAQBQMasckTJYjgpn
9unI2SK2IGxGkXCig0rYmyhrzaheGb9r9d7z0OpAkk6oxsNu84opDxcrMDUBRi4J
Ogc3WCCvzZBZaK4zVnaI6Y/nZ2wmW6GQKREehE85YmvpXWtdc02FdkBq7S/ICwFx
q1uHZZw5jPr7c4Yn/8QQT0+1rEnfexyJIB8J6HS6C8g0K+4LgC6RVm4Qc+a1Ozqq
qMxXjp7YwuWLNwleP69CCVXoqWU0G2wjMWTfis1ni8xWTcQOuP55e6D+Kkl2Cxu0
EP/5XNB6/tT16Y9Z8c6ekGtCz1XqABfZUh/Y/9+fm/++uPzmpCVNRUjqibBx049T
fGxn1E6k
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:12 2024 by rpki-client on console-ams.rpki-client.org