Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa
File:                     3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          NKE0oYB+C4cny95WXU8beqAqh3Lu9Cw2/CvuPjhEXz0=
Subject key identifier:   C9:F9:98:57:6B:45:8B:93:73:EF:65:A6:CE:A9:B6:2B:B5:9C:2A:8F
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       782A5DBA28A17E34F5393D526AEEED8DFC2B2405
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:48 +0000
ROA not before:           Thu 04 Apr 2024 07:27:48 +0000
ROA not after:            Thu 03 Apr 2025 07:32:48 +0000
asID:                     28130
IP address blocks:        186.251.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2a:5d:ba:28:a1:7e:34:f5:39:3d:52:6a:ee:ed:8d:fc:2b:24:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:48 2024 GMT
            Not After : Apr  3 07:32:48 2025 GMT
        Subject: CN=C9F998576B458B9373EF65A6CEA9B62BB59C2A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:2f:61:1d:f9:d9:5d:21:ef:0e:52:37:d7:
                    a4:3c:5f:66:b7:d6:d0:10:3c:5e:ff:56:64:e2:dc:
                    bf:c0:b3:9b:e5:f5:5d:ee:7a:2a:a9:1f:a8:09:8c:
                    5e:28:c2:e4:d9:84:23:9f:55:62:c0:04:f7:11:61:
                    45:03:a3:03:ae:2f:81:9e:7c:68:b6:c7:07:eb:b8:
                    34:52:74:d0:83:11:c6:9f:7a:97:e7:72:32:ce:89:
                    fc:c5:7f:b9:0f:d1:73:69:be:bf:9b:d3:94:42:c2:
                    9d:71:88:8d:01:4b:c2:58:30:15:3d:bc:b1:31:4e:
                    ff:e2:bc:fc:42:22:4f:c7:b0:0c:bf:b0:69:b6:85:
                    8f:ec:e4:7b:d7:a4:be:06:c2:dd:72:19:ee:5b:89:
                    16:f9:0e:8b:2e:c5:37:4a:f9:01:b8:6e:7e:dc:8e:
                    54:bb:d2:e9:85:4e:2a:6f:1f:e2:23:70:93:c9:03:
                    5b:67:70:1b:ed:0f:01:1c:bf:c7:55:00:ab:3d:7d:
                    e5:f8:63:7e:81:62:02:4e:9a:e4:b5:b3:a6:15:66:
                    54:d6:27:4d:a2:60:8b:e8:13:b1:21:d6:b7:da:4b:
                    68:e0:04:f9:d6:1d:1f:e9:ea:0c:bf:f9:4e:70:c0:
                    5c:34:44:55:3d:b9:14:30:ce:54:43:d5:63:34:af:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:98:57:6B:45:8B:93:73:EF:65:A6:CE:A9:B6:2B:B5:9C:2A:8F
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134342e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:52:32:da:96:e4:18:2b:1e:7f:37:20:d8:7b:0a:fa:fa:26:
         2c:df:02:de:56:fa:42:54:a4:f3:b3:ed:a7:8a:92:62:99:73:
         84:65:7d:e1:46:62:fe:41:ff:98:74:25:f6:a3:4c:8d:45:eb:
         8c:b1:b2:d6:08:e1:6b:2e:7c:39:ec:35:77:3c:7e:3a:a8:d9:
         16:7b:86:5f:9a:c8:ee:11:bc:17:33:43:f6:ed:a0:5c:25:bd:
         27:02:4d:7d:ee:60:51:5b:5f:0e:36:a9:81:43:74:9c:4a:c8:
         b2:7c:75:51:2b:de:f7:1e:db:8e:48:0b:c9:fe:12:d7:b3:cf:
         e0:96:03:37:86:e4:1a:93:51:d9:13:31:a7:52:f9:4f:5f:38:
         96:74:8f:3b:c4:ca:46:e7:e8:f9:27:f5:15:7d:23:96:1e:59:
         f9:72:bd:85:8a:c2:67:8c:21:a8:63:56:dd:8f:4d:05:ff:3c:
         22:92:19:6c:13:25:0f:8a:36:09:0b:0f:62:14:ee:18:5e:8a:
         43:f9:1c:7c:27:be:07:9c:04:a1:ae:75:08:a9:a5:8e:e1:8d:
         5e:00:1d:70:05:e7:b5:e6:4d:db:e9:95:78:78:9a:e3:54:0c:
         03:21:a6:8b:30:d6:19:45:c2:2c:5f:8f:d2:c7:b4:70:06:55:
         ca:37:14:a5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUeCpduiihfjT1OT1Sau7tjfwrJAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNDA0MDQwNzI3NDhaFw0yNTA0MDMwNzMyNDhaMDMxMTAvBgNV
BAMTKEM5Rjk5ODU3NkI0NThCOTM3M0VGNjVBNkNFQTlCNjJCQjU5QzJBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ii9hHfnZXSHvDlI316Q8X2a3
1tAQPF7/VmTi3L/As5vl9V3ueiqpH6gJjF4owuTZhCOfVWLABPcRYUUDowOuL4Ge
fGi2xwfruDRSdNCDEcafepfncjLOifzFf7kP0XNpvr+b05RCwp1xiI0BS8JYMBU9
vLExTv/ivPxCIk/HsAy/sGm2hY/s5HvXpL4Gwt1yGe5biRb5DosuxTdK+QG4bn7c
jlS70umFTipvH+IjcJPJA1tncBvtDwEcv8dVAKs9feX4Y36BYgJOmuS1s6YVZlTW
J02iYIvoE7Eh1rfaS2jgBPnWHR/p6gy/+U5wwFw0RFU9uRQwzlRD1WM0rxTJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyfmYV2tFi5Nz72Wmzqm2K7WcKo8wHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz
ODM2MmUzMjM1MzEyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgz
MTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAK6+5AwDQYJKoZIhvcNAQELBQADggEBAFZSMtqW5Bgr
Hn83INh7Cvr6JizfAt5W+kJUpPOz7aeKkmKZc4RlfeFGYv5B/5h0JfajTI1F64yx
stYI4WsufDnsNXc8fjqo2RZ7hl+ayO4RvBczQ/btoFwlvScCTX3uYFFbXw42qYFD
dJxKyLJ8dVEr3vce245IC8n+Etezz+CWAzeG5BqTUdkTMadS+U9fOJZ0jzvEykbn
6Pkn9RV9I5YeWflyvYWKwmeMIahjVt2PTQX/PCKSGWwTJQ+KNgkLD2IU7hheikP5
HHwnvgecBKGudQippY7hjV4AHXAF57XmTdvplXh4muNUDAMhposw1hlFwixfj9LH
tHAGVco3FKU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:12 2024 by rpki-client on console-ams.rpki-client.org