Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230302e302f32332d3234203d3e20323635393131.roa
File:                     3138362e3235302e3230302e302f32332d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          uResD9ME6mn9mX9tBn5dP4xAnihw1V8VunKGDIOIYpU=
Subject key identifier:   3F:EA:C9:96:C3:DC:A2:B8:C1:2A:3E:F6:E1:71:83:55:3D:3D:D8:C8
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       4188D128DAA6C8B7DE365D8649D778C6AE3CFEB8
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230302e302f32332d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:33 +0000
ROA not before:           Thu 04 Apr 2024 01:12:33 +0000
ROA not after:            Thu 03 Apr 2025 01:17:33 +0000
asID:                     265911
IP address blocks:        186.250.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:d1:28:da:a6:c8:b7:de:36:5d:86:49:d7:78:c6:ae:3c:fe:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:33 2024 GMT
            Not After : Apr  3 01:17:33 2025 GMT
        Subject: CN=3FEAC996C3DCA2B8C12A3EF6E17183553D3DD8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:43:ae:5d:45:6c:6c:64:b6:5a:54:b3:1d:
                    43:70:72:40:56:e2:95:ee:6e:1b:eb:d5:a5:7b:34:
                    64:17:a0:f5:64:42:6b:f6:70:5b:4f:22:c9:d4:86:
                    f8:b9:09:69:d7:b6:ec:84:75:a4:ef:3c:66:7d:04:
                    96:2c:d9:78:eb:9d:40:1b:88:ce:56:78:96:ae:85:
                    d4:11:44:2b:92:6c:05:48:35:63:de:0d:44:5f:ab:
                    97:71:77:ff:dd:d2:cc:76:73:66:78:e9:44:e3:46:
                    77:87:08:06:34:97:cc:47:e0:f8:af:71:93:cd:1d:
                    84:4f:99:93:ad:f9:c1:bb:d1:69:f9:f9:6c:1e:df:
                    62:e2:1f:bd:03:34:94:82:00:88:b8:01:c2:3c:34:
                    bf:b0:0f:48:27:8b:ab:34:70:71:02:04:4e:59:4d:
                    95:95:4e:3f:a7:0b:a5:5c:1d:e2:c4:ba:36:54:a2:
                    c2:bf:13:7c:85:c4:79:fa:ef:00:4b:ce:43:7a:8d:
                    8f:84:7d:b7:98:62:f6:0e:31:e7:64:cb:ae:09:02:
                    65:3c:cb:78:3f:65:4b:7b:b0:ae:f3:3d:13:3d:c4:
                    6a:9f:c9:f2:01:72:03:c3:6f:57:d0:82:11:f1:7b:
                    06:bb:cf:6f:90:b2:1a:43:d0:0b:16:bf:f5:fc:a0:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EA:C9:96:C3:DC:A2:B8:C1:2A:3E:F6:E1:71:83:55:3D:3D:D8:C8
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3138362e3235302e3230302e302f32332d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:36:7f:43:17:1a:e1:28:10:04:6a:77:1a:d5:2a:70:02:dd:
         f9:7e:4a:e6:31:34:69:1c:87:d0:3c:8f:71:84:0e:12:16:c8:
         bc:47:34:e8:20:ea:ba:f4:dd:be:05:52:7c:b3:63:55:64:fe:
         76:60:a3:e0:e9:d6:5d:12:2c:b6:93:85:a4:71:0b:28:b1:38:
         f9:56:b7:27:d0:0f:2b:9f:41:e2:78:9e:f0:92:c7:40:e1:61:
         dd:2b:ff:fa:47:76:78:1b:1b:cd:a4:fc:5b:04:f8:01:8e:1d:
         1f:f9:f6:58:c7:44:37:d5:a5:90:25:35:43:ac:d6:14:84:d1:
         8b:e8:1c:80:eb:d9:f5:7e:a0:2e:1a:83:54:27:f6:44:b8:f6:
         94:c7:79:7b:0b:7c:20:a2:21:ed:c0:e3:d3:82:6a:4c:aa:a3:
         1f:83:bd:62:49:56:2d:37:3c:28:6b:ef:f8:f1:12:2a:20:3e:
         cf:bb:bd:25:12:3b:83:f8:35:b4:ce:97:2c:32:23:28:66:f5:
         99:60:da:39:fb:66:bf:de:15:21:4f:a5:59:e7:4a:3b:01:bb:
         9e:8d:dd:34:2c:f8:ff:f0:1a:a7:7e:00:73:60:d6:9c:10:6b:
         d6:1f:a9:ef:e3:3d:fb:8b:0e:14:02:00:14:27:56:06:2a:ac:
         d8:3e:ce:6c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQYjRKNqmyLfeNl2GSdd4xq48/rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNDA0MDQwMTEyMzNaFw0yNTA0MDMwMTE3MzNaMDMxMTAvBgNV
BAMTKDNGRUFDOTk2QzNEQ0EyQjhDMTJBM0VGNkUxNzE4MzU1M0QzREQ4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wUOuXUVsbGS2WlSzHUNwckBW
4pXubhvr1aV7NGQXoPVkQmv2cFtPIsnUhvi5CWnXtuyEdaTvPGZ9BJYs2XjrnUAb
iM5WeJauhdQRRCuSbAVINWPeDURfq5dxd//d0sx2c2Z46UTjRneHCAY0l8xH4Piv
cZPNHYRPmZOt+cG70Wn5+Wwe32LiH70DNJSCAIi4AcI8NL+wD0gni6s0cHECBE5Z
TZWVTj+nC6VcHeLEujZUosK/E3yFxHn67wBLzkN6jY+EfbeYYvYOMedky64JAmU8
y3g/ZUt7sK7zPRM9xGqfyfIBcgPDb1fQghHxewa7z2+QshpD0AsWv/X8oFiXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUP+rJlsPcorjBKj724XGDVT092MgwHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
ODM2MmUzMjM1MzAyZTMyMzAzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYz
NTM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbr6yDANBgkqhkiG9w0BAQsFAAOCAQEAlTZ/Qxca
4SgQBGp3GtUqcALd+X5K5jE0aRyH0DyPcYQOEhbIvEc06CDquvTdvgVSfLNjVWT+
dmCj4OnWXRIstpOFpHELKLE4+Va3J9APK59B4nie8JLHQOFh3Sv/+kd2eBsbzaT8
WwT4AY4dH/n2WMdEN9WlkCU1Q6zWFITRi+gcgOvZ9X6gLhqDVCf2RLj2lMd5ewt8
IKIh7cDj04JqTKqjH4O9YklWLTc8KGvv+PESKiA+z7u9JRI7g/g1tM6XLDIjKGb1
mWDaOftmv94VIU+lWedKOwG7no3dNCz4//Aap34Ac2DWnBBr1h+p7+M9+4sOFAIA
FCdWBiqs2D7ObA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:24 2024 by rpki-client on console-ams.rpki-client.org