Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
File:                     3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          cDmaPFP26oM/68LGT74u24DFMPiiwIt7RKRoz+r9+FE=
Subject key identifier:   14:26:7D:CB:71:AD:E1:53:DB:8F:0D:19:16:52:6C:F2:B0:6B:D3:1E
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       4225E14248459ED0C5D9836F52CB5305C2C43CDB
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:04:43 +0000
ROA not before:           Fri 03 Nov 2023 12:59:43 +0000
ROA not after:            Fri 01 Nov 2024 13:04:43 +0000
asID:                     28669
IP address blocks:        187.111.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 03:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:e1:42:48:45:9e:d0:c5:d9:83:6f:52:cb:53:05:c2:c4:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:59:43 2023 GMT
            Not After : Nov  1 13:04:43 2024 GMT
        Subject: CN=14267DCB71ADE153DB8F0D1916526CF2B06BD31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:bb:40:e1:2a:65:61:c8:ff:81:fe:11:c9:
                    b3:02:d9:5c:b1:f3:15:b4:9f:e8:0b:91:f3:e6:fb:
                    18:9d:42:ab:fe:d3:1a:8d:4b:6f:73:f1:87:c8:13:
                    9b:7f:14:7d:96:ec:c1:55:89:2c:a2:8d:3d:ec:4d:
                    b4:fe:ce:c5:1c:75:fb:e6:79:6d:ee:2d:f6:84:bb:
                    5b:f0:86:89:b2:04:b4:e2:55:49:a4:b1:22:a3:58:
                    a5:a8:81:41:89:45:37:13:ca:72:dc:55:b4:da:8e:
                    80:64:44:95:b3:5a:04:8d:0f:23:fe:95:36:81:7d:
                    73:bc:38:5e:73:49:42:cf:6c:26:39:80:3b:dd:03:
                    d6:1f:71:ee:5c:07:98:61:39:98:09:95:ff:53:49:
                    98:2c:3f:28:48:47:92:14:c0:bd:0f:6d:39:f1:29:
                    af:19:36:35:34:51:ba:ed:97:bb:7f:0a:20:79:5b:
                    d5:7b:c3:54:b3:af:77:42:0b:7a:46:f5:6e:07:21:
                    14:1b:a4:d4:e3:f2:96:e0:34:c2:7d:b1:67:23:f6:
                    e4:74:94:70:36:f8:74:5d:ee:6a:50:ef:97:5c:69:
                    30:59:af:b9:62:0f:14:d0:71:af:a8:ef:65:4a:af:
                    62:17:fd:6e:a2:f4:32:3b:e0:63:51:69:7b:a2:f9:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:7D:CB:71:AD:E1:53:DB:8F:0D:19:16:52:6C:F2:B0:6B:D3:1E
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:79:bb:4f:b5:6a:8e:a8:97:b7:fc:34:a3:82:a8:bf:ad:0b:
         b7:a7:7e:21:31:20:89:79:ca:bc:5e:1a:f4:85:1a:43:8f:da:
         b6:cc:4c:c6:38:76:ba:85:39:d0:e9:06:fa:12:88:46:5b:39:
         04:e5:c9:66:37:08:b7:52:1f:cd:a2:78:a0:99:c4:c6:59:d4:
         09:f1:b8:ab:e0:4d:8c:d6:d5:8c:b0:14:58:28:5a:75:a6:92:
         05:26:0f:6b:3c:00:e7:22:5a:97:ec:f6:a9:e5:31:05:21:20:
         33:b8:c3:66:7b:84:5c:60:da:25:a0:35:a5:ce:d1:61:c9:f8:
         09:c8:ed:02:7c:13:69:28:5d:41:23:26:27:1b:08:c4:7b:89:
         ab:75:e8:42:26:93:31:2b:85:e4:73:22:f8:c5:f1:e9:fd:f1:
         71:a9:be:31:0e:52:66:58:da:95:ae:4b:c4:ca:f5:fc:f3:2f:
         ea:2b:c5:1b:67:73:21:3d:55:7e:ec:6f:f2:75:42:44:8b:6b:
         82:8a:01:5f:0c:a3:94:0c:54:c8:08:43:31:6f:9a:af:cb:c1:
         37:b3:61:cc:dc:e6:b4:e7:fc:af:13:88:ea:0c:ed:76:fc:d2:
         90:4a:8f:38:55:ef:98:bf:ad:18:e8:ed:55:cd:9e:9a:dd:91:
         2a:5f:da:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQiXhQkhFntDF2YNvUstTBcLEPNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZERjNDNTRDMzRCQzAwNDBBQkJCRTQxMkVDNjk0OEM4
N0QxNjIyQTAeFw0yMzExMDMxMjU5NDNaFw0yNDExMDExMzA0NDNaMDMxMTAvBgNV
BAMTKDE0MjY3RENCNzFBREUxNTNEQjhGMEQxOTE2NTI2Q0YyQjA2QkQzMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe27tA4SplYcj/gf4RybMC2Vyx
8xW0n+gLkfPm+xidQqv+0xqNS29z8YfIE5t/FH2W7MFViSyijT3sTbT+zsUcdfvm
eW3uLfaEu1vwhomyBLTiVUmksSKjWKWogUGJRTcTynLcVbTajoBkRJWzWgSNDyP+
lTaBfXO8OF5zSULPbCY5gDvdA9Yfce5cB5hhOZgJlf9TSZgsPyhIR5IUwL0PbTnx
Ka8ZNjU0Ubrtl7t/CiB5W9V7w1Szr3dCC3pG9W4HIRQbpNTj8pbgNMJ9sWcj9uR0
lHA2+HRd7mpQ75dcaTBZr7liDxTQca+o72VKr2IX/W6i9DI74GNRaXui+fydAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFCZ9y3Gt4VPbjw0ZFlJs8rBr0x4wHwYDVR0j
BBgwFoAUNt88VMNLwAQKu75BLsaUjIfRYiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMC8zNkRGM0M1NEMzNEJDMDA0MEFCQkJFNDEyRUM2OTQ4Qzg3RDE2MjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2REYzQzU0QzM0QkMwMDQw
QUJCQkU0MTJFQzY5NDhDODdEMTYyMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzAv
MzEzODM3MmUzMTMxMzEyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7b6AwDQYJKoZIhvcNAQELBQADggEBACR5u0+1
ao6ol7f8NKOCqL+tC7enfiExIIl5yrxeGvSFGkOP2rbMTMY4drqFOdDpBvoSiEZb
OQTlyWY3CLdSH82ieKCZxMZZ1AnxuKvgTYzW1YywFFgoWnWmkgUmD2s8AOciWpfs
9qnlMQUhIDO4w2Z7hFxg2iWgNaXO0WHJ+AnI7QJ8E2koXUEjJicbCMR7iat16EIm
kzErheRzIvjF8en98XGpvjEOUmZY2pWuS8TK9fzzL+orxRtncyE9VX7sb/J1QkSL
a4KKAV8Mo5QMVMgIQzFvmq/LwTezYczc5rTn/K8TiOoM7Xb80pBKjzhV75i/rRjo
7VXNnprdkSpf2uY=
-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:02 2024 by rpki-client on console.sobornost.net