Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235322e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3235322e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          vm41TRbc7kpq6b5d4DRnR7yb+rKfjOfKHPYZTa+Ilrw=
Subject key identifier:   0C:FC:4C:FF:92:ED:59:77:38:69:10:3D:75:7C:48:FD:58:C6:35:25
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       31A62A6D089361CEC5B84CE67AE4C7357F3C95CA
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235322e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:27 +0000
ROA not before:           Tue 24 Dec 2024 13:44:27 +0000
ROA not after:            Tue 23 Dec 2025 13:49:27 +0000
asID:                     267513
IP address blocks:        186.251.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a6:2a:6d:08:93:61:ce:c5:b8:4c:e6:7a:e4:c7:35:7f:3c:95:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:27 2024 GMT
            Not After : Dec 23 13:49:27 2025 GMT
        Subject: CN=0CFC4CFF92ED59773869103D757C48FD58C63525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:c6:f0:5c:6e:0a:87:ff:ec:6e:99:09:fe:
                    61:f6:5a:d7:fa:a1:c1:8a:48:03:49:10:d1:bb:1d:
                    f3:8e:59:9f:9f:49:e5:63:f6:e5:28:6c:0f:b6:67:
                    0e:9b:42:62:16:0e:39:33:1b:3c:1f:b5:d0:6b:a6:
                    06:6e:e0:82:e1:1a:92:2b:5d:0a:e6:8d:aa:f2:ef:
                    27:4c:a9:46:72:c3:e8:4b:56:7c:b1:68:ef:a0:84:
                    71:3d:a7:fb:2a:eb:ef:e5:8f:76:f5:ce:37:b1:d0:
                    2d:36:b0:1b:8c:cc:a3:25:02:60:50:e5:10:f7:88:
                    22:4c:93:99:02:65:2c:5b:24:81:41:fa:54:57:55:
                    9e:bf:c0:d1:57:da:c9:1d:d6:54:8c:12:14:28:e4:
                    0d:f6:d0:53:00:15:d8:a5:44:9f:e9:20:b9:19:2e:
                    79:24:1c:3b:8d:ea:7e:aa:a9:aa:b9:ff:d9:f8:75:
                    e1:76:95:fe:89:6c:62:71:9f:44:d1:a8:df:45:a2:
                    6a:0d:b7:c7:fe:75:5d:af:57:c9:41:9a:cd:68:ed:
                    c4:19:ac:17:43:bc:84:7f:ee:68:e6:bf:ad:a7:3f:
                    07:4e:27:d2:c1:61:61:9f:99:5d:57:39:98:71:32:
                    e0:17:04:92:cb:e8:08:a4:82:4c:40:52:83:88:fb:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FC:4C:FF:92:ED:59:77:38:69:10:3D:75:7C:48:FD:58:C6:35:25
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235322e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:94:81:0c:aa:30:b2:e4:8d:6a:f2:ce:37:5b:16:af:6a:ac:
         01:f3:40:16:b4:fa:d5:a6:d7:99:31:f2:b7:a5:31:71:3a:8f:
         a8:7d:e3:79:d5:d8:25:94:94:21:40:4f:6c:73:83:98:1e:3c:
         0f:e8:26:df:b0:a7:f4:fc:8d:4c:55:f9:52:c0:3d:d6:35:56:
         cf:69:26:de:3f:ae:48:0c:4c:10:18:30:88:26:70:72:95:79:
         0d:e3:a7:4b:66:ca:b0:a3:14:a2:60:c3:a6:f9:d7:6b:c8:1a:
         5c:f4:33:39:d6:5a:2f:82:83:53:bb:21:df:b9:e2:9e:80:80:
         45:44:f9:81:dc:99:5c:92:42:fe:f5:d0:62:3e:7b:61:a0:44:
         0e:19:93:f9:21:0d:0a:34:5f:5b:fb:45:d1:f2:1f:91:6f:4c:
         32:d1:5e:c0:1e:71:7e:af:4a:1d:b1:d4:c2:61:4c:c3:eb:36:
         18:1d:db:3d:90:b1:be:04:ac:4e:8b:ac:0d:0c:de:17:dd:ec:
         59:88:f3:16:53:c8:e9:03:f2:32:d0:77:47:35:de:1e:d0:6a:
         f1:59:39:3c:14:42:90:54:ea:69:f1:ba:26:c0:3b:17:a4:f1:
         d3:5b:ab:97:23:50:3e:fc:95:86:48:e7:2a:c9:35:78:e4:b5:
         37:0e:e8:34
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMaYqbQiTYc7FuEzmeuTHNX88lcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNDEyMjQxMzQ0MjdaFw0yNTEyMjMxMzQ5MjdaMDMxMTAvBgNV
BAMTKDBDRkM0Q0ZGOTJFRDU5NzczODY5MTAzRDc1N0M0OEZENThDNjM1MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVe8bwXG4Kh//sbpkJ/mH2Wtf6
ocGKSANJENG7HfOOWZ+fSeVj9uUobA+2Zw6bQmIWDjkzGzwftdBrpgZu4ILhGpIr
XQrmjary7ydMqUZyw+hLVnyxaO+ghHE9p/sq6+/lj3b1zjex0C02sBuMzKMlAmBQ
5RD3iCJMk5kCZSxbJIFB+lRXVZ6/wNFX2skd1lSMEhQo5A320FMAFdilRJ/pILkZ
LnkkHDuN6n6qqaq5/9n4deF2lf6JbGJxn0TRqN9FomoNt8f+dV2vV8lBms1o7cQZ
rBdDvIR/7mjmv62nPwdOJ9LBYWGfmV1XOZhxMuAXBJLL6AikgkxAUoOI+9ELAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDPxM/5LtWXc4aRA9dXxI/VjGNSUwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzODM2MmUzMjM1MzEyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr7/DANBgkqhkiG9w0BAQsFAAOCAQEAWJSB
DKowsuSNavLON1sWr2qsAfNAFrT61abXmTHyt6UxcTqPqH3jedXYJZSUIUBPbHOD
mB48D+gm37Cn9PyNTFX5UsA91jVWz2km3j+uSAxMEBgwiCZwcpV5DeOnS2bKsKMU
omDDpvnXa8gaXPQzOdZaL4KDU7sh37ninoCARUT5gdyZXJJC/vXQYj57YaBEDhmT
+SENCjRfW/tF0fIfkW9MMtFewB5xfq9KHbHUwmFMw+s2GB3bPZCxvgSsTousDQze
F93sWYjzFlPI6QPyMtB3RzXeHtBq8Vk5PBRCkFTqafG6JsA7F6Tx01urlyNQPvyV
hkjnKsk1eOS1Nw7oNA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:07 2025 by rpki-client on console.sobornost.net