Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa
File:                     3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          8JX1T2C4ZnKNb9/LQtHefI+Vz2h8Bj6HgdJt61exAhQ=
Subject key identifier:   61:26:86:5B:40:EF:89:DE:74:E7:16:36:40:81:D3:5B:E2:26:FC:36
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       679BD238856CE34F52BA41BA9885B2E4245FB93D
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa
Signing time:             Sun 20 Aug 2023 15:42:50 +0000
ROA not before:           Sun 20 Aug 2023 15:37:50 +0000
ROA not after:            Sun 18 Aug 2024 15:42:50 +0000
asID:                     263661
IP address blocks:        187.63.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 18:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9b:d2:38:85:6c:e3:4f:52:ba:41:ba:98:85:b2:e4:24:5f:b9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Aug 20 15:37:50 2023 GMT
            Not After : Aug 18 15:42:50 2024 GMT
        Subject: CN=6126865B40EF89DE74E716364081D35BE226FC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:e6:c6:84:4e:cf:fe:d2:84:04:aa:61:ee:
                    56:91:3c:b8:dc:36:0f:00:0a:d5:25:f8:f6:a7:46:
                    c1:7f:1a:70:87:03:ba:71:ec:42:2c:de:cc:30:fc:
                    90:9d:06:ca:92:3e:f6:b4:bd:25:e1:9d:9e:3c:52:
                    a9:7a:73:53:a7:46:2a:7c:88:bd:4b:e1:b3:2f:37:
                    11:37:3e:00:4c:f1:94:b5:66:ae:0b:21:76:ae:eb:
                    88:7c:06:98:a9:bd:de:43:54:56:6f:73:b0:a7:4c:
                    35:ca:65:55:50:83:d9:8d:48:f8:5b:10:df:61:de:
                    00:84:7c:fb:39:80:a0:12:d2:1b:8c:3b:a3:16:d6:
                    dd:24:d2:a2:93:72:29:7c:49:b0:62:95:02:9c:1c:
                    66:17:1b:97:45:6f:ee:3d:ef:cf:62:a5:ed:bd:03:
                    9d:7c:0f:ca:59:05:cf:00:bb:dc:62:25:bb:31:18:
                    e2:39:b1:de:86:95:6f:a0:0d:25:65:44:fb:32:45:
                    9f:f7:de:18:81:08:2f:a9:86:3f:b1:c9:be:12:30:
                    6f:40:7f:c4:38:6b:8b:c7:6e:3e:04:78:e6:d1:b7:
                    91:28:7c:8a:10:c4:2a:24:ec:ca:c2:85:a4:be:86:
                    1a:8e:d4:67:81:8a:0e:d8:bb:0b:ca:46:46:d6:33:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:26:86:5B:40:EF:89:DE:74:E7:16:36:40:81:D3:5B:E2:26:FC:36
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:10:09:07:54:df:d7:5d:ff:bd:b9:ab:38:e8:5f:b3:b5:
         1c:4c:8b:3f:fb:1d:3a:e9:4d:31:7b:76:3c:8e:de:77:75:ed:
         31:01:1e:10:bb:95:16:11:3c:c1:61:98:ca:fd:b0:72:80:87:
         07:3b:ef:83:17:63:70:b4:fb:d6:e6:a7:27:fe:a2:ac:5f:40:
         90:78:80:9d:b4:f5:fd:06:f5:8b:91:65:61:dd:98:56:20:93:
         32:76:ef:25:5d:85:d2:f4:af:16:4a:60:de:45:a0:a2:6a:1b:
         27:26:02:e8:9e:84:9b:f0:55:cf:8a:7e:62:87:f9:0d:3f:01:
         51:de:b6:fb:2a:8a:a0:07:15:d6:88:f1:7d:8c:0f:2d:35:9c:
         4f:9e:f8:f4:2a:1a:8d:bd:0d:e5:3a:18:10:42:65:10:f4:9a:
         de:cc:9d:45:4f:47:19:6a:84:2a:5b:9e:01:0a:74:a8:76:16:
         ef:13:2c:49:d9:e9:3f:91:14:c3:74:34:e2:9c:8f:73:98:62:
         95:64:75:1e:a2:16:e8:a4:d5:75:d0:39:58:32:27:fb:91:c4:
         02:c7:68:d3:24:33:9f:ad:d6:8f:93:09:04:ef:06:ab:18:57:
         2b:08:d6:02:54:6b:05:76:83:9d:d2:79:be:69:7a:95:75:b6:
         af:8c:7f:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ5vSOIVs409SukG6mIWy5CRfuT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBRjFGMjc1RDQxQ0FCQTMxNjRBQzNEMUJBN0RERDJF
M0UwQUM0NzAeFw0yMzA4MjAxNTM3NTBaFw0yNDA4MTgxNTQyNTBaMDMxMTAvBgNV
BAMTKDYxMjY4NjVCNDBFRjg5REU3NEU3MTYzNjQwODFEMzVCRTIyNkZDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOubGhE7P/tKEBKph7laRPLjc
Ng8ACtUl+PanRsF/GnCHA7px7EIs3sww/JCdBsqSPva0vSXhnZ48Uql6c1OnRip8
iL1L4bMvNxE3PgBM8ZS1Zq4LIXau64h8Bpipvd5DVFZvc7CnTDXKZVVQg9mNSPhb
EN9h3gCEfPs5gKAS0huMO6MW1t0k0qKTcil8SbBilQKcHGYXG5dFb+49789ipe29
A518D8pZBc8Au9xiJbsxGOI5sd6GlW+gDSVlRPsyRZ/33hiBCC+phj+xyb4SMG9A
f8Q4a4vHbj4EeObRt5EofIoQxCok7MrChaS+hhqO1GeBig7YuwvKRkbWMz9LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYSaGW0Dvid505xY2QIHTW+Im/DYwHwYDVR0j
BBgwFoAUQ68fJ11ByroxZKw9G6fd0uPgrEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMC80M0FGMUYyNzVENDFDQUJBMzE2NEFDM0QxQkE3REREMkUzRTBBQzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzQUYxRjI3NUQ0MUNBQkEz
MTY0QUMzRDFCQTdEREQyRTNFMEFDNDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzAv
MzEzODM3MmUzNjMzMmUzMjMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P+4wDQYJKoZIhvcNAQELBQADggEBAD81EAkH
VN/XXf+9uas46F+ztRxMiz/7HTrpTTF7djyO3nd17TEBHhC7lRYRPMFhmMr9sHKA
hwc774MXY3C0+9bmpyf+oqxfQJB4gJ209f0G9YuRZWHdmFYgkzJ27yVdhdL0rxZK
YN5FoKJqGycmAuiehJvwVc+KfmKH+Q0/AVHetvsqiqAHFdaI8X2MDy01nE+e+PQq
Go29DeU6GBBCZRD0mt7MnUVPRxlqhCpbngEKdKh2Fu8TLEnZ6T+RFMN0NOKcj3OY
YpVkdR6iFuik1XXQOVgyJ/uRxALHaNMkM5+t1o+TCQTvBqsYVysI1gJUawV2g53S
eb5pepV1tq+Mfws=
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:39 2024 by rpki-client on console.sobornost.net