Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234382e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3234382e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          fSfzf4HD6/EdAMMw02DjK1t2q+J5cDM7YoZ43XD2BnE=
Subject key identifier:   A8:EB:EF:87:08:0D:3C:3F:3D:1D:4D:E4:E6:B4:77:2F:79:B6:A4:98
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       21F070F251796A82FBC1B548F8900606AC34D105
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234382e302f32332d3233203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:48 +0000
ROA not before:           Thu 04 Apr 2024 18:03:48 +0000
ROA not after:            Thu 03 Apr 2025 18:08:48 +0000
asID:                     267513
IP address blocks:        186.251.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 21:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f0:70:f2:51:79:6a:82:fb:c1:b5:48:f8:90:06:06:ac:34:d1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:48 2024 GMT
            Not After : Apr  3 18:08:48 2025 GMT
        Subject: CN=A8EBEF87080D3C3F3D1D4DE4E6B4772F79B6A498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:b3:bb:c9:e0:cc:ca:7e:d9:6d:dc:d1:a1:
                    28:b7:98:c1:18:10:ae:e7:10:65:d7:6a:b5:08:76:
                    c3:bb:bf:62:77:71:30:67:a9:1c:ad:59:c8:df:e0:
                    be:aa:27:ab:8f:9c:d9:8f:e6:9c:fe:a9:31:73:d6:
                    48:84:a4:43:12:f2:d0:12:65:fa:66:1e:88:15:29:
                    3d:39:dc:e3:ee:ca:66:bb:64:25:f7:45:3c:4f:ff:
                    7d:d3:6d:aa:67:cc:c6:f5:26:13:f5:12:e2:27:bd:
                    dc:7d:fd:3a:41:a8:94:90:ef:f4:b6:96:d1:1b:b4:
                    6f:07:7e:3e:74:cc:a0:64:39:d6:e7:6f:35:be:e6:
                    43:a9:4a:36:97:d7:4f:bd:e3:34:c2:e6:6a:49:ad:
                    8e:ed:99:ce:c1:9b:fe:77:92:91:8a:14:c8:c9:01:
                    ec:a0:2b:79:fa:ae:77:bc:42:13:28:a1:27:55:5e:
                    73:56:19:8b:a1:93:f6:d4:ab:90:ca:1f:77:40:e0:
                    c3:d2:8a:11:23:b7:4d:a1:c3:8b:ae:58:e9:9e:27:
                    06:c5:59:96:ad:06:ac:1e:c8:76:0b:bb:99:64:ca:
                    9b:c6:60:f0:f7:ea:e7:7b:a7:1b:16:10:eb:77:90:
                    14:50:b0:65:ac:74:66:64:83:16:a8:78:4b:76:8e:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:EF:87:08:0D:3C:3F:3D:1D:4D:E4:E6:B4:77:2F:79:B6:A4:98
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234382e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:ba:e0:65:1a:f8:31:4a:01:33:f7:f5:05:e9:14:8c:1a:
         bc:44:52:4b:a7:5d:e4:a9:31:90:3d:87:61:74:67:1b:69:27:
         8a:c0:d0:25:e7:16:7d:87:1a:05:de:81:3f:29:b7:3b:62:81:
         a5:11:c9:87:a0:c4:a2:9e:a4:92:e6:49:46:e3:f9:5e:8b:e0:
         de:4d:52:dc:a2:cd:0f:f0:3e:b2:ae:8b:30:fc:4f:50:1a:c1:
         d4:76:32:2d:8f:8c:2a:e4:d3:b9:80:78:de:9a:01:9a:f1:d4:
         4d:6b:08:43:7c:12:86:1e:0f:07:6c:3a:55:ab:b3:47:44:d3:
         f8:13:b2:8a:8c:d0:85:57:09:27:54:a1:5b:2c:fb:02:34:1f:
         de:9b:f5:27:34:30:43:a0:4d:dd:b6:3c:8d:b6:63:55:c4:53:
         a9:ef:56:d3:87:a9:50:82:57:43:5e:e7:b1:e1:d4:d9:af:76:
         ba:90:ad:36:7f:fd:62:8a:4b:25:89:fb:a5:cd:6b:38:d1:48:
         0d:aa:9a:cf:d0:48:7d:74:8b:b4:f8:b6:76:b4:3e:5c:4c:47:
         fb:51:b5:e1:ba:d3:d2:6a:8d:f9:a9:e1:1d:36:e3:b4:3e:ca:
         18:d0:6d:c0:f2:94:a1:16:34:32:76:7d:45:23:f9:ca:27:87:
         0e:72:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 22:44:47 2024 by rpki-client on console-ams.rpki-client.org