Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234392e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3234392e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          ZVvY0hlWCscoCnXyN04Xs9fL42vx68/hGLp+uq3n9fE=
Subject key identifier:   88:A7:83:B1:9F:8F:BB:7B:46:7C:36:E1:56:E9:78:E4:5D:59:47:89
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       2B227EEC60C6D9EBFB256EFDBF4B7D008CCC0FFD
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234392e302f32342d3234203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:48 +0000
ROA not before:           Thu 04 Apr 2024 18:03:48 +0000
ROA not after:            Thu 03 Apr 2025 18:08:48 +0000
asID:                     267513
IP address blocks:        186.251.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 21:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:22:7e:ec:60:c6:d9:eb:fb:25:6e:fd:bf:4b:7d:00:8c:cc:0f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:48 2024 GMT
            Not After : Apr  3 18:08:48 2025 GMT
        Subject: CN=88A783B19F8FBB7B467C36E156E978E45D594789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:e8:95:7d:e2:2c:73:f6:5f:2d:b0:89:03:
                    62:c0:c1:c1:1f:b8:01:98:5b:b5:93:91:87:22:a4:
                    07:8d:2f:65:8c:aa:96:c1:25:a5:4f:18:02:7c:ab:
                    45:cc:fc:f4:14:ed:51:35:b8:db:88:9f:ab:c1:a4:
                    43:cb:ad:1d:d9:bd:01:72:39:32:cf:54:c1:6c:2c:
                    34:47:ec:88:ee:01:19:30:87:88:d2:1b:25:ff:37:
                    ad:20:2b:43:b2:45:2a:62:8a:46:eb:6e:0c:20:6e:
                    12:c7:18:91:79:10:9d:60:3a:de:cd:9e:ef:d1:78:
                    1b:cf:16:d0:36:6f:06:1c:16:09:62:d4:fd:bf:aa:
                    d5:29:75:ce:a8:e5:23:91:ec:64:7d:78:8d:22:8d:
                    0d:03:a8:e1:79:75:b9:00:fe:99:a0:b7:7a:cb:c8:
                    77:35:88:ad:ae:74:61:09:6a:4d:9c:ac:85:be:8b:
                    ee:6c:30:83:78:33:22:80:d9:a9:63:c4:a7:3f:90:
                    40:25:1f:26:e6:59:20:ef:1c:db:27:20:54:3e:60:
                    f1:42:e3:90:7c:4e:9e:ec:46:45:60:97:95:c7:aa:
                    e6:d3:0d:a7:7b:7a:e6:69:85:5a:8e:82:df:df:4d:
                    2c:47:83:2e:d7:93:8b:f3:5b:aa:51:78:de:84:59:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:83:B1:9F:8F:BB:7B:46:7C:36:E1:56:E9:78:E4:5D:59:47:89
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234392e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:4d:1b:a2:7f:9e:01:1b:38:82:f5:cb:6b:3d:cc:37:32:
         c9:f9:64:50:32:98:47:68:4d:61:29:95:74:77:c3:14:eb:a8:
         b6:bc:37:c7:08:81:e6:2c:82:13:8b:43:ae:b2:36:e4:b7:e5:
         1e:57:d7:18:fa:2b:4c:26:11:b6:de:68:d0:9b:07:01:ee:ad:
         e1:46:07:36:05:07:5c:6e:7a:9d:5a:de:6b:ae:d0:b1:70:69:
         a4:61:57:36:43:c7:5b:84:62:f3:06:d4:ea:49:15:b3:4b:6c:
         c0:b9:0b:23:34:41:60:54:2d:e4:76:6e:e2:54:0e:c2:9f:31:
         cf:1a:38:ff:df:dc:99:c9:ee:1f:ce:6c:76:b0:e0:79:c6:09:
         b4:0c:79:d4:cd:5e:31:a6:be:6b:17:35:93:8d:1a:38:36:32:
         60:10:44:fb:8e:d8:cc:40:a6:b5:95:be:20:5b:f8:65:8d:51:
         44:0c:fd:83:78:6e:b3:54:ee:99:1d:20:67:14:75:98:e1:2e:
         76:e3:26:a0:79:10:e1:a8:f1:44:07:86:d5:6c:45:4a:be:c7:
         d1:a0:5f:7f:0f:b0:17:23:e5:60:d5:3c:6f:d1:b8:c8:16:89:
         41:a7:0b:51:79:31:c4:da:a6:25:4a:9a:62:9f:9a:f0:a4:8d:
         74:1f:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 22:39:56 2024 by rpki-client on console-fra.rpki-client.org