Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa
File:                     3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa (raw, json)
Hash identifier:          JQHJAFJBX465jvj3laUKEtsdK3X5i0ePP3JgsskwmSg=
Subject key identifier:   DD:3A:1A:30:B2:6C:66:05:F6:CF:BE:A7:CB:05:E4:81:96:2F:1D:4E
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       795F36E061F057EA7352E76D017830E980997C05
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:26:09 +0000
ROA not before:           Fri 14 Jun 2024 20:21:09 +0000
ROA not after:            Fri 13 Jun 2025 20:26:09 +0000
asID:                     262459
IP address blocks:        186.208.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5f:36:e0:61:f0:57:ea:73:52:e7:6d:01:78:30:e9:80:99:7c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:21:09 2024 GMT
            Not After : Jun 13 20:26:09 2025 GMT
        Subject: CN=DD3A1A30B26C6605F6CFBEA7CB05E481962F1D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:34:b3:bc:7d:a5:be:db:58:73:7b:47:6b:
                    2f:e9:a9:80:28:d4:71:21:b2:65:92:12:3b:37:6b:
                    8b:dc:2e:1f:d1:5b:73:f2:a1:80:66:83:24:76:d2:
                    ae:a6:a4:20:cb:d0:5d:92:1c:38:51:fb:16:ef:31:
                    85:23:62:93:a0:65:f2:3d:f5:28:3f:2e:38:34:a3:
                    8d:a6:53:27:93:e3:10:9b:d4:b2:45:0b:29:9e:2c:
                    56:82:40:ce:a4:20:8c:29:39:53:95:4c:e7:e1:e1:
                    61:d8:15:a1:0d:27:a7:99:0a:7d:9c:ec:15:7d:24:
                    e7:43:83:24:46:17:e5:27:a9:00:d8:d3:84:85:26:
                    d7:1c:74:ea:77:68:b5:a5:14:86:2e:7f:33:1c:95:
                    64:24:75:f7:9f:b6:1a:af:ed:38:e3:45:18:6f:e5:
                    51:75:d9:6b:0b:b0:40:ee:f3:d9:d9:3e:0b:24:26:
                    d4:41:51:55:0b:cc:f5:cb:f0:a7:04:e4:b9:40:55:
                    7b:f5:da:c2:c3:66:51:6a:6e:f8:49:81:d8:4e:d4:
                    b7:22:df:e8:d2:a4:47:c7:63:88:50:67:5c:46:ba:
                    c6:85:df:cc:3a:4b:77:8d:89:73:d8:12:d0:fb:b9:
                    54:df:48:ec:d7:5e:42:36:7a:51:54:83:67:d4:d6:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:1A:30:B2:6C:66:05:F6:CF:BE:A7:CB:05:E4:81:96:2F:1D:4E
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32302d3230203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:49:47:d3:37:08:f1:c8:3c:53:84:66:f9:d3:bd:85:38:
         4b:1e:9a:cf:9e:86:78:6f:ed:82:be:2e:7f:f0:2b:27:4d:04:
         03:10:cf:16:28:31:00:af:0d:e8:6b:8c:da:0a:ec:87:f4:d6:
         72:dc:b9:d6:7e:19:a0:c0:61:54:6a:bd:b5:15:70:9e:bf:1d:
         a1:61:bc:95:3e:f5:07:cb:3a:7e:7f:47:7b:a4:87:37:47:99:
         f9:f3:02:97:bf:b5:17:d7:f5:e4:46:b5:d3:0e:ec:bc:34:1a:
         c7:79:1d:fa:a2:02:7e:0c:15:24:3a:be:9e:73:b8:26:60:a9:
         5d:79:9b:5e:66:1e:78:16:43:43:fe:84:48:94:c7:b8:11:64:
         3f:c1:71:25:7c:2b:ac:bf:94:77:0a:95:50:46:0f:08:05:2d:
         99:2e:33:7b:cb:76:7f:de:59:26:42:2b:6e:3d:1e:41:e5:d0:
         a4:87:db:48:bd:d4:35:6c:7e:6f:3f:8b:28:42:11:1d:4a:6f:
         0c:cb:99:f5:ca:c6:3f:39:eb:5b:f4:a1:b7:30:40:0b:97:2d:
         ea:fb:da:fe:cf:e6:c7:a4:05:0b:bb:db:a3:72:13:d8:8d:7f:
         0b:03:29:fe:f4:1f:10:c0:0f:c4:98:0e:7c:8a:26:bc:9a:4e:
         65:a8:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org