Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa
File:                     3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          +WxfnS0dxZ+MVZOJpjgbPtRm5fuv7qOD/t27bet/fRY=
Subject key identifier:   D7:F5:14:E3:B9:D7:94:07:BA:A5:9F:C4:BC:F8:70:D7:62:28:5E:F4
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       62AF4397BE3488284DC445C22D689CE5B5520AFD
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:19:04 +0000
ROA not before:           Fri 14 Jun 2024 20:14:04 +0000
ROA not after:            Fri 13 Jun 2025 20:19:04 +0000
asID:                     262459
IP address blocks:        186.208.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:af:43:97:be:34:88:28:4d:c4:45:c2:2d:68:9c:e5:b5:52:0a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:14:04 2024 GMT
            Not After : Jun 13 20:19:04 2025 GMT
        Subject: CN=D7F514E3B9D79407BAA59FC4BCF870D762285EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:61:f1:12:fd:64:70:ef:3e:b8:b9:1a:44:
                    4d:f0:60:69:0f:a0:35:b1:ca:e9:a9:8a:8d:71:47:
                    6c:93:62:93:be:8b:c3:d7:56:05:29:07:9d:57:fd:
                    e9:f0:11:2c:7f:5a:b5:75:c7:10:9e:02:f3:4f:22:
                    75:ad:e0:64:61:80:71:2c:26:38:78:d8:dc:83:5a:
                    e0:bd:5b:35:23:8d:6a:46:1e:0e:40:5d:31:a6:b5:
                    f3:ae:21:2c:e8:35:4c:53:61:61:51:25:01:e3:68:
                    f7:a7:4c:3a:3f:6b:97:9c:d5:65:3c:7d:d4:64:24:
                    08:fd:33:99:03:16:5f:29:62:c7:86:45:18:b3:47:
                    61:2f:8e:6d:3a:d4:ff:51:fa:ad:99:2d:db:1c:bd:
                    97:4c:be:20:c6:b0:b2:97:d7:ef:0a:75:d1:79:8d:
                    3e:03:98:46:f3:da:24:fb:92:70:d0:d1:c5:21:29:
                    5e:8a:9d:52:59:a0:81:96:24:32:5c:f3:85:a7:47:
                    36:3a:2b:1c:ec:05:a0:d2:18:61:f0:04:92:fb:23:
                    a3:4a:3c:29:3a:4f:2a:17:14:36:d0:07:56:84:dc:
                    73:30:41:d0:2b:1d:75:09:26:1b:4a:55:cf:2c:a7:
                    de:1c:a9:0e:54:1c:ec:ea:9e:b5:55:42:4f:b8:41:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:14:E3:B9:D7:94:07:BA:A5:9F:C4:BC:F8:70:D7:62:28:5E:F4
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134382e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:2e:0e:9b:48:24:41:dc:d1:f2:22:4e:a0:f4:44:5d:00:
         c3:30:c9:14:2d:dd:9c:c6:c1:99:c5:bd:9e:76:1d:52:4b:f3:
         c5:1b:83:a9:d5:fd:41:a0:4d:99:32:72:3f:b1:d0:1e:1b:a8:
         f7:16:22:8e:18:29:74:66:b0:c4:4c:aa:c0:f3:b2:3f:2b:f4:
         46:3d:a0:7c:b7:dd:c5:86:68:71:80:53:a1:29:d5:57:ee:9d:
         9f:17:a0:9b:d5:31:52:43:61:e9:33:e8:c4:80:ed:31:1e:f8:
         80:94:61:55:f2:ec:2a:d0:73:f5:0e:e0:bd:84:7e:43:27:c8:
         aa:38:0a:02:33:b9:65:9f:9c:6c:46:7c:e7:5c:84:61:d9:c0:
         f2:f7:73:80:33:0d:88:93:65:09:ec:4e:e7:99:79:3f:70:b2:
         09:de:39:9d:dd:5d:85:03:4f:3f:7a:1b:0a:c9:18:6d:27:31:
         1c:13:d4:37:8f:74:7f:67:72:f4:ee:7c:cb:27:9b:5f:fc:c4:
         a5:15:06:60:f6:c7:62:9c:19:04:26:7a:8d:bf:2b:08:5c:e5:
         9e:d4:51:c3:0f:2e:c5:a5:bf:27:3d:f0:4d:34:6b:0a:7c:4e:
         9b:df:a5:2c:1c:a4:b6:03:a5:26:82:c3:97:ae:e3:06:7c:5f:
         f8:bd:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:12 2024 by rpki-client on console-ams.rpki-client.org