Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa
File:                     3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa (raw, json)
Hash identifier:          TgoGNPF23mHZJUFXnKWljXjxr1FL+f4W2XtKVVrSdws=
Subject key identifier:   86:0C:5E:15:C8:A6:09:D3:51:99:A6:D1:F4:76:0D:C0:65:27:E7:2B
Certificate issuer:       /CN=04A75801C908418A80A755C267E372A41CC92EA3
Certificate serial:       2223FAEF4D0CA14306C6C00E3C204F2247BA1A84
Authority key identifier: 04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa
Signing time:             Fri 01 Nov 2024 14:22:22 +0000
ROA not before:           Fri 01 Nov 2024 14:17:22 +0000
ROA not after:            Fri 31 Oct 2025 14:22:22 +0000
asID:                     263568
IP address blocks:        186.251.188.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/04A75801C908418A80A755C267E372A41CC92EA3.crl
                          rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/04A75801C908418A80A755C267E372A41CC92EA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:23:fa:ef:4d:0c:a1:43:06:c6:c0:0e:3c:20:4f:22:47:ba:1a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04A75801C908418A80A755C267E372A41CC92EA3
        Validity
            Not Before: Nov  1 14:17:22 2024 GMT
            Not After : Oct 31 14:22:22 2025 GMT
        Subject: CN=860C5E15C8A609D35199A6D1F4760DC06527E72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:41:c0:66:fc:a6:cf:47:53:36:fc:ff:81:
                    4c:95:83:32:ac:21:07:a4:84:d1:14:9b:a6:92:6a:
                    15:63:45:9b:a7:98:89:8d:21:39:65:d6:44:fa:90:
                    cf:8b:7b:af:5e:1f:f3:10:a9:42:84:87:4b:93:88:
                    12:09:1f:3d:d4:0a:ae:18:b0:2f:d8:25:07:e5:23:
                    00:91:bd:93:35:bf:1b:6f:6b:c8:c4:e7:fe:fd:08:
                    3b:78:b1:a4:7b:36:26:c6:08:37:12:ab:86:8c:80:
                    4c:a0:5a:1b:d2:b3:73:df:6c:c4:15:d5:b1:19:f4:
                    a0:1b:1c:85:1e:6f:5f:be:e4:8d:35:21:dc:bc:ef:
                    4b:c8:4b:47:5f:04:41:a7:1a:dc:93:78:b4:8c:c6:
                    49:e2:65:e6:75:0e:fb:5b:6e:57:77:45:bd:ef:d5:
                    31:be:89:be:9a:16:72:fd:b4:9a:0c:89:1f:89:dc:
                    80:a4:5c:68:bd:f9:d8:4a:a1:2b:e6:32:59:26:42:
                    56:9d:ce:9a:1a:f0:90:97:e4:59:6c:4e:37:d9:3b:
                    b5:b1:e9:31:0c:b6:bf:44:e9:0f:61:ee:e6:04:92:
                    19:cf:5e:dd:8d:04:ca:d7:ca:88:61:90:53:cb:3d:
                    0e:04:fd:5b:b3:30:0b:47:1c:a2:5e:31:25:e8:da:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0C:5E:15:C8:A6:09:D3:51:99:A6:D1:F4:76:0D:C0:65:27:E7:2B
            X509v3 Authority Key Identifier:
                keyid:04:A7:58:01:C9:08:41:8A:80:A7:55:C2:67:E3:72:A4:1C:C9:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/04A75801C908418A80A755C267E372A41CC92EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04A75801C908418A80A755C267E372A41CC92EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/1/3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:57:bd:11:86:66:7f:29:a3:84:35:c2:37:6e:7b:0d:59:
         d7:e8:68:af:4f:bf:ca:c4:b0:bf:e1:66:5c:84:68:4c:79:fd:
         53:1f:d1:d7:2d:ca:05:93:32:07:d6:fd:8f:f5:73:85:2d:c1:
         9c:90:ba:28:a6:c8:6c:69:79:30:eb:c5:d8:43:6b:32:31:e7:
         7f:a5:85:82:8d:e1:52:cb:6c:7f:9f:0a:66:0d:8e:81:27:9e:
         4d:5c:6f:d3:e0:f5:2d:f0:8e:dc:bc:61:7c:5d:bc:89:13:41:
         9b:d1:59:53:78:4c:97:21:48:47:da:3b:ac:1e:20:fc:89:4b:
         d3:04:35:5a:26:5c:5b:1c:ec:01:7c:04:9f:27:da:cc:9d:d4:
         33:d7:83:11:06:70:4b:81:ac:28:85:b9:08:fb:81:c9:98:ec:
         34:ea:ef:d0:27:92:46:22:12:ca:7e:f2:d7:70:5c:3a:7e:c3:
         ac:73:ba:f5:07:07:f1:75:62:42:0e:e3:7c:f3:ae:7b:28:14:
         2a:07:9a:99:6f:fd:33:ec:f9:64:28:9d:fb:58:da:51:e4:eb:
         38:7e:9d:88:db:0f:19:ee:75:a5:5e:c3:9d:b9:ba:38:d8:24:
         6a:57:f4:67:d5:2d:1e:05:fb:6f:45:8d:bb:b4:52:e2:65:a3:
         19:c8:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:51 2024 by rpki-client on console-ams.rpki-client.org