Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          Hw5OppDUQMe2TzMT20L/HLeZ8QvvNVS4UNAPSuctJWM=
Subject key identifier:   1A:82:78:3B:FA:BE:27:32:D5:07:46:5B:3F:AF:53:98:F0:8B:C0:2F
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       60A5A814132176A06596F58085229D5F50CA487C
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:42:38 +0000
ROA not before:           Wed 04 Dec 2024 15:37:38 +0000
ROA not after:            Wed 03 Dec 2025 15:42:38 +0000
asID:                     53153
IP address blocks:        186.209.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 07:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a5:a8:14:13:21:76:a0:65:96:f5:80:85:22:9d:5f:50:ca:48:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:37:38 2024 GMT
            Not After : Dec  3 15:42:38 2025 GMT
        Subject: CN=1A82783BFABE2732D507465B3FAF5398F08BC02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:f1:83:15:32:b0:a5:43:bf:f7:f0:1c:9a:
                    e6:78:39:da:8a:4b:50:32:4e:78:05:0c:21:de:68:
                    16:66:af:6a:85:24:71:60:0b:fe:58:4f:df:3e:c6:
                    01:35:75:90:70:6a:3b:d7:b6:29:da:83:a7:51:67:
                    fc:de:cc:18:a9:e7:e0:bc:7b:89:64:5c:96:fe:d5:
                    de:b1:d3:38:dc:75:7a:52:68:59:22:2d:d7:8a:d8:
                    85:e4:25:42:83:4a:12:3e:42:87:12:80:52:f3:2c:
                    bd:ec:53:6a:99:50:71:b4:17:80:50:2e:73:d9:39:
                    71:34:f7:17:ab:11:64:4a:e4:78:ff:8c:60:15:27:
                    99:1a:60:9d:2f:ef:08:2a:fe:2c:6c:8d:b1:34:25:
                    d5:6c:db:e8:c3:c0:c8:36:c3:ec:42:c7:fb:89:fe:
                    cc:3a:fd:e6:99:31:d0:e5:eb:e7:a2:05:81:6e:64:
                    08:d6:17:2a:76:2f:b8:85:d8:52:35:7d:b6:6a:a3:
                    82:de:c4:ec:26:f9:a3:c5:7b:56:73:be:74:35:c4:
                    8f:be:37:02:78:c8:32:9d:7d:5b:b8:7c:ee:92:4b:
                    fb:0a:fa:81:6e:09:05:8a:fa:89:71:bd:de:b1:77:
                    3f:f5:63:64:15:9e:2e:4b:81:5e:73:f6:c9:dd:a6:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:78:3B:FA:BE:27:32:D5:07:46:5B:3F:AF:53:98:F0:8B:C0:2F
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:52:cf:47:38:cf:21:21:fa:0c:7e:cf:37:3b:5f:b8:e4:08:
         13:3e:d8:6b:be:05:1b:2b:31:7c:6a:70:22:64:05:ab:52:c2:
         7e:2e:c5:b5:19:7a:48:9e:e3:6b:e2:b1:a6:13:a6:6c:e4:68:
         f6:cb:32:96:2b:42:07:20:72:57:65:86:e4:ae:9c:42:6d:af:
         47:bf:c7:50:3c:eb:a4:90:0a:d0:72:ef:5c:ee:18:61:92:73:
         09:b6:f3:fe:41:37:c3:be:00:80:0c:8f:09:96:ec:aa:86:92:
         68:e6:df:e7:eb:67:7b:20:3f:18:88:ca:03:7b:c9:1b:2a:0e:
         aa:5c:30:5b:8d:c5:2f:49:7c:9c:b0:b4:a9:68:56:57:2c:92:
         b3:7a:b7:84:9d:3e:f0:2b:4f:62:63:e9:8b:a4:eb:96:12:b5:
         cf:2d:8e:4c:9e:3e:e7:c7:ab:a0:11:f9:c0:48:38:07:f0:20:
         f6:bb:07:c5:1f:4d:75:e7:e9:5f:37:ca:35:9a:87:f2:1a:81:
         97:56:62:bb:31:46:98:3c:07:7f:a5:eb:83:08:fd:fb:42:12:
         e5:2e:80:33:62:4d:8d:11:a6:51:4c:46:63:13:79:c6:0c:92:
         da:f4:55:1d:c6:b0:5e:82:18:88:96:6f:ee:5c:72:1a:f0:3e:
         e0:f4:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:22 2025 by rpki-client