Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa
File:                     3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa (raw, json)
Hash identifier:          ZjQcMBeC4R2bSiURtDSLgUT1gRTU+GwHc295lMYhQlo=
Subject key identifier:   FE:02:A9:2B:6C:03:23:AC:83:D4:F1:37:56:C4:2C:D8:14:7F:7A:BF
Certificate issuer:       /CN=8132D5957E193240246C2622115FA8F1706B3CE2
Certificate serial:       73353F94DE7B494DEA024624AEFC894616151988
Authority key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     262995
IP address blocks:        186.219.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl
                          rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:3f:94:de:7b:49:4d:ea:02:46:24:ae:fc:89:46:16:15:19:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8132D5957E193240246C2622115FA8F1706B3CE2
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:e8:4b:ea:85:05:12:f8:d9:17:03:33:0c:
                    80:78:5d:00:b6:a5:d3:51:9d:a6:fe:1a:06:9f:c4:
                    53:fe:9a:ea:c9:45:61:9f:64:29:e1:dd:fd:8e:41:
                    aa:96:71:ec:35:d8:45:f8:b7:4c:61:8f:ea:69:e5:
                    70:80:c7:e0:ae:ca:01:78:79:2d:97:90:f1:93:74:
                    46:1a:86:5b:0e:92:07:58:ab:9f:74:71:75:1a:e9:
                    0b:7f:5e:f0:a6:38:09:60:c3:8f:d9:48:26:f3:92:
                    9e:c4:71:ad:10:e0:0a:15:15:75:60:a2:08:7c:73:
                    73:09:7f:57:1b:95:cc:c4:75:a6:a7:00:45:8c:7d:
                    59:e3:2a:01:19:aa:7b:ec:ab:63:87:f0:cf:4a:7b:
                    ed:13:1a:50:28:5a:17:bf:2b:31:ad:5e:77:c0:8f:
                    1e:39:a7:7a:79:15:46:24:82:d9:cc:22:1d:20:39:
                    92:6f:50:e3:9b:e9:49:e2:db:ec:88:cc:09:66:97:
                    96:e1:49:1a:7a:3c:8f:e0:3b:03:1e:ac:76:36:e5:
                    34:87:0a:9c:3c:c5:60:40:c2:d0:8d:1a:04:71:b6:
                    35:24:fa:9a:c7:b2:9f:1b:17:5c:94:8a:8a:34:84:
                    d5:aa:61:a7:d0:19:22:25:34:97:c8:41:36:69:67:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:A9:2B:6C:03:23:AC:83:D4:F1:37:56:C4:2C:D8:14:7F:7A:BF
            X509v3 Authority Key Identifier:
                keyid:81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:73:dc:ba:6f:c5:09:44:c8:33:cd:94:7f:85:54:7a:b0:22:
         83:8a:63:a0:9e:84:3a:47:80:ea:dd:24:99:52:73:94:04:db:
         d9:45:1a:a4:27:0f:0e:fe:d5:30:99:86:8c:df:d9:49:31:f4:
         b9:d8:1c:2f:80:bf:5f:9c:be:b1:ad:04:3d:23:00:c4:dc:ff:
         6f:4b:7e:e5:2d:be:f0:1a:35:6a:fc:32:7f:67:23:91:d5:d1:
         44:ac:c4:5a:e3:c1:50:43:44:99:be:ed:31:5d:4b:43:b2:fa:
         df:c4:a4:78:e2:5f:4e:94:5b:6d:5a:a2:07:b0:fb:92:4e:4a:
         24:f5:ae:d3:8f:92:cb:1c:96:c0:72:05:f8:e1:cd:64:8d:22:
         f5:ff:60:54:30:6a:d2:a0:38:cd:0c:f3:43:ef:13:8c:7d:c0:
         70:b8:45:ab:6f:1f:b0:b3:30:f7:27:e4:81:fe:7c:25:43:2d:
         97:25:4a:6e:fd:30:40:a5:18:04:aa:58:57:ac:fe:8f:9e:5a:
         c7:e9:e0:8d:4f:4a:e5:da:cd:d5:f7:5d:0a:75:d5:ac:d6:54:
         7f:e2:97:d6:88:33:4f:aa:37:73:5b:36:be:33:da:0e:f8:07:
         64:8e:b3:77:6f:c6:6b:07:96:35:4f:e8:11:3d:5e:1d:86:d0:
         ec:47:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:42 2024 by rpki-client on console-fra.rpki-client.org