Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa
File:                     3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa (raw, json)
Hash identifier:          lnF099SxrYG7McFIdyMKXcf+H3sW51G2+quYvrWS42s=
Subject key identifier:   19:50:67:06:88:4F:EE:30:2A:0D:18:24:EC:0E:2C:86:95:3B:7F:57
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       1180352643F2F6B307AC8FDFDDE59DF402088E37
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa
Signing time:             Sat 18 May 2024 20:11:56 +0000
ROA not before:           Sat 18 May 2024 20:06:56 +0000
ROA not after:            Sat 17 May 2025 20:11:56 +0000
asID:                     266178
IP address blocks:        192.144.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:80:35:26:43:f2:f6:b3:07:ac:8f:df:dd:e5:9d:f4:02:08:8e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: May 18 20:06:56 2024 GMT
            Not After : May 17 20:11:56 2025 GMT
        Subject: CN=19506706884FEE302A0D1824EC0E2C86953B7F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:b4:7d:5b:8a:6f:62:9d:91:e0:c5:00:f2:
                    64:a1:76:40:34:81:14:fc:4b:dd:79:9a:1b:d1:1a:
                    6a:59:24:6e:71:b2:b6:8f:e0:a6:25:3d:10:ad:76:
                    c0:81:86:5b:f3:71:31:fc:a3:3c:9c:bc:e2:68:42:
                    20:9f:e4:b9:c0:cc:f8:f6:ee:52:42:56:5e:41:43:
                    d6:63:9c:4d:4b:42:41:a2:e2:64:d4:f8:c5:ec:e5:
                    e6:ef:a2:3e:1f:1c:1f:4b:19:b9:36:e0:21:f9:1b:
                    f4:e9:fd:14:d5:af:0f:7d:52:5c:43:6a:65:c5:5c:
                    27:7b:41:85:99:d5:a4:0e:c0:b8:14:1e:ce:cb:23:
                    b8:ad:2f:f3:3c:02:3a:89:c5:ab:a6:f1:b0:fc:5b:
                    16:cb:5d:e0:58:f3:89:24:ce:aa:c2:61:46:d2:fb:
                    2c:7e:42:93:d6:9d:03:fc:da:04:11:92:93:a2:74:
                    60:96:ea:75:3a:ec:a9:92:1e:30:7e:6d:87:86:14:
                    08:4e:3d:3a:97:0c:47:42:be:83:2c:b2:29:d6:40:
                    ad:11:82:d4:df:3d:a2:7d:da:fd:d2:04:30:10:cc:
                    24:3d:f7:09:25:c1:4d:63:2f:4f:1d:9e:45:ab:18:
                    44:99:86:e4:4b:c8:f2:3d:49:2f:f8:b6:f8:6b:72:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:50:67:06:88:4F:EE:30:2A:0D:18:24:EC:0E:2C:86:95:3B:7F:57
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32322d3232203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:39:24:7c:91:3a:60:ea:02:d9:8c:79:6b:8f:08:a8:6c:11:
         05:a1:60:b6:79:11:e4:36:ce:a3:50:85:63:cf:9d:07:ec:db:
         f1:19:4f:de:34:a1:54:3d:e4:b5:04:4f:e4:1b:4c:f8:7e:ea:
         9c:ab:10:76:05:41:b8:6e:57:b9:80:29:71:db:34:25:21:cd:
         23:9b:eb:78:3c:33:42:cd:89:93:12:8e:4b:16:cf:23:5a:44:
         a0:e6:68:97:6e:9f:f3:68:1a:51:d2:19:8f:b6:5a:4b:e6:eb:
         b3:3f:07:77:1b:1d:cf:b2:9b:b7:31:63:7a:04:a0:cb:49:28:
         24:cf:4d:35:6e:50:a6:33:8d:16:68:e5:c6:47:15:58:bb:81:
         f7:d2:1a:8f:3f:87:70:bb:83:18:d5:10:24:99:81:e1:8d:65:
         a8:87:66:8b:85:37:c1:d2:ef:bc:39:6f:bf:16:77:a8:c6:ac:
         6d:38:0a:1f:a6:46:49:19:be:df:70:f4:b9:c1:a8:55:e7:1e:
         e3:dc:9b:e4:21:25:4b:db:df:a5:96:5c:24:62:66:93:74:09:
         ee:88:b5:17:e3:b9:a5:5d:9c:57:88:c3:24:73:22:94:89:79:
         6b:a2:95:6c:3d:3e:ef:d9:2e:bd:d6:62:6e:f5:44:ef:06:fd:
         97:90:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:37 2024 by rpki-client on console-ams.rpki-client.org