Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa
File:                     3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa (raw, json)
Hash identifier:          vdfeU+i6AkiBuO6BJNNFK6EFx3FWjkqzGgsPQKdGdrk=
Subject key identifier:   6A:50:57:75:9D:DD:EE:BA:A7:8A:5C:FE:31:A3:DD:18:94:15:75:08
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       19E871B7DC2B23E6938E418CAA03D9EB11914BCE
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa
Signing time:             Sat 18 May 2024 20:11:57 +0000
ROA not before:           Sat 18 May 2024 20:06:57 +0000
ROA not after:            Sat 17 May 2025 20:11:57 +0000
asID:                     266178
IP address blocks:        192.144.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:71:b7:dc:2b:23:e6:93:8e:41:8c:aa:03:d9:eb:11:91:4b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: May 18 20:06:57 2024 GMT
            Not After : May 17 20:11:57 2025 GMT
        Subject: CN=6A5057759DDDEEBAA78A5CFE31A3DD1894157508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:12:51:ce:55:a2:14:5a:7c:02:64:ce:7d:
                    99:44:e2:81:e9:a9:91:b1:81:e9:d5:fb:95:47:db:
                    c8:4e:d2:ce:c3:e5:5f:38:25:65:3b:0c:cc:8c:2f:
                    88:79:45:c7:0f:9a:37:9a:34:40:54:79:dc:d0:2c:
                    8a:b5:2f:50:ae:df:81:51:e9:74:f8:50:5d:a3:65:
                    24:17:7a:2f:f3:80:dc:db:22:79:d4:3c:36:d8:41:
                    4e:6b:aa:a2:2f:6f:30:b4:c6:98:2b:07:3a:fd:55:
                    12:bf:49:5a:48:07:cd:fb:32:f3:aa:3c:d9:93:cd:
                    02:98:d4:76:c9:61:4a:8c:83:bb:5c:8a:fe:44:40:
                    1f:52:7c:33:b1:8a:5c:32:16:ed:21:e7:3b:84:9a:
                    29:48:7c:b0:54:1c:90:ad:bc:40:77:1e:84:9e:66:
                    22:bf:3b:50:e6:59:0f:2c:59:49:40:22:13:bc:fa:
                    a0:86:7e:03:7b:f7:9f:c3:fa:16:98:15:51:5b:d9:
                    1c:a1:92:88:08:3d:99:4d:2f:76:7c:0f:08:8a:51:
                    21:03:ad:c4:56:67:e3:2c:9c:3e:4b:a1:c9:fa:16:
                    13:f6:9f:9f:ff:62:ec:9d:51:f1:1e:ac:68:72:29:
                    bb:b3:58:40:7e:c4:bd:7f:cd:e9:a8:14:4c:a8:b8:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:50:57:75:9D:DD:EE:BA:A7:8A:5C:FE:31:A3:DD:18:94:15:75:08
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32332d3233203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:c9:78:24:12:29:7d:0c:59:ff:9b:0d:e3:e2:aa:b8:a7:dc:
         a9:2e:9b:66:fd:18:0c:7a:b3:4f:14:c3:bf:cd:36:31:02:65:
         dd:c1:2e:89:92:1f:5b:05:7c:9f:93:a4:b7:84:ed:7f:d2:3b:
         8a:5b:2e:47:f2:9d:d8:20:74:e1:bf:d4:8d:1c:36:ba:4c:b9:
         86:9f:04:96:22:30:65:14:56:8c:46:b9:93:6a:18:03:b7:a6:
         f1:01:90:74:09:23:19:0f:e1:f8:fb:59:b0:ba:58:a9:00:b7:
         02:fa:ec:36:e8:7c:d3:07:fe:7f:1a:a5:ef:33:21:8f:25:f7:
         a9:f2:15:50:e8:7b:de:e9:4a:aa:0e:a4:28:bf:c9:09:2f:ec:
         ec:5a:24:e7:7e:2b:6c:4a:f0:30:4d:e7:d6:2c:0d:97:91:29:
         08:6e:a9:0c:0e:3e:f5:5a:e3:2d:99:f2:08:f8:ab:35:91:88:
         24:ea:16:65:cf:5a:52:c5:7c:3c:46:87:2c:1e:f5:c7:dc:7d:
         ab:98:8d:d1:87:63:33:0f:92:98:0d:ad:c4:22:22:4b:47:d4:
         3b:47:ab:d7:00:ef:a2:fc:0b:61:d2:7c:6c:cc:ab:0f:ca:6b:
         c3:51:95:e3:ba:10:61:6f:74:e9:b9:1b:4c:2b:93:be:f5:3d:
         a4:db:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:37 2024 by rpki-client on console-ams.rpki-client.org