Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa
File:                     3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (raw, json)
Hash identifier:          ccVpUCCD3O0Br7zTyGsGBvpZmVzOVjnQjZ2iml4XPNg=
Subject key identifier:   39:A5:ED:F9:71:78:C5:73:E5:37:30:F9:F5:F6:AB:54:4A:00:E3:1C
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       139D97BB8CE937094382AEF0734DC52280C2B10A
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     61888
IP address blocks:        186.235.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9d:97:bb:8c:e9:37:09:43:82:ae:f0:73:4d:c5:22:80:c2:b1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=39A5EDF97178C573E53730F9F5F6AB544A00E31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:21:81:97:45:53:8a:99:8b:4b:73:ea:9f:
                    ac:80:ca:4c:f7:17:1a:26:01:2e:16:6f:e1:6f:ce:
                    c1:a2:84:a7:26:29:f1:8c:f8:09:b0:37:58:fb:f0:
                    59:1d:50:eb:aa:ee:75:32:1a:47:08:4b:4f:c0:c4:
                    ed:7e:69:0a:b2:e6:1e:7d:e3:42:93:5d:6c:da:d4:
                    e0:d9:be:fe:49:6f:7e:e5:9f:b1:b0:9a:50:6e:c5:
                    f9:51:b8:d6:5e:8e:27:30:9e:48:69:b1:85:69:ba:
                    74:e0:1f:07:cf:de:6c:f6:ec:b9:19:b9:f3:ee:d1:
                    da:d3:50:37:d0:1e:87:50:49:7d:49:4f:cf:41:3f:
                    71:0e:83:40:99:cd:9a:8d:2e:2b:4d:49:46:a3:be:
                    62:bf:af:ce:5d:2f:b0:e3:0c:9b:de:91:19:f1:b1:
                    9d:2e:6c:03:a8:b9:15:69:8c:30:37:cd:73:07:84:
                    60:4a:fc:88:0d:e5:e2:1a:b9:1f:ee:f2:0d:3a:fd:
                    19:47:1b:2c:1e:83:7a:b2:88:e4:f5:76:9f:40:cd:
                    32:64:b4:72:59:7c:c8:33:d0:3a:a9:5d:18:cc:4a:
                    b7:5c:26:0a:e6:1e:d0:53:a3:52:60:27:f1:51:b0:
                    9f:0e:6f:6b:ce:f3:e6:d5:23:57:dc:ea:d2:9e:6e:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A5:ED:F9:71:78:C5:73:E5:37:30:F9:F5:F6:AB:54:4A:00:E3:1C
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:83:7b:e7:26:85:d6:e7:7c:b1:26:8a:8b:b1:ab:48:a4:51:
         31:6b:97:34:37:08:ff:4e:35:00:e2:71:c8:0a:f1:c7:4c:27:
         70:b4:8e:65:aa:27:9c:54:4c:18:e5:de:42:bb:1f:f1:5f:af:
         f6:e7:4c:c5:58:6f:cb:e1:53:65:2a:35:b6:e1:99:9d:e4:71:
         84:e3:ad:3b:a4:79:d5:31:64:5e:d3:2a:29:62:4c:fc:b1:79:
         e6:f4:36:5e:c6:2d:00:df:0b:4f:23:91:34:10:ab:31:e0:28:
         30:99:8e:1d:95:52:58:cf:a9:21:ca:e3:55:22:ca:fe:50:32:
         5f:9f:a5:af:de:1d:d7:34:d4:0a:85:92:b8:18:64:d6:87:c3:
         b2:8d:52:d7:6d:3b:1a:17:eb:ee:a4:53:9b:b1:fd:fc:81:4f:
         5c:12:ff:48:f2:a1:88:af:60:5a:cd:a1:48:dc:8c:eb:2a:9d:
         54:51:d6:c0:a5:bc:6f:31:c3:1e:e4:0e:80:01:69:d9:a9:9a:
         7b:4e:85:9b:d2:33:47:c9:f8:73:34:03:cf:0d:c4:62:a9:bf:
         94:ff:a2:67:70:36:d5:df:ec:bf:42:1d:80:76:6f:71:8f:17:
         83:2f:88:c8:39:54:04:1a:33:4a:cf:b9:97:24:0c:b5:63:6f:
         37:53:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:25 2024 by rpki-client on console-fra.rpki-client.org