Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          BGj2kqiXjhMxc68Nb89uio2OrS/oIEs3yFngKSxetHQ=
Subject key identifier:   32:5E:B2:00:9B:3B:7A:CF:1B:E1:18:F9:E1:7F:58:5F:FB:CC:ED:CF
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       0417F69C351DA53E4868B17AA2667C743AD308DD
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     262992
IP address blocks:        186.219.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:17:f6:9c:35:1d:a5:3e:48:68:b1:7a:a2:66:7c:74:3a:d3:08:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=325EB2009B3B7ACF1BE118F9E17F585FFBCCEDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:fc:68:8f:05:89:04:e8:f8:2c:54:51:f0:
                    19:ed:f2:dc:4f:8c:49:05:32:4e:44:6b:a3:00:ba:
                    06:1c:e4:23:e2:6d:01:ec:90:d2:7a:3f:b6:4e:a9:
                    7e:de:8b:77:99:a0:98:bc:b2:a1:80:62:dc:01:da:
                    35:06:05:77:18:f2:e5:04:a8:43:20:13:cc:49:3d:
                    8b:51:92:76:66:52:d3:15:2a:1e:61:80:09:74:90:
                    2f:84:00:7a:3f:ac:22:7b:eb:00:e7:9c:80:98:42:
                    e1:97:43:34:ab:6b:db:5d:db:85:ec:c1:2d:c8:4a:
                    6d:51:19:00:d7:5e:ee:fd:37:7b:02:1b:77:a5:db:
                    4b:a6:12:66:8b:bf:62:68:0c:60:cd:79:89:22:ab:
                    0b:c9:60:d4:08:a7:6b:c5:56:0b:7f:ab:b5:67:37:
                    54:b5:6a:48:b2:b7:b0:fa:bd:96:36:a8:83:7e:a8:
                    63:a2:76:b9:33:98:14:20:43:5f:03:5e:12:6e:f6:
                    a3:e0:3c:94:6e:c9:56:e7:84:89:93:b2:9a:b5:8d:
                    3d:50:52:97:e9:c8:7d:89:19:fd:45:86:3c:c3:36:
                    3e:70:7b:71:da:11:dc:2f:ab:f7:fc:70:9c:e8:fc:
                    1f:64:90:15:e7:2e:23:80:7e:bd:fc:b0:b3:70:91:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:B2:00:9B:3B:7A:CF:1B:E1:18:F9:E1:7F:58:5F:FB:CC:ED:CF
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:da:53:bf:69:4f:e9:7f:38:d1:9b:5b:a2:35:3b:f0:44:26:
         4b:83:59:12:ee:54:55:9c:86:e9:c1:34:e2:8f:4b:a7:18:7e:
         db:6c:4f:75:b6:c8:cc:90:4c:89:dd:6c:9c:e2:b6:2e:1a:5c:
         46:12:31:7e:9b:63:df:4f:28:3b:9b:d5:7f:d1:3e:25:07:dc:
         22:0c:91:1b:8f:d6:70:ee:a2:71:d3:95:00:57:79:82:1a:6b:
         39:4b:f4:54:3f:27:e0:61:71:d3:fd:3e:c2:e1:28:10:0a:47:
         f9:8c:6b:d8:cf:e5:68:bb:51:bf:85:a3:3a:eb:11:28:70:4f:
         5a:61:28:c1:61:76:a8:b4:27:37:c0:30:40:72:6a:1a:5b:b7:
         c7:da:7a:b2:c7:a2:6c:b6:77:50:d9:ec:b7:44:37:92:8c:b1:
         c2:8a:13:bf:58:b7:40:78:11:0e:f8:c6:00:8c:21:1e:bb:bd:
         61:18:dc:df:8e:57:4e:6b:27:10:8d:07:57:d4:47:a9:7a:0b:
         06:f5:31:29:02:b9:6f:16:f1:26:89:a0:f4:56:06:0e:b8:cc:
         43:53:7a:18:07:28:4c:bd:ca:76:3a:5f:27:63:44:dc:65:a1:
         08:d3:d0:af:99:7e:c4:e1:3a:ac:ab:5c:1c:e3:8f:78:29:d3:
         ab:39:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:55 2024 by rpki-client on console-fra.rpki-client.org