Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          Hf4VC0ReKiZprZ5+jX1imDwLWcMQwE3cSyBn/G///AE=
Subject key identifier:   B1:0C:8D:08:01:90:1C:EE:71:EF:02:C4:49:57:D7:BF:57:94:B2:0A
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       2D50DFA7BE845A0956E46B42765F6D3B84F16B5F
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     262992
IP address blocks:        186.219.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:50:df:a7:be:84:5a:09:56:e4:6b:42:76:5f:6d:3b:84:f1:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=B10C8D0801901CEE71EF02C44957D7BF5794B20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:95:56:92:65:9c:34:d7:28:d8:64:ab:88:
                    11:33:08:a7:a6:c2:29:0d:94:ba:ce:03:2b:21:ca:
                    ff:15:09:ed:50:08:26:58:47:e1:c0:c4:09:bd:11:
                    40:b9:38:05:36:08:4c:61:18:10:34:30:00:cb:1b:
                    b7:b5:c6:8c:66:9d:bd:16:55:1b:64:1f:57:c2:ad:
                    f0:49:98:6d:a4:6e:1e:5d:76:f4:4e:17:3c:ed:fa:
                    8e:2c:61:1f:48:3c:c7:78:08:51:d2:9a:74:ee:e1:
                    e1:8a:55:0f:cf:27:5e:93:4c:52:1c:1b:da:df:ca:
                    d4:fc:4c:56:a1:3c:47:e6:d2:13:d5:3e:2f:9e:24:
                    e8:85:a7:ba:ba:22:c0:2c:01:e0:c8:6f:01:f4:b1:
                    9e:94:cd:e5:72:00:e4:37:fc:3b:d8:6b:78:db:6d:
                    2a:65:a8:9a:87:ac:a4:80:91:22:b5:c5:8f:14:11:
                    ec:c0:06:b2:2b:f7:18:aa:15:b2:b4:72:4c:6e:d9:
                    10:5b:ef:e7:6a:de:12:0d:23:66:86:56:db:38:ee:
                    7a:17:45:0c:87:e5:e8:b2:61:d7:0c:17:fa:3f:e2:
                    7a:93:c8:65:1c:6b:2a:a9:1c:fe:08:99:00:dc:de:
                    a1:f2:bb:85:08:68:2c:02:e7:f2:8c:5e:d7:89:dd:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0C:8D:08:01:90:1C:EE:71:EF:02:C4:49:57:D7:BF:57:94:B2:0A
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:49:7e:c9:bd:8b:9d:f5:7f:59:d4:21:68:1c:f4:63:83:
         6f:10:3f:dd:72:8f:8a:a8:d3:56:78:aa:fd:68:15:e8:9e:b5:
         79:dc:a5:c6:0e:ec:48:60:d9:84:b1:ad:49:4e:e4:ef:cb:5f:
         5e:c1:7f:4e:47:41:ff:09:66:03:d4:e0:88:23:75:52:c7:39:
         47:0c:fb:1b:20:b8:6e:a1:48:07:82:56:28:36:cb:ad:33:73:
         57:6f:57:f7:5a:e4:44:42:ca:87:5e:da:41:a3:dd:3a:c6:e3:
         da:4a:e5:0e:17:79:c7:11:8b:73:49:65:da:31:c0:af:89:5d:
         d9:36:61:9a:45:25:48:01:14:16:1b:19:cf:19:d6:67:3b:8a:
         9e:b4:50:f8:13:0c:96:2d:0a:e3:79:99:00:38:8a:de:9e:39:
         8d:05:56:d2:b3:40:ff:3f:8b:59:f8:14:49:4d:f6:68:2e:5e:
         34:ac:5c:9e:d1:c1:b7:00:dd:d1:a8:0d:e4:a7:51:0f:0f:aa:
         65:40:9a:7b:fe:c8:50:de:93:2b:70:ea:51:09:c0:3c:4e:71:
         a4:da:ed:16:3f:2b:ef:df:86:b6:6a:e6:c0:5f:39:80:56:24:
         88:5b:0b:c7:ef:ac:e8:80:a7:61:d0:0e:ff:fe:d7:4c:1f:48:
         06:e1:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org