Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31382e302f32332d3233203d3e20323632383033.roa
File:                     3138362e3235302e31382e302f32332d3233203d3e20323632383033.roa (raw, json)
Hash identifier:          ifzyEyHp6H++270tnDSEBsZ50Ak0YRhuCClz7nwg/7A=
Subject key identifier:   DB:67:B7:E9:18:0A:97:A9:C5:54:00:93:CD:9E:39:C6:AF:DD:24:69
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       52E03C4618EAED2115C79227CE2636E646DB697A
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31382e302f32332d3233203d3e20323632383033.roa
Signing time:             Wed 17 Jul 2024 13:28:03 +0000
ROA not before:           Wed 17 Jul 2024 13:23:03 +0000
ROA not after:            Wed 16 Jul 2025 13:28:03 +0000
asID:                     262803
IP address blocks:        186.250.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl
                          rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e0:3c:46:18:ea:ed:21:15:c7:92:27:ce:26:36:e6:46:db:69:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Jul 17 13:23:03 2024 GMT
            Not After : Jul 16 13:28:03 2025 GMT
        Subject: CN=DB67B7E9180A97A9C5540093CD9E39C6AFDD2469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:a4:6e:79:40:e7:13:93:27:84:d6:74:62:
                    70:fa:62:55:92:d5:c3:0a:86:cb:6c:82:1b:85:53:
                    96:f6:81:5b:39:b5:3f:1e:17:23:1f:9d:b6:ee:5f:
                    7a:28:02:43:a0:4e:ad:4e:75:31:d8:e6:ca:33:21:
                    b6:1b:ac:3c:b8:52:c7:84:54:cc:dc:e2:4f:0b:84:
                    76:ed:82:ad:b1:bd:a3:a4:76:eb:f4:2a:0f:25:32:
                    6e:d3:c5:f7:f3:06:8c:fe:76:ac:41:2a:a6:02:30:
                    c3:43:0e:3c:c5:2e:90:20:8a:3d:ff:fc:72:01:0b:
                    41:55:02:3e:14:7d:aa:3a:70:62:7d:93:ba:d5:ec:
                    2e:39:69:09:40:65:f0:08:99:7b:94:4c:8a:b6:db:
                    5a:b0:10:2e:c5:ed:96:a5:de:f1:56:af:27:f7:4d:
                    d8:07:13:1e:5a:0a:56:21:15:2f:62:3d:25:41:e0:
                    ae:46:22:ee:ce:1e:34:f7:cf:8b:68:b6:7c:46:89:
                    fc:c9:75:7a:ea:f7:bf:87:49:96:ae:7c:e9:98:5d:
                    82:8e:41:fd:e3:a6:b5:4e:07:1f:51:0e:cd:7e:b7:
                    b4:f6:60:be:5a:de:74:93:e2:21:a8:ed:52:27:03:
                    3b:ed:e2:e8:67:05:8c:14:90:e8:ea:21:e2:56:9b:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:67:B7:E9:18:0A:97:A9:C5:54:00:93:CD:9E:39:C6:AF:DD:24:69
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e31382e302f32332d3233203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:0e:1b:73:cf:f0:06:f6:47:ad:59:89:58:09:7f:73:c6:fc:
         9e:96:24:2d:e4:17:a0:43:9b:13:98:98:c9:68:e6:15:2d:c2:
         a2:f2:b5:52:46:9f:9b:50:f4:28:42:dc:8a:0b:99:e9:a3:77:
         b3:6a:31:5d:1d:f9:e2:df:2f:8f:ba:60:99:14:91:0d:2e:aa:
         29:26:f5:14:0e:f3:f4:6a:62:41:f1:a1:5f:05:21:7a:0d:7c:
         2b:49:69:e2:06:4c:10:ec:22:53:09:cd:3d:08:5f:5e:b5:15:
         f1:15:c6:b5:5c:19:50:90:39:51:ae:df:ab:26:af:ef:5d:26:
         a0:b4:d4:06:13:e9:1f:ca:2f:dd:27:c0:d3:e1:7a:11:9a:c9:
         bb:d6:9c:62:62:10:58:12:6d:77:70:a4:6f:30:8a:3f:d0:ad:
         bc:28:af:f3:b1:d1:4b:ff:7a:db:12:83:ee:58:44:47:ba:10:
         19:77:f4:9c:47:07:b4:a5:06:5d:1f:29:be:02:91:ab:da:4f:
         4a:b7:43:78:3e:83:43:fa:5f:16:76:c9:3f:6f:34:db:70:4c:
         78:30:9e:3e:ab:a1:5f:75:89:77:ba:89:5e:1b:76:88:89:d1:
         d7:0c:00:ff:d2:48:0f:74:5f:38:53:f9:9d:bd:7e:61:68:ea:
         49:12:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org