Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          mEiTvnJ0Y6eXUl+IGX3rSzU2vBoaqAMLh8UhEIWr8LM=
Subject key identifier:   9B:C4:C1:A5:E8:B1:05:BB:E1:4B:D2:48:1F:C7:A1:16:69:3C:A4:A0
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       2B376C81B06D78B6DC8930009642F99AE348454F
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa
Signing time:             Thu 04 Apr 2024 16:56:14 +0000
ROA not before:           Thu 04 Apr 2024 16:51:14 +0000
ROA not after:            Thu 03 Apr 2025 16:56:14 +0000
asID:                     262772
IP address blocks:        186.232.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:37:6c:81:b0:6d:78:b6:dc:89:30:00:96:42:f9:9a:e3:48:45:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Apr  4 16:51:14 2024 GMT
            Not After : Apr  3 16:56:14 2025 GMT
        Subject: CN=9BC4C1A5E8B105BBE14BD2481FC7A116693CA4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:18:f5:f2:21:40:93:90:66:51:db:14:08:
                    40:66:d7:70:d7:b0:02:08:f9:13:46:ea:85:48:32:
                    26:fb:67:39:72:c3:bb:59:f6:42:ad:e4:55:cf:90:
                    b5:26:4e:01:cc:3b:92:8a:d1:9b:db:42:2e:fc:ad:
                    dd:90:35:be:d1:d2:35:d6:c1:d9:db:1f:6c:1d:4f:
                    f6:14:8f:25:a2:52:1b:de:a3:63:74:2f:97:09:67:
                    32:82:c5:94:2b:52:8a:05:53:64:23:30:13:4b:2e:
                    76:72:2a:2b:71:a2:44:55:eb:f6:19:b1:2f:eb:37:
                    5d:5c:24:f2:73:c4:9a:3d:df:c2:27:28:5a:66:e3:
                    a5:e4:cc:13:ef:eb:3f:e7:ee:88:01:75:21:a2:28:
                    f9:9a:76:c5:67:43:e7:ef:bd:1d:5a:8e:31:44:41:
                    fc:4b:ee:19:9f:ab:41:28:92:7d:91:3a:1c:54:62:
                    d4:61:3b:b9:fa:d5:a8:03:f2:a2:df:40:1e:b2:69:
                    51:ce:17:8c:a8:cd:89:ff:b6:14:00:09:4b:41:a9:
                    03:46:8b:56:82:54:76:60:0d:97:ee:6f:4f:c5:a6:
                    1b:60:b7:7f:93:c1:a3:f6:12:3a:3a:34:9e:1d:e2:
                    eb:58:5c:ac:71:85:8e:93:1f:86:93:41:9c:a7:47:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C4:C1:A5:E8:B1:05:BB:E1:4B:D2:48:1F:C7:A1:16:69:3C:A4:A0
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:12:10:fc:e2:64:43:29:10:cc:c4:cb:fc:27:b1:74:f8:
         e3:7c:cb:29:c9:18:63:c7:17:48:ed:7c:cc:52:3a:03:88:52:
         eb:c9:b0:0b:94:17:cf:79:0e:96:b8:1c:d8:64:2c:71:b6:95:
         31:a7:74:55:f3:ce:17:6a:80:e5:83:6e:1f:e6:ed:ae:ec:7b:
         7a:4a:96:77:8a:c3:1b:a5:7b:05:a9:7e:29:6c:56:a3:b5:ea:
         c8:10:1b:3f:a2:88:b4:2b:04:b9:49:94:bc:f7:53:5f:d3:7d:
         16:d2:58:b7:cc:72:58:9a:48:dc:9c:e3:b2:72:f9:79:ee:a0:
         f8:a7:62:a0:b1:3f:47:e8:d4:10:78:b9:d0:04:49:ae:86:7d:
         c3:ba:09:82:f0:7e:9a:b5:97:db:8c:6d:e4:f6:e8:e9:47:16:
         31:bd:04:7d:8a:de:7d:cc:fb:19:cc:6e:65:e1:06:dc:49:f6:
         76:e7:ae:54:ef:ed:0b:14:b9:a4:ea:4a:4b:6a:13:32:83:1c:
         77:2b:ed:ef:6d:f2:40:b7:46:f5:e6:c0:87:39:28:5f:9c:6b:
         b6:e5:71:1c:4d:03:e2:5c:a2:d4:87:b9:54:f3:ba:8d:46:5d:
         28:e2:45:f7:8a:d6:fa:a7:4e:6d:63:99:b3:40:d1:56:af:48:
         1d:77:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:14 2024 by rpki-client on console-ams.rpki-client.org