Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (raw, json)
Hash identifier:          wZdANpOFRinIMx0CC16GSM3lDiKlGdIxtjN06Z0odd8=
Subject key identifier:   0D:DA:79:68:50:59:5E:3A:43:E8:90:4E:03:F0:0F:27:39:82:10:34
Certificate issuer:       /CN=642D27C2B88FC1E644188313B8DE644A2705C863
Certificate serial:       3137F9FC6A53BF99AD41ACA63DEB296DEEE0715C
Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa
Signing time:             Wed 03 Apr 2024 19:37:19 +0000
ROA not before:           Wed 03 Apr 2024 19:32:19 +0000
ROA not after:            Wed 02 Apr 2025 19:37:19 +0000
asID:                     53172
IP address blocks:        186.225.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl
                          rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:37:f9:fc:6a:53:bf:99:ad:41:ac:a6:3d:eb:29:6d:ee:e0:71:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863
        Validity
            Not Before: Apr  3 19:32:19 2024 GMT
            Not After : Apr  2 19:37:19 2025 GMT
        Subject: CN=0DDA796850595E3A43E8904E03F00F2739821034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:f9:e3:32:35:20:1b:4e:d8:2d:f6:ed:76:
                    3d:87:17:fd:c2:6e:48:35:7f:f3:3b:9a:cb:1b:bf:
                    02:18:41:57:70:24:69:f3:95:df:5a:2f:24:de:c8:
                    95:28:33:62:b3:42:e0:89:e6:23:c0:35:30:8d:9a:
                    13:1d:38:74:c6:1e:86:25:30:a7:3a:c4:98:e2:99:
                    ac:cf:80:eb:0b:d1:d0:fd:7d:32:e6:e4:83:ea:e5:
                    ad:5f:74:f6:f8:3b:4d:f6:00:3d:38:fc:1d:2a:a1:
                    28:b9:18:7f:3e:03:1c:14:9b:ba:15:b9:32:b8:5d:
                    22:77:6b:53:84:45:7f:ac:bb:8e:98:77:11:48:e7:
                    b8:3b:d9:ae:af:e7:c0:8e:15:f5:60:b4:98:16:f7:
                    31:68:4a:37:7a:5d:d1:2a:5b:c9:7e:8c:d7:f5:55:
                    cf:b1:98:be:b6:5d:e2:b4:93:c5:be:c4:5c:75:f6:
                    1b:a6:fc:c1:b8:38:3a:e8:78:3a:04:62:ee:5f:07:
                    0e:5c:0d:b2:fe:12:4a:e9:c4:7a:6b:9f:bb:74:0e:
                    2b:e4:75:e6:60:84:df:b1:54:4b:97:b3:5f:94:89:
                    31:d0:96:de:39:23:e9:12:89:38:fc:ac:9a:50:53:
                    e8:7a:cb:4e:64:3b:b3:33:b3:8e:3e:c2:7b:ff:ca:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:79:68:50:59:5E:3A:43:E8:90:4E:03:F0:0F:27:39:82:10:34
            X509v3 Authority Key Identifier:
                keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:40:82:b8:65:0e:b1:3c:59:c6:6c:da:f8:01:ca:62:7b:2d:
         85:50:8c:42:02:06:f4:8e:95:c2:e5:ee:f0:76:23:c2:6e:7c:
         17:c6:32:9f:86:af:fb:10:03:86:e8:d9:69:c9:ff:10:08:8c:
         e0:ca:f1:e1:41:aa:07:8a:de:10:9a:96:79:f2:04:88:ea:67:
         6a:8b:e7:2f:e8:fa:71:84:7d:6c:02:84:f1:f0:ba:31:4a:16:
         8b:7d:3a:d4:0d:90:ac:aa:d0:55:19:17:04:a4:33:86:09:a5:
         cd:b0:32:0e:bb:e2:ed:06:d5:a0:e0:78:4b:47:ac:6b:a5:a6:
         e6:42:8c:8f:44:b4:a1:2d:4e:46:56:da:6c:01:80:b1:0d:41:
         62:90:36:0f:ef:b5:2a:2d:fe:fb:70:d6:7e:ad:1f:96:d9:15:
         e0:84:79:a8:53:81:ce:36:55:19:56:7e:2d:b7:7e:99:a1:ba:
         85:29:f9:bf:ff:ef:c6:ae:ad:71:9f:7a:19:03:9c:e9:e9:7a:
         54:53:ee:13:e7:43:43:0c:07:9f:bb:2a:2e:a6:8c:f0:b2:55:
         74:ff:bc:70:36:cf:9b:7e:f1:0a:b5:a6:70:79:9d:4d:cb:3c:
         e8:4a:a6:a5:9d:70:c8:f0:aa:4b:b6:8a:a2:53:75:d8:ee:e7:
         ec:8d:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:14 2024 by rpki-client on console-ams.rpki-client.org