Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36342e302f32342d3234203d3e20323632373430.roa
File:                     3138362e3230382e36342e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          /aI79TSI0szhliRdznNy7jFVveeloJjiZKM8cOdNlV0=
Subject key identifier:   AF:C7:7A:D5:DA:BC:B6:FF:69:CC:15:56:07:31:E2:2C:5B:0F:91:7E
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       0FF90C8C7E9B9082475FC435E624D522E9E64BED
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36342e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:06 +0000
ROA not before:           Mon 23 Sep 2024 20:50:06 +0000
ROA not after:            Mon 22 Sep 2025 20:55:06 +0000
asID:                     262740
IP address blocks:        186.208.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f9:0c:8c:7e:9b:90:82:47:5f:c4:35:e6:24:d5:22:e9:e6:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:06 2024 GMT
            Not After : Sep 22 20:55:06 2025 GMT
        Subject: CN=AFC77AD5DABCB6FF69CC15560731E22C5B0F917E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:a4:9b:8c:e8:27:ef:ff:64:77:b8:68:0e:
                    f0:69:49:10:07:91:d1:cf:8d:92:e9:88:0e:95:1b:
                    c5:d0:d2:51:d9:cc:e7:2e:ac:f3:64:b5:63:b1:ed:
                    e4:4a:28:a2:72:fe:65:d6:4a:a4:dc:1a:f3:73:36:
                    47:61:05:9a:30:fd:24:e8:44:62:67:7c:aa:f7:23:
                    41:07:7e:67:9a:24:57:c6:57:51:50:62:0f:d8:4d:
                    b0:79:e5:ee:8e:90:50:2b:1c:f3:bc:3b:ca:7d:14:
                    91:bc:cc:70:14:12:60:68:4c:15:5a:d2:ee:d1:bf:
                    ed:b9:ad:11:19:ff:f3:61:7c:66:b1:06:49:eb:e2:
                    9c:63:5c:bd:d2:72:68:63:a5:73:c0:74:54:c1:b7:
                    c6:6a:40:ae:a4:4c:ac:12:3e:0c:d9:b9:95:be:f1:
                    95:50:eb:fc:0f:2f:59:fc:f6:f9:9e:fe:c7:56:f9:
                    dc:1a:42:3f:c1:91:b8:1a:b8:67:60:1c:54:2b:cb:
                    d5:76:06:32:5f:12:7f:42:1e:a7:67:a8:87:ab:95:
                    aa:81:18:3b:75:38:fd:b7:a9:86:a0:8c:33:9e:d9:
                    0d:d2:50:9d:ff:ab:d8:e1:ca:cb:7b:24:30:b3:48:
                    a7:52:0c:f1:b8:5d:f5:6a:2d:d4:4a:5f:ff:23:f6:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C7:7A:D5:DA:BC:B6:FF:69:CC:15:56:07:31:E2:2C:5B:0F:91:7E
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36342e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:a6:f2:a8:ed:90:4a:19:4a:58:f6:de:11:41:61:94:06:
         70:bf:bf:0c:75:21:c9:3e:19:d5:3f:c6:4c:27:22:d7:e1:b9:
         33:8e:03:8f:b0:53:cf:ff:09:0a:0d:2b:de:2c:a5:73:66:ae:
         b2:1d:62:2c:d6:c9:86:b4:88:ce:9e:db:02:62:c2:34:2a:3e:
         17:c4:de:78:12:15:2e:3e:3c:3f:28:6d:48:03:1f:35:0c:a6:
         67:ae:bd:d4:ec:01:7f:3b:31:4b:03:ce:18:96:49:7c:50:15:
         a3:4b:91:6c:08:98:7a:c1:33:2c:83:31:bf:11:fb:bb:15:3c:
         58:ea:0c:c6:46:46:66:bf:75:b5:87:27:81:38:26:ae:42:fa:
         e7:21:97:61:ec:ae:bc:2a:28:dd:cf:35:31:80:48:5e:f9:a0:
         2d:c0:b2:e9:fb:85:02:d3:2a:a3:01:de:63:0e:46:58:6f:d4:
         9e:f3:d8:84:cd:e7:da:cf:3d:62:88:f7:2e:e6:fd:c7:6e:21:
         68:bd:0a:19:15:2f:c7:50:8e:49:97:ca:3f:bf:bb:56:9f:2c:
         53:11:3a:ee:06:19:c5:71:ea:63:49:9e:72:9f:8b:c7:50:1d:
         a1:02:5d:81:fd:04:0d:c5:35:cd:35:72:27:ee:78:c7:b3:e0:
         d2:ad:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org