Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa
File:                     3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          N6D992F7TC9pHsQFne3CbvFq2wZf+iHmK7bsyr3ToRU=
Subject key identifier:   8B:35:5E:7B:BC:20:D3:9F:1D:42:51:10:D7:F7:35:8D:AF:39:AC:E8
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       22ED6E8B03C0DA2A36CAF224CF80CC7E9202DF44
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:55 +0000
ROA not before:           Mon 23 Sep 2024 20:49:55 +0000
ROA not after:            Mon 22 Sep 2025 20:54:55 +0000
asID:                     262740
IP address blocks:        186.208.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ed:6e:8b:03:c0:da:2a:36:ca:f2:24:cf:80:cc:7e:92:02:df:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:55 2024 GMT
            Not After : Sep 22 20:54:55 2025 GMT
        Subject: CN=8B355E7BBC20D39F1D425110D7F7358DAF39ACE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:61:2f:37:32:9d:ba:e3:dc:28:4d:14:79:
                    dc:f8:20:11:46:f8:5a:21:c7:4e:95:51:a6:08:03:
                    71:d8:ea:99:03:b3:9b:80:a3:fb:5a:3a:c5:9e:a5:
                    2a:be:ca:5b:46:fb:0f:90:60:94:e2:17:67:d3:55:
                    62:4b:b5:7d:32:54:bb:2b:de:52:5c:70:ca:a5:1a:
                    51:38:a7:1c:f7:b5:31:d7:9a:70:12:e1:f0:6f:52:
                    94:3a:7a:62:55:3e:60:58:80:97:a2:33:8f:6c:66:
                    69:6e:a0:e2:28:11:61:9c:d1:91:91:20:62:9b:34:
                    91:7a:78:e6:2b:0a:a4:27:b2:d0:91:a8:77:5d:61:
                    76:d3:f1:b0:c4:01:ac:87:14:cc:21:09:52:be:97:
                    56:e3:28:24:ff:97:24:e5:43:50:48:d8:1f:86:bb:
                    c1:83:89:73:96:f3:2a:43:bb:ab:c7:f2:4c:22:d0:
                    98:17:60:1e:90:0b:ee:b8:95:05:cc:35:ae:a5:5a:
                    3b:44:50:12:cb:e7:c2:a9:fa:83:cd:b9:9d:69:8d:
                    d1:cb:bf:65:50:55:a9:c1:69:3b:40:e2:9c:2f:55:
                    42:62:70:52:5c:fa:28:62:dc:e9:10:b0:fa:9a:ab:
                    4d:46:96:49:61:7a:c6:71:8e:5f:e0:15:80:2f:bd:
                    12:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:35:5E:7B:BC:20:D3:9F:1D:42:51:10:D7:F7:35:8D:AF:39:AC:E8
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:b1:3c:31:bc:67:b9:c3:f2:15:18:6a:63:80:cb:28:17:
         83:ae:e3:e7:be:c0:bb:db:08:06:9c:25:dd:16:9a:6d:6b:d3:
         0a:a2:2a:c4:59:37:56:32:01:8a:69:c4:6a:f2:f8:b2:78:57:
         7b:a4:54:75:e8:09:83:10:11:ca:fa:8e:1f:af:33:60:09:4f:
         79:3b:6f:2b:62:79:32:cf:e2:d0:58:66:14:9f:9c:7f:9f:91:
         fd:a9:e8:d6:fe:c4:b4:d4:19:0f:4f:7f:29:2a:67:de:6e:f0:
         e9:40:72:d1:2c:5f:15:88:03:46:a3:1b:d5:28:fa:72:c4:26:
         a4:6d:5b:3b:4e:fd:bd:64:3b:32:eb:e2:a3:1c:62:16:d3:0f:
         02:77:f2:4d:3d:5d:b7:ad:a0:b8:33:e6:2a:24:c4:d7:bc:e3:
         ae:5a:d3:c3:37:f1:89:40:14:7a:de:fd:90:ee:92:a0:84:04:
         38:22:ce:fd:cd:40:18:d3:2b:bf:2a:70:37:a6:30:28:1c:63:
         fd:52:73:15:40:52:c2:2d:37:38:1a:4d:90:55:47:9f:19:95:
         92:fe:1b:6e:87:6f:38:c3:78:27:99:bd:0f:1b:1e:68:6e:89:
         8c:d5:77:b5:32:df:8b:27:c3:ff:ab:28:ca:6b:a0:ea:91:cb:
         ea:26:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org