Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa
File:                     3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa (raw, json)
Hash identifier:          4kQBWvzsLyepALmRGo72MzYTlEzsLrre+wdc7PfFphI=
Subject key identifier:   54:6E:23:84:42:A6:37:E1:21:48:65:B6:14:51:48:FC:14:2B:A8:BE
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       217ED8F1AFC3C9A1239661A9BAF79B12E1317579
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:00 +0000
ROA not before:           Mon 23 Sep 2024 20:50:00 +0000
ROA not after:            Mon 22 Sep 2025 20:55:00 +0000
asID:                     262740
IP address blocks:        186.208.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7e:d8:f1:af:c3:c9:a1:23:96:61:a9:ba:f7:9b:12:e1:31:75:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:00 2024 GMT
            Not After : Sep 22 20:55:00 2025 GMT
        Subject: CN=546E238442A637E1214865B6145148FC142BA8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:f2:d3:e0:26:cc:0e:e4:11:35:05:01:33:
                    15:11:94:e8:2b:cc:46:6f:2d:74:15:6e:94:f1:ab:
                    ef:01:65:97:32:24:6c:b6:e0:b5:0e:cd:54:2a:40:
                    ef:2b:2f:7c:60:d5:48:fb:f0:a7:18:7f:26:1d:6b:
                    17:ef:33:a2:88:d6:b3:d3:91:72:80:d9:ea:f8:98:
                    cd:eb:4f:23:fe:ae:00:11:a9:01:b2:0a:b9:a3:97:
                    96:40:9d:92:56:bf:6a:c1:e1:7e:3d:70:43:f8:be:
                    66:0d:d3:db:ea:43:2c:44:33:74:c5:31:35:3c:2e:
                    0b:93:c9:eb:58:e4:e5:d2:ae:4b:3e:93:66:04:64:
                    07:88:d9:e4:f0:e0:a0:a9:fe:5e:e3:c9:af:cc:ce:
                    46:9f:bc:49:36:8d:80:8f:7d:75:82:e5:39:dd:76:
                    71:64:58:0a:61:cb:8b:ad:93:6a:6d:1a:a2:24:18:
                    ec:25:0d:9c:14:07:f5:76:77:a2:30:1c:31:c6:e5:
                    3c:c2:8a:10:d0:fe:56:50:2e:a7:04:02:09:cf:a3:
                    1d:3d:d8:c8:9b:79:28:5a:87:c3:c5:06:f8:a8:f2:
                    d5:bf:9a:80:ad:5a:88:80:a3:f5:38:e5:f5:3a:fb:
                    79:8a:8a:7a:4c:7f:84:52:18:84:bf:3c:22:49:fb:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:23:84:42:A6:37:E1:21:48:65:B6:14:51:48:FC:14:2B:A8:BE
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32312d3231203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:c6:72:fe:d6:9a:ce:f3:02:af:76:a6:26:25:82:8d:2a:f4:
         3b:e2:7c:d9:d2:3a:75:6b:94:4d:f6:d3:d0:4c:da:03:bb:9b:
         cb:99:95:f7:b4:39:8d:80:df:f2:bd:9c:b9:4b:52:a4:42:4e:
         23:1f:0b:68:9c:28:5a:0d:2f:60:26:f3:e4:15:2d:0a:e1:2f:
         4c:72:fd:23:a5:74:f5:bd:f9:b5:72:73:05:bd:df:43:86:e1:
         ff:51:3d:a6:16:96:61:4c:7a:31:97:6e:da:a6:15:f6:e4:26:
         76:63:d1:ad:6d:3e:1d:2e:db:5c:13:b4:46:68:61:65:53:fe:
         e4:c4:4d:04:a5:77:14:c9:ea:8f:29:74:90:f8:3e:17:d9:9f:
         91:ba:6b:53:33:23:41:20:01:90:19:50:8c:92:80:06:f3:6e:
         fa:03:c9:16:0c:08:a4:c0:7f:9a:24:03:3b:ae:26:d6:7d:1a:
         9e:d2:2b:46:53:69:72:b8:ea:2e:b9:86:5d:89:13:ab:cc:33:
         cd:1a:b9:10:76:de:70:d7:67:af:e0:03:80:fc:f9:a9:fe:b1:
         81:aa:a1:11:61:f1:89:7a:0c:d3:b2:02:bd:6e:23:04:b2:95:
         fa:3c:5e:e0:17:99:9b:ef:74:6e:59:97:44:b9:08:e4:63:c2:
         94:b1:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org