Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32332d3233203d3e20323632373430.roa
File:                     3138362e3230382e37322e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          G6QiQMhEy8ifm5GsT84rtd5mV/aEsSGSwDDYNuJAzZA=
Subject key identifier:   2A:EC:F0:CC:54:6E:4B:75:34:D1:C3:6C:B3:C9:19:B4:AE:98:26:DC
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       348127AEF8849DF3FAF3633D7E58F8F570112C37
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:56 +0000
ROA not before:           Mon 23 Sep 2024 20:49:56 +0000
ROA not after:            Mon 22 Sep 2025 20:54:56 +0000
asID:                     262740
IP address blocks:        186.208.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:27:ae:f8:84:9d:f3:fa:f3:63:3d:7e:58:f8:f5:70:11:2c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:56 2024 GMT
            Not After : Sep 22 20:54:56 2025 GMT
        Subject: CN=2AECF0CC546E4B7534D1C36CB3C919B4AE9826DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:57:89:1e:7e:2c:93:12:6f:9d:74:0c:2d:
                    bc:1f:c6:b7:c1:6a:ca:05:f3:26:b8:83:a4:83:3c:
                    93:89:7d:6c:51:ce:1d:bc:b5:e9:0f:86:0d:75:57:
                    23:43:21:6c:c7:3b:d5:05:8d:3e:cb:07:92:c4:e4:
                    de:8f:bc:e5:f6:4a:06:94:88:aa:31:e2:64:f0:4c:
                    0c:9a:ca:45:52:b0:eb:6c:cd:f9:bd:d5:e2:fd:3a:
                    e5:2b:76:dc:94:6d:38:cc:ab:0e:57:3f:c3:56:4e:
                    45:15:5b:e3:34:f6:65:d5:84:9d:9e:13:9d:25:a5:
                    b5:82:99:72:29:da:72:0a:2c:3d:9e:e5:7e:26:b6:
                    64:4b:37:a0:5d:00:c9:e8:b2:e1:be:8f:d0:38:7d:
                    c1:41:b7:e7:a7:c7:2a:19:27:9f:a1:5e:0d:98:0d:
                    09:c4:22:12:1f:16:ab:c6:1e:ed:88:fa:c7:38:d8:
                    5e:7b:d3:52:7a:e8:ec:03:67:d0:34:34:1c:ea:95:
                    0b:7d:af:20:35:fc:f7:cf:db:aa:ce:5f:71:65:a7:
                    42:f5:ad:90:94:91:8b:ae:e0:8b:b0:4e:fc:b4:ec:
                    13:89:e8:cf:18:33:04:33:a7:8f:10:81:b6:f0:6b:
                    21:eb:55:f6:23:9a:62:2e:72:4d:f6:71:d2:fb:3d:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:F0:CC:54:6E:4B:75:34:D1:C3:6C:B3:C9:19:B4:AE:98:26:DC
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37322e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:7a:b2:6d:92:ab:9a:ee:e8:95:de:cf:81:11:be:b0:45:
         b8:27:02:7b:5f:fb:2f:ea:53:b6:59:11:70:66:86:80:a1:b9:
         25:88:72:1e:f0:0e:c1:07:04:3b:3b:cc:5c:05:91:9b:c8:4c:
         17:af:49:e0:59:c7:80:64:4f:ed:54:cb:37:d8:5b:2d:73:f6:
         72:f2:b5:8f:c4:c5:4a:68:34:f9:50:40:f0:6c:28:ef:84:64:
         7e:16:53:71:ab:b4:b3:33:e2:24:17:09:6d:1e:e0:7f:30:18:
         e3:49:af:71:03:26:2d:13:35:06:f4:c7:91:65:04:e3:82:d9:
         4f:36:d8:af:8c:78:52:79:1a:66:96:05:98:50:3e:80:b6:e8:
         da:bc:9c:b9:8d:cd:86:36:94:77:77:c8:49:c9:bf:ba:17:c6:
         2d:a6:94:99:b6:78:d5:a0:a3:75:33:bd:34:92:3b:73:18:05:
         50:13:2d:d9:f2:c1:2d:99:ae:26:9c:b8:3d:87:08:6a:90:88:
         d8:aa:70:0e:f7:d6:c7:da:ec:07:8e:7e:1d:67:4f:66:91:05:
         c7:f0:fa:4f:6e:74:99:91:bc:75:a3:6a:33:04:a0:08:48:73:
         fe:b0:66:bb:8b:3a:7e:1c:d7:e6:61:f8:a4:ab:1e:79:b6:f6:
         a7:93:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org