Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37362e302f32332d3233203d3e20323632373430.roa
File:                     3138362e3230382e37362e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          TFwt2579qJHuyanUeyPpDDu21Swln5QTlkWAKeY7tH4=
Subject key identifier:   8C:3D:46:75:AB:8D:8A:F6:73:7F:13:F3:D7:11:CB:86:57:2D:C1:D6
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       3D1F9E547F12793B8B92D083305826F7F6C5A39D
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37362e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:56 +0000
ROA not before:           Mon 23 Sep 2024 20:49:56 +0000
ROA not after:            Mon 22 Sep 2025 20:54:56 +0000
asID:                     262740
IP address blocks:        186.208.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1f:9e:54:7f:12:79:3b:8b:92:d0:83:30:58:26:f7:f6:c5:a3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:56 2024 GMT
            Not After : Sep 22 20:54:56 2025 GMT
        Subject: CN=8C3D4675AB8D8AF6737F13F3D711CB86572DC1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:d9:52:15:c0:74:4e:ed:c5:68:24:8a:84:
                    f3:d3:84:bc:1a:fa:b3:59:18:76:64:8f:47:54:09:
                    54:2a:e0:c0:27:e6:f8:82:29:49:f9:0f:6d:ab:c2:
                    8e:db:e4:30:b7:36:84:16:1b:4d:85:3e:d7:64:2d:
                    3a:79:51:3d:06:7f:4d:89:30:22:47:0b:95:11:56:
                    eb:96:50:33:da:ed:ae:d8:26:d3:70:1d:7c:45:97:
                    7a:13:fe:db:94:80:f5:9d:2b:0f:50:4c:14:a1:0a:
                    42:e6:b2:1a:0b:59:2a:88:9e:9e:7e:3f:ca:da:01:
                    f3:a9:c6:12:5f:3a:df:49:f7:73:14:d7:90:c1:0b:
                    6b:07:62:61:22:43:49:af:d0:44:77:d9:1c:4d:f5:
                    08:57:bf:52:d2:3e:31:b5:94:b2:a2:1f:64:dc:f5:
                    0d:b7:7e:ff:a1:c3:67:04:7e:99:36:43:08:50:9b:
                    28:9a:51:6c:e0:99:23:6e:34:d7:78:45:d3:d2:07:
                    26:26:59:b6:2a:35:f1:f4:e3:29:e6:21:6a:9d:fb:
                    a3:a9:d6:a6:77:53:94:2f:92:8e:54:d3:c2:b6:19:
                    1b:bf:28:c6:66:7a:83:53:f8:6b:84:5f:4b:a7:d4:
                    5b:94:e6:83:1a:5c:02:cd:ea:31:04:79:82:fd:dc:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3D:46:75:AB:8D:8A:F6:73:7F:13:F3:D7:11:CB:86:57:2D:C1:D6
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37362e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:bc:09:75:86:44:a7:85:e5:dd:d6:c0:40:7a:48:4a:f3:
         fd:5a:29:d0:75:6e:68:0e:3b:c1:3f:76:87:49:f8:49:fe:07:
         bc:0d:91:83:62:b5:96:38:2f:f3:60:f3:99:31:0b:85:bd:da:
         4f:2b:40:fc:3b:0c:24:42:1f:f9:9c:d9:e2:fe:58:e4:27:bf:
         6c:a8:20:00:54:97:3d:c6:f8:40:89:e2:91:98:19:7f:87:a3:
         3c:40:dc:8f:6b:e2:4c:49:57:bd:14:41:5d:4c:0b:6a:c6:d3:
         7d:06:fb:e0:f9:e8:29:4a:26:64:0b:ad:36:dd:85:55:1b:97:
         22:0a:94:59:ca:a2:e1:f8:98:70:83:35:72:7f:c1:c3:5a:ed:
         1f:72:5d:19:e3:17:26:96:2e:f2:7c:35:22:ca:ca:00:64:a3:
         64:9c:ee:00:44:b0:40:d9:92:d3:96:b8:a4:df:28:db:26:e5:
         9e:d0:cc:bf:a1:93:13:31:7a:1b:f2:58:5c:8f:b3:dd:f7:2b:
         fa:d5:23:be:81:0b:1e:94:5e:0e:5a:a1:55:c8:9b:76:38:ed:
         5e:de:a5:6d:c9:c3:e5:a7:83:2f:5f:2f:6c:49:eb:f9:81:1c:
         e6:ca:9f:dc:7e:9d:90:c4:b8:55:75:3e:c9:d5:60:ff:7e:fd:
         7f:83:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org