Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37372e302f32342d3234203d3e20323632373430.roa
File:                     3138362e3230382e37372e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          K4WprNmeIxyUvc8rkXkG4dx3l3zFt2AatqImyNlahFI=
Subject key identifier:   46:2F:A7:9A:8F:07:5A:08:72:DB:CC:A6:FE:2B:97:E6:2E:7C:71:88
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       299DACF61A60E3E7257494AA23CCE76BBCE8CFD0
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37372e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:57 +0000
ROA not before:           Mon 23 Sep 2024 20:49:57 +0000
ROA not after:            Mon 22 Sep 2025 20:54:57 +0000
asID:                     262740
IP address blocks:        186.208.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9d:ac:f6:1a:60:e3:e7:25:74:94:aa:23:cc:e7:6b:bc:e8:cf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:57 2024 GMT
            Not After : Sep 22 20:54:57 2025 GMT
        Subject: CN=462FA79A8F075A0872DBCCA6FE2B97E62E7C7188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:d3:d5:09:d9:a4:98:c8:57:38:5b:60:f7:
                    c0:96:07:70:6f:b1:50:4a:cb:77:ec:4a:5b:cc:47:
                    17:cf:ad:33:ff:71:af:3e:16:b1:ef:29:7d:6e:e6:
                    31:4d:e0:53:88:9f:cc:53:6b:3d:8c:11:ef:f7:6c:
                    6d:4c:68:e3:6e:ce:88:ad:6c:28:8b:bb:50:cd:b2:
                    47:41:64:69:7c:f7:5d:29:a1:1c:a7:08:09:f1:94:
                    b4:01:da:7b:08:45:2a:32:c2:26:3c:eb:63:5b:59:
                    a3:0b:c7:2e:df:e8:b4:ea:ce:e5:b4:04:c6:03:fe:
                    c2:60:36:8d:35:30:7a:0b:1a:4f:e2:cc:0d:8e:7c:
                    5a:7f:5c:c3:e1:a9:85:97:49:79:f2:35:24:ff:13:
                    8d:b5:94:b5:c9:1f:37:31:16:ce:41:64:01:d3:42:
                    00:8d:55:60:d1:cb:1b:a1:50:09:e3:48:b5:24:e0:
                    d6:78:3a:4e:5d:54:f0:87:b8:c3:df:76:a5:70:a9:
                    21:98:f2:80:ee:76:59:8a:01:e5:1d:14:72:94:00:
                    f2:86:c3:d1:d8:38:c5:a3:31:53:55:de:b1:15:12:
                    bc:e5:71:d5:05:a1:ff:9f:05:d5:9d:ce:28:e4:58:
                    4b:46:eb:d0:63:bd:ea:fb:33:4a:5a:eb:43:b4:5c:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:A7:9A:8F:07:5A:08:72:DB:CC:A6:FE:2B:97:E6:2E:7C:71:88
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37372e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:b6:41:d8:6a:02:e3:55:13:f1:0c:54:f2:67:4d:ec:e0:ed:
         4a:14:83:88:13:2a:2e:37:b2:61:ab:41:cb:00:d7:4c:2f:34:
         48:e3:79:63:1b:5a:8e:48:2e:0d:84:f0:2b:ee:9f:25:3a:f1:
         44:5f:e8:ee:d3:46:24:56:29:f5:c6:7c:f5:be:7a:96:ef:bd:
         54:ec:d2:41:37:68:4c:9f:b6:bc:c4:92:ed:3b:79:fa:22:14:
         d8:6b:bf:a6:e7:8c:25:b8:d8:b3:a0:cf:69:02:37:f3:7d:5d:
         ef:6f:b0:b8:95:66:16:11:31:c1:88:36:bc:22:de:e9:1d:48:
         37:13:0a:fb:9e:fd:83:c1:38:fc:26:e5:ad:c9:2b:f6:a1:34:
         6f:68:78:ec:7a:45:64:ad:44:46:74:34:eb:8d:b2:5b:f3:fc:
         bb:60:f8:ec:0d:27:e8:3e:e0:7a:31:9c:ee:a5:c3:19:55:7f:
         b4:04:af:75:38:76:a2:3a:b1:9f:67:93:9d:e1:a9:3d:ce:0c:
         96:6a:8e:41:d1:e6:fa:f7:7f:c8:6d:d9:f0:ac:42:63:65:cd:
         9d:10:f0:ad:1d:20:fb:9d:8d:dd:19:32:c2:03:71:db:09:bd:
         29:04:c0:5c:75:f9:a9:95:81:a4:92:22:50:74:0e:e2:c5:da:
         5a:51:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org