Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37382e302f32342d3234203d3e20323632373430.roa
File:                     3138362e3230382e37382e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          KdTL2R/iP+Ob3ZlLdBHJS8XN+AKkGbtBnfEEbW+Iyhg=
Subject key identifier:   0A:33:15:68:0D:E6:C5:83:C6:33:9E:18:AD:BB:36:4E:95:CF:D1:95
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       7A185BFDA5490851D0CE4AA0E63A36B52C872721
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37382e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:11 +0000
ROA not before:           Mon 23 Sep 2024 20:50:11 +0000
ROA not after:            Mon 22 Sep 2025 20:55:11 +0000
asID:                     262740
IP address blocks:        186.208.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:18:5b:fd:a5:49:08:51:d0:ce:4a:a0:e6:3a:36:b5:2c:87:27:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:11 2024 GMT
            Not After : Sep 22 20:55:11 2025 GMT
        Subject: CN=0A3315680DE6C583C6339E18ADBB364E95CFD195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:dd:7d:49:53:8c:ed:c0:77:fd:f1:8c:dc:
                    ac:7a:e3:97:c4:e5:e1:a2:78:01:15:e5:45:ee:1e:
                    db:48:c2:8d:bd:ba:72:ad:76:f9:43:24:53:99:92:
                    ff:8c:14:29:04:bd:33:87:c3:b6:16:87:4c:14:54:
                    e0:83:b1:6e:a9:5a:a7:79:05:82:0d:3e:38:f9:e0:
                    7b:a7:6d:b8:50:20:e0:f8:d7:ca:06:79:6b:13:b7:
                    39:fe:4a:7d:53:b9:5e:0e:94:af:b7:14:d3:14:76:
                    ba:d4:95:a0:aa:d7:e7:f4:f4:e1:ff:ee:88:18:0e:
                    6c:63:a9:e2:e4:db:9d:a0:d0:0d:c5:c2:fd:10:dc:
                    39:a1:3f:c3:01:08:c2:13:98:33:5a:0a:f5:c2:84:
                    06:69:7d:c3:b7:b2:53:f6:73:23:82:4d:8d:e2:e7:
                    fa:66:71:48:ff:ef:50:3a:b7:15:57:e7:95:a4:9e:
                    a7:c9:60:6f:78:0b:33:d5:18:64:10:bd:d6:71:e2:
                    06:59:54:08:d6:4d:84:99:2c:25:e4:cb:32:a1:2f:
                    eb:3a:35:17:85:26:9b:5c:5d:48:06:25:32:50:fb:
                    4b:5f:89:2f:a7:91:42:c7:18:17:53:d4:09:54:be:
                    f1:6a:eb:7f:72:a2:42:ae:3d:44:1d:c7:f0:e0:34:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:15:68:0D:E6:C5:83:C6:33:9E:18:AD:BB:36:4E:95:CF:D1:95
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37382e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:7c:32:5f:37:56:e3:dc:5a:41:ef:7a:96:25:86:46:33:
         b0:82:a5:c8:c0:eb:53:94:86:a2:27:cc:10:c3:80:6e:ba:4a:
         e7:e8:8c:f0:a2:55:64:63:56:e3:24:13:bd:f2:55:1f:8c:0d:
         10:e2:cd:a7:19:e7:26:98:2f:ca:57:49:ce:39:8e:a5:34:ab:
         f2:5c:59:06:a7:08:b3:cc:7e:bd:95:82:a1:19:14:7a:55:1b:
         cb:3e:fa:a7:9d:43:e5:ee:35:83:1a:60:81:96:ef:dc:6c:92:
         94:fb:22:89:20:ca:fe:78:ec:57:3a:a6:5a:25:78:0c:37:40:
         05:39:0d:e9:bf:83:d2:92:25:69:ec:94:60:99:3f:7e:1a:10:
         9d:c9:84:e4:fc:db:73:50:40:95:66:ca:95:2a:f7:2f:a6:82:
         2b:71:93:c5:3a:9b:ba:90:fd:78:64:b9:de:4b:00:eb:44:a9:
         bb:ee:cb:1c:ce:d6:40:4f:3d:f7:a5:82:46:3b:3e:97:06:5d:
         67:42:14:30:b1:cd:c3:06:3a:de:18:29:1e:48:d7:60:9c:7d:
         e1:e8:2c:cd:f3:48:76:45:c6:9f:3b:c2:35:0b:24:0f:39:f2:
         5a:94:ac:0b:81:bd:1a:80:b0:c1:e4:10:7c:ff:46:7b:7f:da:
         f8:dc:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org