Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa
File:                     3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (raw, json)
Hash identifier:          TGP97NFELAkvw2fr83SZfyXlGHOXE4BQ79OBoCM3m6o=
Subject key identifier:   05:53:32:F3:C9:5C:8D:AD:F4:97:0E:3F:44:6E:9D:9E:49:45:EA:B9
Certificate issuer:       /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
Certificate serial:       5A9D04734878B7B98AF673CA7FCA340807647802
Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa
Signing time:             Mon 08 Apr 2024 18:21:06 +0000
ROA not before:           Mon 08 Apr 2024 18:16:06 +0000
ROA not after:            Mon 07 Apr 2025 18:21:06 +0000
asID:                     263083
IP address blocks:        186.233.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl
                          rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9d:04:73:48:78:b7:b9:8a:f6:73:ca:7f:ca:34:08:07:64:78:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5
        Validity
            Not Before: Apr  8 18:16:06 2024 GMT
            Not After : Apr  7 18:21:06 2025 GMT
        Subject: CN=055332F3C95C8DADF4970E3F446E9D9E4945EAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:6f:d4:77:3d:86:b4:30:fa:d8:dc:51:c8:
                    1b:15:28:8b:79:39:26:9e:59:10:47:c9:31:d0:9f:
                    9a:75:97:ea:32:4d:97:3e:41:30:a2:ac:94:96:cd:
                    bb:5b:4d:0b:74:4d:5a:34:42:75:6b:a4:6d:25:95:
                    b1:7b:b0:4b:71:e2:89:1d:37:3a:a5:26:c6:08:b6:
                    78:11:c0:9c:9b:7c:46:0c:80:34:81:fb:f9:3d:c8:
                    e0:8e:91:c4:e2:23:96:e8:cc:62:1d:f3:ce:79:de:
                    bb:8e:d0:6a:ff:b3:d5:71:4d:f3:1f:4f:25:4a:32:
                    3c:46:65:54:54:a3:9c:1f:e7:f5:41:41:5e:b2:48:
                    76:e5:2b:5e:15:6e:b3:76:dc:60:43:cc:ea:b3:60:
                    1e:0d:98:67:c1:cd:f0:eb:86:5c:ea:60:2e:56:92:
                    33:91:1c:55:2a:d7:f5:33:ac:c3:70:65:15:25:77:
                    a9:f2:c1:68:51:75:84:d6:17:cd:12:92:39:68:04:
                    94:27:50:55:e5:7b:db:83:95:32:18:19:32:03:fa:
                    47:b3:f1:21:9f:94:19:10:07:b4:9c:27:54:18:8b:
                    04:ef:93:e2:51:89:79:17:fa:82:0d:78:f8:e7:00:
                    26:60:66:04:d6:52:d1:41:78:38:9d:b8:0b:90:e1:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:53:32:F3:C9:5C:8D:AD:F4:97:0E:3F:44:6E:9D:9E:49:45:EA:B9
            X509v3 Authority Key Identifier:
                keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:c4:d9:e4:b5:dc:1d:33:e2:22:41:c5:f0:7f:e6:d5:66:
         e5:81:11:3b:26:54:0d:7c:08:85:b3:7c:72:f2:1a:8e:11:51:
         3a:c6:04:fa:3e:aa:9b:e9:62:96:f8:2d:51:11:d5:3f:a0:7a:
         02:7e:38:a4:bf:78:14:fd:b9:4b:11:f9:48:ab:bb:40:d7:5f:
         1c:9e:27:55:e7:a2:38:40:8d:be:9b:a9:78:b1:65:f9:4b:64:
         16:e2:34:a3:cb:d6:74:c4:63:93:31:92:19:a0:62:82:55:aa:
         aa:c3:ca:5d:40:0d:e3:f3:a6:eb:c1:4c:28:db:6f:3f:f8:f0:
         bf:35:88:c2:70:fa:43:08:3a:13:b4:06:cd:f1:d0:75:f4:82:
         7e:6f:3f:d2:f5:3e:cf:fd:af:55:da:bd:fb:ee:0b:ee:e2:39:
         b9:71:3c:23:cc:10:6e:80:e9:b4:19:e9:30:3d:54:de:f0:57:
         81:44:c0:88:c1:98:f7:be:09:04:dd:b2:0e:b1:ad:d6:b4:06:
         11:31:94:f8:54:f4:c6:85:6c:15:84:08:37:4a:8f:59:39:fb:
         06:93:3f:83:a8:34:75:23:1d:bc:14:d5:3e:29:a4:c2:f8:78:
         2e:34:e3:55:32:bc:9a:01:5c:b0:67:b7:1e:fe:d8:44:54:a2:
         f4:3b:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org