Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
File:                     3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (raw, json)
Hash identifier:          hAeS10nyaBMpFyHbGWsspzSEf95wjvtPtRJHXR0qJxo=
Subject key identifier:   10:B6:88:08:58:03:00:91:E1:86:16:27:25:62:58:2B:00:0B:45:1A
Certificate issuer:       /CN=A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC
Certificate serial:       6F7B64003D99CFB86D6618CBB27D9FF289CC4C3E
Authority key identifier: A8:38:05:AA:B0:B5:A6:B0:33:CA:8E:AC:FC:11:FD:06:73:D0:0D:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
Signing time:             Fri 05 Jul 2024 20:01:20 +0000
ROA not before:           Fri 05 Jul 2024 19:56:20 +0000
ROA not after:            Fri 04 Jul 2025 20:01:20 +0000
asID:                     273431
IP address blocks:        186.227.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.crl
                          rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7b:64:00:3d:99:cf:b8:6d:66:18:cb:b2:7d:9f:f2:89:cc:4c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC
        Validity
            Not Before: Jul  5 19:56:20 2024 GMT
            Not After : Jul  4 20:01:20 2025 GMT
        Subject: CN=10B6880858030091E18616272562582B000B451A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:07:27:0e:0e:d0:2e:b7:c7:a8:f1:a3:29:
                    2e:86:7f:78:77:4c:66:0e:cf:1e:32:83:ed:42:98:
                    d3:cd:77:1b:a1:25:2a:2c:ff:5c:fb:a1:6d:37:87:
                    18:5b:20:63:15:02:8d:14:fd:de:58:54:bd:cf:21:
                    9e:03:c1:2a:78:f7:92:2f:bb:7b:97:72:98:74:57:
                    4f:a4:f1:6d:11:36:d8:f5:52:c0:93:1d:fc:f9:02:
                    6c:04:8d:2a:d4:4a:9b:2f:80:49:7a:0c:bd:9e:2e:
                    d8:f2:84:df:2c:62:dc:eb:06:60:cc:d7:46:a6:ec:
                    08:3b:24:aa:f8:8f:96:ad:de:c9:bf:38:90:06:69:
                    fc:09:38:9c:a0:08:e4:05:66:d3:af:92:d2:54:74:
                    84:c3:4a:94:5f:ed:50:49:c0:a9:1c:d7:3d:ad:fa:
                    30:10:6e:fa:92:2d:ac:d1:5e:bd:c8:35:01:1d:ec:
                    57:f3:f8:b1:32:1e:84:69:b5:46:d2:a4:8e:7d:e0:
                    86:1b:8d:73:e9:f9:cf:93:54:07:3f:4d:24:09:31:
                    bd:9b:e8:05:63:cb:4f:18:96:ca:34:8c:4d:38:0c:
                    df:b5:1d:d0:48:03:f2:c6:d6:55:a3:1c:e2:69:03:
                    3d:ed:f4:fc:a0:09:59:31:a3:76:d2:13:2d:c0:d5:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B6:88:08:58:03:00:91:E1:86:16:27:25:62:58:2B:00:0B:45:1A
            X509v3 Authority Key Identifier:
                keyid:A8:38:05:AA:B0:B5:A6:B0:33:CA:8E:AC:FC:11:FD:06:73:D0:0D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A83805AAB0B5A6B033CA8EACFC11FD0673D00DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:9f:81:ad:8a:d0:8c:a1:1f:a9:40:0e:51:e8:ea:80:71:
         6d:9b:29:cb:8b:ad:87:53:2a:2e:9a:9c:5d:4c:2d:2d:6e:e4:
         4e:b3:fb:0e:36:6c:85:f6:44:d2:de:b5:b0:11:7c:c1:3a:3e:
         55:3f:33:eb:c8:24:8c:6a:a6:d1:8c:b5:23:23:6f:6a:49:d5:
         97:00:ad:50:0a:3f:2e:9b:19:5e:78:37:d4:ed:2c:06:c5:22:
         72:7d:5c:89:2a:f6:c6:42:d0:90:92:fa:52:67:82:d2:89:e1:
         96:28:db:0b:0f:86:c6:af:29:4b:93:30:be:c2:78:02:82:b8:
         21:49:c9:17:f6:3b:64:bb:ed:32:ec:80:6d:eb:cd:12:2e:3a:
         52:09:61:36:e3:94:7b:d8:17:e7:53:00:82:78:29:17:1c:ff:
         42:3c:89:b8:0b:8a:39:4f:10:06:09:4e:9d:33:74:12:5b:67:
         a1:f8:ba:c2:b8:a9:33:a5:6a:ab:21:91:ab:75:37:27:79:5e:
         5e:53:85:df:62:e0:a7:61:43:fb:68:9c:a1:7a:4b:74:6d:5b:
         af:a5:60:7b:f7:8b:0f:ef:06:db:3f:79:28:74:7c:b5:18:6a:
         87:26:7f:e5:58:df:4f:9d:5f:da:a5:44:9e:bc:78:76:b2:f8:
         01:52:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:13 2024 by rpki-client on console-ams.rpki-client.org