Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32312d3231203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32312d3231203d3e20323632373038.roa (raw, json)
Hash identifier:          JBVelweIpaI2FW2hSTzAvMv9elqAX//sqg4Ht56yl8o=
Subject key identifier:   DC:F5:35:97:4A:3D:78:86:C3:A3:77:C8:25:E2:7F:62:49:FF:C0:17
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       74AC5DF844A63DDC0077912CF3C08FDC5261B12A
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32312d3231203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:17 +0000
ROA not before:           Fri 02 Aug 2024 17:09:17 +0000
ROA not after:            Fri 01 Aug 2025 17:14:17 +0000
asID:                     262708
IP address blocks:        186.193.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ac:5d:f8:44:a6:3d:dc:00:77:91:2c:f3:c0:8f:dc:52:61:b1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:17 2024 GMT
            Not After : Aug  1 17:14:17 2025 GMT
        Subject: CN=DCF535974A3D7886C3A377C825E27F6249FFC017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:30:60:e9:f8:9f:53:3a:5f:a6:f1:90:8b:
                    c9:cf:22:1c:ac:fe:8c:c7:94:2f:31:18:58:a8:38:
                    60:6c:04:44:cb:52:39:b8:8f:2a:9f:0d:20:86:59:
                    ca:ec:e6:2b:e1:80:ed:34:45:1b:21:00:39:c3:2d:
                    17:6d:a2:4c:65:14:ac:46:fe:14:e8:63:38:5e:1b:
                    fc:f6:f8:d7:71:a0:32:e7:01:d6:39:18:f6:b2:ff:
                    04:cf:1e:1a:fd:23:3b:1d:25:8c:90:85:1e:88:b0:
                    de:95:e9:8c:f2:a8:84:47:49:86:b9:f6:dc:40:6d:
                    3d:fe:ff:2e:f5:17:15:00:ad:fb:da:35:ce:a5:39:
                    8f:be:f4:fc:cb:1f:44:21:b9:00:55:08:ee:a6:bc:
                    8b:c2:15:ce:db:1f:87:29:1e:db:16:6a:c4:0b:02:
                    e0:75:e0:c1:16:f8:6d:3b:89:af:c0:d2:10:29:83:
                    27:d4:24:54:fb:d7:f3:b1:60:ff:35:63:1d:6e:84:
                    69:e3:dc:cd:de:29:1b:fe:c9:e6:2b:83:f2:59:9b:
                    c3:ea:48:a6:ec:2d:1c:f4:ea:45:da:ec:a3:c4:13:
                    4d:3d:c1:59:8f:e1:db:e2:d4:4e:02:57:c8:d3:92:
                    1d:44:8e:3d:ef:10:8e:d9:db:95:73:4b:79:c4:6c:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:35:97:4A:3D:78:86:C3:A3:77:C8:25:E2:7F:62:49:FF:C0:17
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32312d3231203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:93:ad:2f:27:fe:7e:5e:a5:02:a2:12:10:28:38:a5:e2:c1:
         05:74:d9:5b:01:c8:41:f7:e4:9b:1c:ba:94:fe:68:60:88:00:
         b1:27:08:81:de:94:95:c8:75:fe:e7:d4:51:cb:61:1b:6c:2c:
         1a:cd:69:9b:56:2d:3a:cf:22:0b:50:70:08:5c:87:11:1a:95:
         ba:f7:6b:e0:99:c8:a4:3f:3d:de:29:52:32:c3:32:e8:af:00:
         05:fb:a4:74:25:9f:e1:ee:b3:f8:aa:68:46:8e:14:9f:c0:c3:
         b4:65:3a:66:95:23:57:8c:fa:df:00:48:06:82:a6:9d:18:7d:
         e6:88:d5:1c:8b:38:6f:0c:13:2e:b0:5c:3e:0c:93:8e:10:44:
         8c:19:85:dc:2c:44:c1:43:41:d3:ff:c2:83:a5:bd:32:ab:34:
         df:2c:5b:c2:06:1c:fc:ba:c2:fc:6f:f2:12:d0:28:38:aa:b9:
         2e:9d:8a:78:14:c4:41:d4:03:7a:0c:74:d6:35:f1:c6:a8:a6:
         24:67:40:51:5a:bf:bb:bc:34:52:fc:aa:d1:bc:9f:a6:cd:4e:
         44:38:cd:8c:9c:58:58:c4:a8:9a:50:4d:48:a9:4b:8f:d0:94:
         8e:fb:d1:0d:03:3c:52:6b:1e:7e:62:6e:e9:60:2c:61:fe:24:
         e5:2b:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org