Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32342d3234203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32342d3234203d3e20323632373038.roa (raw, json)
Hash identifier:          DoTikIrplhC+8q/9FBZVCte0vJHy+BTQbq/9xrVuNhQ=
Subject key identifier:   C4:C1:E4:EE:BA:7A:42:77:02:B4:4A:7A:C8:43:57:0F:6B:6F:39:7A
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       4983DD24207A3466C0A3B8340E03EE42D67F0655
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32342d3234203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:18 +0000
ROA not before:           Fri 02 Aug 2024 17:09:18 +0000
ROA not after:            Fri 01 Aug 2025 17:14:18 +0000
asID:                     262708
IP address blocks:        186.193.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:83:dd:24:20:7a:34:66:c0:a3:b8:34:0e:03:ee:42:d6:7f:06:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:18 2024 GMT
            Not After : Aug  1 17:14:18 2025 GMT
        Subject: CN=C4C1E4EEBA7A427702B44A7AC843570F6B6F397A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:3b:b9:e1:77:5f:94:8d:e3:da:9f:0a:83:
                    e9:95:52:3e:26:ef:3b:5f:1e:fb:44:33:dc:f3:40:
                    c6:d2:81:84:df:de:9f:e4:5a:4b:80:9d:1d:49:21:
                    1a:1f:3f:9a:b6:44:61:0c:42:c1:96:1b:1c:19:85:
                    e6:8b:f0:e8:b5:97:83:1c:86:25:e0:89:87:2e:55:
                    3c:08:8a:ef:fb:a8:37:78:83:53:64:e8:8b:ff:02:
                    3d:1b:c6:87:59:c7:17:9d:a3:c9:15:de:f5:8e:f5:
                    f6:e4:e5:53:4a:3c:a4:83:43:eb:88:e8:c5:36:92:
                    7e:84:52:67:97:93:58:6e:50:f6:6d:4b:7e:1e:8d:
                    35:f4:e2:57:d9:ed:27:87:7c:11:38:13:1a:1e:c5:
                    26:b0:1f:64:26:23:01:b9:cd:3a:3c:4b:7a:65:d1:
                    cd:22:38:26:4e:1c:d6:93:94:5b:ff:68:87:1b:2e:
                    20:2e:8d:ec:5b:45:f7:aa:19:e5:52:a2:b4:92:88:
                    3e:bd:ef:aa:cf:7a:f7:c9:a6:27:19:79:9f:ce:5b:
                    79:ef:0f:a5:6b:e1:9b:fd:a5:0e:d1:9c:07:b5:03:
                    0c:97:36:eb:a2:01:0c:4f:63:16:3d:06:f3:7c:b0:
                    2a:28:6e:64:67:c9:1c:ec:35:f5:9c:a8:58:23:92:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C1:E4:EE:BA:7A:42:77:02:B4:4A:7A:C8:43:57:0F:6B:6F:39:7A
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32342d3234203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:86:5f:45:fd:c6:e3:ed:0a:a9:da:72:eb:b5:a1:d9:67:a5:
         07:1c:cd:92:9a:36:06:ed:c5:eb:a8:79:eb:f2:c4:bb:0c:d9:
         a0:00:72:78:f9:9c:99:ca:70:f6:ca:d4:6d:9a:29:84:0f:7e:
         64:65:c8:89:13:65:7f:e2:58:af:bd:3e:af:0d:2f:40:33:c7:
         1d:7e:ba:da:43:f5:65:53:9e:f8:ff:ee:0d:6f:88:78:77:01:
         d6:34:17:86:7e:86:76:11:80:b2:92:df:10:4e:ef:f0:9c:2d:
         dd:a6:6b:f4:b6:10:58:4d:36:61:c2:e3:de:3e:2d:7b:7d:bd:
         bc:ee:f6:2f:03:dd:4f:a1:f2:b3:96:5d:3e:a0:c4:4b:7f:af:
         f5:c4:32:c4:0b:39:72:f7:ea:c9:1b:36:91:fc:1e:07:d8:67:
         94:f4:2e:c3:aa:ec:80:c7:05:ca:16:66:ae:77:c0:84:0c:9b:
         80:a9:b0:2d:7b:56:20:60:a8:b6:82:b8:bf:8a:7b:11:fb:25:
         41:96:be:83:04:f8:aa:ec:1d:c0:ae:34:e0:d1:9a:3e:c3:82:
         42:13:60:ad:f3:13:82:fb:c9:a2:ce:25:02:58:53:55:e8:c2:
         68:b4:20:03:39:55:48:06:ae:d7:d1:d3:74:5d:50:e7:59:38:
         0c:b8:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org