Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32332d3233203d3e20323632373038.roa
File:                     3138362e3139332e33342e302f32332d3233203d3e20323632373038.roa (raw, json)
Hash identifier:          9hrOSp6sdD4ZasCwp7XGRn2BhoU8DDP2RObjrEw7OmQ=
Subject key identifier:   69:EF:90:E6:21:24:32:D7:E2:58:52:43:BB:8A:4B:9A:31:B6:5B:75
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       2A06F4E30F2FD1369C3D75F421643C81EC841FA3
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32332d3233203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:20 +0000
ROA not before:           Fri 02 Aug 2024 17:09:20 +0000
ROA not after:            Fri 01 Aug 2025 17:14:20 +0000
asID:                     262708
IP address blocks:        186.193.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:06:f4:e3:0f:2f:d1:36:9c:3d:75:f4:21:64:3c:81:ec:84:1f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:20 2024 GMT
            Not After : Aug  1 17:14:20 2025 GMT
        Subject: CN=69EF90E6212432D7E2585243BB8A4B9A31B65B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:de:7f:c7:89:34:fe:1e:4a:1a:b9:e4:45:
                    ed:52:1d:82:0b:93:1c:0d:01:c4:25:c0:42:08:41:
                    7b:07:b8:7b:20:f6:42:18:f7:45:0a:71:4d:0f:b4:
                    a2:a9:ac:10:35:f2:ee:7b:78:7b:bf:93:0e:02:10:
                    66:e6:1b:e5:b1:c9:2c:44:e0:87:00:b4:47:55:bb:
                    d8:61:cb:b0:b5:a3:fc:df:0d:86:1a:13:8e:70:60:
                    80:0a:16:98:92:da:9e:5d:85:39:35:85:71:06:56:
                    5a:ee:b9:8c:6e:27:1a:0c:c5:4f:1f:02:21:f9:4a:
                    27:fd:cf:90:b2:75:81:a3:76:69:73:6f:98:08:89:
                    59:35:04:b3:9c:85:40:fb:ea:fe:33:91:7f:b7:bb:
                    f6:86:72:ea:83:e5:8c:dc:ed:99:86:3e:27:49:95:
                    96:f4:dd:41:ed:b0:f9:16:41:14:3e:55:c1:30:c4:
                    bb:bd:bc:ea:b6:a7:d8:18:88:2e:23:b6:6e:a3:bf:
                    8b:bd:cf:82:16:ae:0a:99:9f:6e:3f:2b:79:b6:27:
                    9c:7c:ff:1e:2d:22:05:6e:04:c2:54:77:e7:b1:e7:
                    23:d5:36:11:d0:ef:05:16:1b:f1:c0:fe:9a:6e:29:
                    b5:18:d7:c9:3a:6b:79:1a:2e:e6:3c:90:e5:09:fa:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EF:90:E6:21:24:32:D7:E2:58:52:43:BB:8A:4B:9A:31:B6:5B:75
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32332d3233203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:87:1e:ac:ce:37:82:81:ee:04:b1:a1:1e:28:f5:0f:b1:
         b5:18:53:d2:87:52:a9:73:e0:06:75:37:b2:fd:48:d5:6d:19:
         2a:19:83:62:98:48:e1:f6:60:48:f8:ff:2f:84:c1:bc:95:5f:
         e2:4b:f2:6b:10:cc:3b:af:86:f4:9f:9b:8f:b0:0d:64:7b:ff:
         78:6f:66:ee:5e:eb:73:f5:23:8c:eb:d1:08:44:1e:95:ef:fb:
         43:21:ce:cd:e7:0e:16:60:51:19:12:51:b1:f6:71:03:92:db:
         49:aa:3a:ab:a4:05:d1:0e:6a:2d:3d:d3:80:65:eb:7e:4f:ae:
         4f:4e:28:c7:6e:f5:14:94:de:22:d3:7a:0e:cc:ba:99:78:8c:
         7b:2e:a7:42:3b:81:59:26:6c:3f:66:27:00:b0:ae:ac:11:14:
         44:0a:23:5a:2d:f0:6f:2f:88:24:ec:4e:85:0d:a9:2c:07:37:
         14:cd:c7:78:3a:23:92:d9:92:74:2b:55:f4:ef:66:7c:55:d9:
         8a:eb:d3:8f:e0:db:e2:82:05:33:46:d4:93:4c:9c:1f:81:a5:
         ba:4c:7c:89:1f:2c:7f:a7:d2:e3:3b:6a:ef:f0:14:f5:51:34:
         2f:d1:0f:82:c4:cc:c3:a8:ae:5f:fc:ee:44:05:53:c4:eb:24:
         81:24:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org