Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3234203d3e20323632373038.roa
File:                     3138362e3139332e33342e302f32342d3234203d3e20323632373038.roa (raw, json)
Hash identifier:          NVbfCzoEPlbMoY19h6qFE2ThJSpD6JikEdKPa7E4daI=
Subject key identifier:   F5:7D:EA:F5:34:83:1B:72:D5:86:0E:2B:08:50:04:4F:A1:C6:6C:51
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       79BB84F3717A00F2EC5EA58845214460B46A044A
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3234203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:18 +0000
ROA not before:           Fri 02 Aug 2024 17:09:18 +0000
ROA not after:            Fri 01 Aug 2025 17:14:18 +0000
asID:                     262708
IP address blocks:        186.193.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bb:84:f3:71:7a:00:f2:ec:5e:a5:88:45:21:44:60:b4:6a:04:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:18 2024 GMT
            Not After : Aug  1 17:14:18 2025 GMT
        Subject: CN=F57DEAF534831B72D5860E2B0850044FA1C66C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:69:9e:8e:ed:ed:27:e0:38:a6:6e:6f:a6:
                    d0:13:11:ec:77:a1:77:f4:c4:8b:f3:4b:36:8b:a8:
                    b4:43:49:0b:fa:d9:d0:44:65:58:1e:67:ed:f4:a5:
                    0f:fd:be:07:22:00:27:53:88:f9:b9:46:00:eb:1f:
                    86:91:7c:20:f9:6b:4a:9d:cb:4d:6e:df:a4:fd:ce:
                    48:e7:a8:07:64:10:87:3a:5e:e9:6d:6b:42:85:36:
                    0e:aa:ea:2e:d0:49:03:7f:32:2c:02:88:55:5d:18:
                    ca:cf:23:8e:59:d3:4f:da:b2:30:6c:57:d2:2f:47:
                    05:c4:07:7b:81:c5:1e:46:e0:9c:35:45:15:74:3b:
                    d1:ce:ae:bd:c8:25:bd:96:68:65:93:5a:56:0d:35:
                    ba:52:85:4c:f8:73:6e:96:96:26:6d:c8:30:b9:a3:
                    85:f0:7f:91:43:24:1d:99:f6:77:c6:78:2b:9d:63:
                    85:bc:47:79:50:39:5f:56:ae:94:40:54:24:fa:db:
                    a0:3e:43:b1:59:20:b3:ab:d5:fa:6b:86:f5:43:cb:
                    07:9d:ec:fd:80:2c:c1:37:fc:47:ec:82:2b:72:a6:
                    b0:07:c2:3e:4a:a9:7f:8a:19:e6:42:36:54:33:54:
                    30:74:96:82:0b:d6:b0:bc:bf:85:52:3e:b7:b5:5a:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7D:EA:F5:34:83:1B:72:D5:86:0E:2B:08:50:04:4F:A1:C6:6C:51
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3234203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:55:bb:0e:4d:8d:e9:e2:1f:ba:54:5d:0b:5e:e4:7b:19:
         e7:67:3e:71:e2:55:bb:40:e7:6c:f4:f8:0e:03:77:16:ef:88:
         9b:60:75:df:27:2a:ba:81:8d:c3:13:62:4d:cc:e8:56:97:ab:
         fe:d3:69:1d:0b:04:29:c9:f6:7c:40:e6:15:c9:ac:9d:26:1e:
         cc:7b:65:67:7b:7e:1c:81:3b:23:79:47:c3:35:6a:31:e9:10:
         60:60:17:8b:1e:54:7e:8f:fc:11:b7:30:aa:5a:9a:e6:3d:7a:
         96:4d:26:85:72:5a:bb:94:dd:56:d9:67:65:11:17:5a:1d:c4:
         30:3e:09:3c:d2:17:23:f1:d0:21:0f:ed:6a:78:00:ed:da:7e:
         24:23:49:af:3e:99:06:f0:ea:8b:2a:c1:02:2c:00:b2:9c:9c:
         f9:39:0e:4c:98:2c:51:df:70:73:4f:0d:0a:cb:bc:69:52:75:
         51:aa:87:24:a9:26:51:c5:b9:02:1e:b0:d7:c4:3a:e3:11:35:
         f3:5e:c3:f4:c7:31:81:84:82:a8:02:7f:d9:35:16:2f:e9:15:
         b9:ad:53:e1:e9:73:e4:51:2a:8a:6c:5c:36:41:96:96:4f:39:
         c9:09:5c:e6:6c:d4:61:b6:fe:c0:4a:35:28:bc:0d:b3:aa:8b:
         35:16:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org