Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32322d3232203d3e20323632373038.roa
File:                     3138362e3139332e33362e302f32322d3232203d3e20323632373038.roa (raw, json)
Hash identifier:          kMQcio4N+hRzsV9xaDjgnBKj0W75ezKlV0Sb47nh/wI=
Subject key identifier:   5B:50:66:1F:08:A1:DE:F3:F0:DD:07:E7:EE:FB:AA:0D:72:57:A5:4A
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       3246ADA552A248A7D7E4CA5FDD7620F1415CCC09
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32322d3232203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:18 +0000
ROA not before:           Fri 02 Aug 2024 17:09:18 +0000
ROA not after:            Fri 01 Aug 2025 17:14:18 +0000
asID:                     262708
IP address blocks:        186.193.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:46:ad:a5:52:a2:48:a7:d7:e4:ca:5f:dd:76:20:f1:41:5c:cc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:18 2024 GMT
            Not After : Aug  1 17:14:18 2025 GMT
        Subject: CN=5B50661F08A1DEF3F0DD07E7EEFBAA0D7257A54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:82:cd:ac:59:58:99:06:e7:b5:fd:91:66:
                    65:86:41:4d:0f:56:c1:11:6f:08:8d:29:93:2c:e6:
                    15:3b:ad:e9:db:bd:8b:bf:2b:60:d5:cf:1a:d2:14:
                    ca:ac:39:e9:62:52:b9:52:e3:c1:d2:b1:40:8c:ee:
                    1c:40:d8:15:4b:fa:99:be:f8:b0:83:eb:12:61:bc:
                    ef:2d:eb:33:21:eb:a0:96:18:e1:5f:44:57:cc:09:
                    e5:41:9e:d5:54:f0:bb:16:95:7e:1f:e5:99:ad:2e:
                    df:a0:a8:f9:39:42:b7:58:9e:ee:00:ae:8f:c5:fc:
                    cd:2d:b1:30:da:a6:ec:69:c8:d9:d0:ae:2a:cf:82:
                    91:e7:3c:d9:fa:81:e7:6b:5f:2e:e3:36:8d:f5:2e:
                    d3:93:a0:86:4f:d6:41:69:f2:4b:82:a5:b6:98:fc:
                    40:7f:8b:cc:12:56:18:46:e0:78:da:0f:40:3e:0b:
                    97:b9:63:0a:40:f8:6c:cc:9a:3f:f5:d6:99:6b:b3:
                    b5:61:d7:b2:e0:e2:7e:4a:f9:8e:df:5d:15:8d:80:
                    5b:f2:1b:67:18:72:bb:fe:4c:a0:d2:d1:ea:eb:e2:
                    c9:e2:69:e2:3c:47:3b:b4:7b:7a:b9:a1:e1:65:c3:
                    79:f3:3b:bc:94:fc:9a:d1:b3:47:63:b5:f7:96:d7:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:50:66:1F:08:A1:DE:F3:F0:DD:07:E7:EE:FB:AA:0D:72:57:A5:4A
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32322d3232203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:56:aa:21:ec:0f:0d:0f:71:6d:7a:f7:f2:c2:64:6c:b3:
         7a:40:cb:d3:a9:ad:75:ab:6c:36:a5:6d:47:07:37:37:93:36:
         15:bd:de:3f:77:f9:9e:83:1e:d9:d3:de:44:2d:0e:17:80:1e:
         74:d0:32:4e:cb:55:83:94:23:87:42:e4:af:6a:42:56:e3:8a:
         bd:ba:68:72:ee:ec:51:08:46:18:18:2c:3b:01:54:c5:8a:23:
         d2:18:94:ef:0c:d0:72:f0:93:f2:fc:21:b8:d7:b7:60:96:87:
         e3:6a:36:3e:6d:d2:92:ba:c3:d6:b0:41:f2:a1:88:1a:37:b3:
         b3:f0:13:63:a9:96:30:13:1d:79:6e:bb:d2:ca:b0:06:f1:7e:
         3a:02:0c:d2:9c:30:0f:12:bd:99:95:46:09:0f:44:21:c5:4c:
         19:56:22:d9:2b:6a:b9:53:54:8f:cd:99:3f:78:95:6c:fa:cf:
         d9:38:5b:c4:d8:24:e6:a6:8c:14:8d:df:56:2c:66:88:24:6c:
         f5:3a:39:b0:b6:99:81:56:7f:d4:ed:bb:61:ad:78:1a:98:08:
         c0:56:fe:7a:84:fc:9b:81:72:26:4a:70:92:9b:7e:7e:62:da:
         0b:4a:a9:1b:4e:ea:09:bd:48:63:58:cd:00:f2:26:9c:62:54:
         85:62:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org