Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32342d3234203d3e20323632373038.roa
File:                     3138362e3139332e34302e302f32342d3234203d3e20323632373038.roa (raw, json)
Hash identifier:          S09SZIJtVNjqq+HzvIk5iRbkPZNTKj00ygIYkOntPH4=
Subject key identifier:   84:B3:AB:A6:37:11:E7:31:1D:48:7B:11:25:5F:F5:25:8B:C3:85:21
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       2C11A570592AD12535D34B1CE1C5F5A9253E6296
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32342d3234203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:19 +0000
ROA not before:           Fri 02 Aug 2024 17:09:19 +0000
ROA not after:            Fri 01 Aug 2025 17:14:19 +0000
asID:                     262708
IP address blocks:        186.193.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:a5:70:59:2a:d1:25:35:d3:4b:1c:e1:c5:f5:a9:25:3e:62:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:19 2024 GMT
            Not After : Aug  1 17:14:19 2025 GMT
        Subject: CN=84B3ABA63711E7311D487B11255FF5258BC38521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:1a:86:98:11:38:b7:57:9a:05:36:36:1d:
                    43:e0:90:ad:21:f8:44:a3:b8:97:5f:75:4c:a6:9a:
                    fe:2a:c8:a4:de:e7:23:5f:31:56:2a:bf:47:71:ff:
                    0d:c3:d7:e1:c2:45:cb:ba:52:5c:90:d9:ca:fc:56:
                    a9:be:95:e7:d7:2e:64:9c:3e:af:09:d8:3e:ee:d9:
                    18:a8:9d:ff:cf:c8:a9:3d:1e:c0:75:4e:ba:fc:e4:
                    24:1c:bd:ce:f6:e2:e2:94:07:8f:75:3c:d2:b0:39:
                    df:34:2d:17:d3:7c:7e:b1:51:26:89:32:57:7b:f7:
                    35:ec:b5:9f:c6:c9:38:d8:69:ef:8a:d1:b8:fa:b7:
                    69:ff:f2:ab:f4:45:48:f5:78:7c:6f:a8:be:47:53:
                    8c:33:bd:04:b2:0e:51:3d:b2:7b:58:9e:73:95:42:
                    97:63:3f:25:7f:d2:e6:a2:92:9c:6a:84:9f:17:41:
                    c8:90:54:a2:92:29:be:a6:1c:ea:8d:36:8b:e1:5d:
                    57:f0:2d:e4:63:ea:79:ab:7b:2b:02:5e:c9:f8:d2:
                    7a:ed:92:84:83:e0:1b:c5:1b:91:1f:17:8c:fb:ad:
                    b6:e7:a8:33:cd:0e:4c:d5:d6:de:93:a9:05:01:f4:
                    f5:f1:28:28:06:10:d5:bd:71:81:1c:3d:70:31:40:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:AB:A6:37:11:E7:31:1D:48:7B:11:25:5F:F5:25:8B:C3:85:21
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32342d3234203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:55:d5:2f:fa:87:d3:ce:84:1e:ce:b7:6d:3e:03:5f:f7:84:
         7e:ef:c6:b3:32:54:d4:77:66:39:13:5e:71:a8:d4:ac:f2:54:
         5f:e5:1e:78:d2:d3:ee:ed:18:cf:d6:d2:14:58:0e:4c:77:7d:
         97:9e:62:6b:0f:2d:b2:26:50:db:47:55:ff:6a:ac:10:4f:ab:
         6a:49:d7:80:ed:af:3a:03:44:13:a8:ea:0b:2e:d6:03:dd:59:
         32:ae:d2:12:59:11:f6:9b:b8:69:cf:e4:c7:ec:aa:d4:82:e5:
         69:ab:af:77:4f:15:ba:6f:44:c6:81:b4:de:a6:bb:a6:8d:b8:
         a9:69:f6:ef:12:02:7c:bb:80:86:93:28:7d:22:d5:45:c9:4c:
         2f:ea:0b:13:1e:8e:d6:45:e5:f0:7e:3d:45:35:d7:79:11:d9:
         74:4c:04:1e:18:ce:f6:5c:47:3f:f8:f6:e3:e3:9a:58:5d:78:
         8c:86:dd:ee:bd:1d:47:19:6f:6d:2b:fd:8d:6b:76:ce:a2:d9:
         db:4d:4c:69:c9:3a:96:27:6b:17:dc:a1:7c:c2:d7:ae:b2:3d:
         0c:01:3c:35:ed:fb:b6:37:4c:ed:82:af:d6:56:bd:7e:6d:b6:
         70:ee:76:f5:b0:20:41:18:09:43:d6:05:48:25:33:50:d1:c5:
         b0:54:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org