Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3233203d3e20323632373038.roa
File:                     3138362e3139332e34322e302f32332d3233203d3e20323632373038.roa (raw, json)
Hash identifier:          x2M2SXk8V2aH86+qUBEzS2m11Dm+P3pzRUJ5IR4ufco=
Subject key identifier:   CD:4E:46:0D:0A:EA:3A:45:E2:5C:05:F5:A2:85:B7:16:66:D9:03:45
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       194B2F66D117F0638C87EE173B0F8B511FB0A528
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3233203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:18 +0000
ROA not before:           Fri 02 Aug 2024 17:09:18 +0000
ROA not after:            Fri 01 Aug 2025 17:14:18 +0000
asID:                     262708
IP address blocks:        186.193.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4b:2f:66:d1:17:f0:63:8c:87:ee:17:3b:0f:8b:51:1f:b0:a5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:18 2024 GMT
            Not After : Aug  1 17:14:18 2025 GMT
        Subject: CN=CD4E460D0AEA3A45E25C05F5A285B71666D90345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:6a:8d:d0:6f:7c:47:cf:87:7c:50:59:25:
                    e8:80:33:26:23:d4:f4:84:81:79:95:5e:65:94:f5:
                    ee:1d:bd:3b:a6:c1:c1:98:e5:af:af:c3:b6:d4:88:
                    5a:90:cf:2b:16:0c:f1:df:b3:77:79:65:4f:2f:b6:
                    01:5a:e9:59:4c:c0:51:65:19:78:cb:c1:5b:40:02:
                    e1:fd:8a:07:72:30:6d:34:18:14:44:5e:29:c6:4f:
                    af:3b:0f:ae:ed:25:ce:c9:c2:21:04:39:c7:fc:7e:
                    f3:33:19:f9:f2:d5:72:d1:fc:27:ac:1e:5a:ef:69:
                    bd:2d:76:28:67:a2:ca:63:aa:c2:db:89:e4:c3:70:
                    2e:7b:fb:f3:0e:a2:0e:1a:9b:00:50:be:b5:84:e3:
                    44:03:9f:d8:64:27:20:2a:34:c3:ba:66:56:9d:f1:
                    64:81:56:0e:9a:fe:27:2f:27:56:19:4c:f4:68:43:
                    67:4d:09:b4:26:31:fb:f3:a9:f9:48:39:76:04:f9:
                    4a:4b:3e:21:50:bf:d9:a7:bf:e0:7d:9e:ed:d4:ec:
                    26:8b:f2:0b:e9:f0:4f:38:58:8f:bb:e0:02:e5:32:
                    02:62:f3:bf:49:74:ca:c6:d0:33:5f:8d:e5:b2:ef:
                    ba:ac:02:ef:bb:df:ee:54:ca:c7:76:c2:0c:f6:04:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:46:0D:0A:EA:3A:45:E2:5C:05:F5:A2:85:B7:16:66:D9:03:45
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3233203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:51:10:9e:84:69:f3:c1:ef:d7:9f:37:3f:71:07:7e:f0:64:
         e3:1b:e9:f1:57:ba:1f:ba:fc:26:40:fb:5a:1c:2e:86:2f:7d:
         1e:70:f3:6b:0b:1e:5e:ac:70:47:02:41:fa:34:7e:d6:01:b9:
         6b:d4:f6:8b:78:3e:8d:85:7e:a3:a4:39:67:c6:7d:c8:89:19:
         82:37:e8:02:b5:aa:50:8a:f9:72:7f:1a:97:bc:bf:a8:11:c6:
         52:4f:32:91:f5:1a:d9:81:2c:71:21:79:a5:d0:9c:3d:b9:a3:
         49:e0:32:4c:e0:e4:8a:79:79:08:bf:89:1b:09:62:9c:d7:3a:
         f2:23:12:a9:6f:3c:12:9c:85:84:f7:52:f4:44:5d:f0:99:ae:
         74:b0:df:ca:12:fc:88:ac:7e:cc:16:30:33:c3:2b:8a:38:07:
         9d:d0:96:21:33:6c:ce:4d:29:53:29:9c:95:dd:de:99:4c:9a:
         88:24:89:5a:70:16:64:6b:3e:42:c2:00:9a:0f:2c:74:3f:d1:
         c3:25:d2:9b:7d:9d:76:61:c8:2c:5a:ee:02:a0:c8:a2:09:7f:
         49:8a:4d:7a:c7:66:5d:f8:a2:d0:64:c0:e5:46:89:e1:fd:5b:
         a5:25:f4:ed:81:7f:55:30:34:cb:ec:05:35:7c:72:0f:52:62:
         df:4a:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org