Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3234203d3e20323632373038.roa
File:                     3138362e3139332e34322e302f32342d3234203d3e20323632373038.roa (raw, json)
Hash identifier:          Mm8DatmhdIlFYDZRaXVMM1082Do/oI8jHXCu/l1zjjM=
Subject key identifier:   A0:62:34:DF:6C:B9:A0:4B:C7:9D:9F:FC:59:34:CE:2B:A7:B0:4B:C6
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       3F7D5D2F09E38AF6B13A75505881CD87546858
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3234203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:20 +0000
ROA not before:           Fri 02 Aug 2024 17:09:20 +0000
ROA not after:            Fri 01 Aug 2025 17:14:20 +0000
asID:                     262708
IP address blocks:        186.193.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7d:5d:2f:09:e3:8a:f6:b1:3a:75:50:58:81:cd:87:54:68:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:20 2024 GMT
            Not After : Aug  1 17:14:20 2025 GMT
        Subject: CN=A06234DF6CB9A04BC79D9FFC5934CE2BA7B04BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:eb:f4:20:5d:ab:c2:ba:96:54:dd:4e:32:
                    52:76:96:76:cd:75:cd:b0:37:85:a9:64:63:8f:f1:
                    5a:bd:b0:6d:50:02:4a:0e:c1:b2:76:3d:a0:e1:7a:
                    51:ab:b4:be:99:8a:87:cf:eb:1a:cc:1f:82:71:1a:
                    7a:2e:d2:fa:ea:2e:03:38:f4:75:62:da:e5:f0:5c:
                    c5:08:c8:20:41:34:94:47:5f:c9:41:9b:48:c5:82:
                    c7:c2:a7:2d:e7:43:26:47:75:e5:1a:35:f1:b0:ea:
                    dd:a5:87:b7:37:46:46:cb:68:6d:99:a0:85:f7:72:
                    0e:8c:ab:6b:a2:a6:8c:6f:e8:34:4d:4c:2e:70:71:
                    65:b4:a1:e0:ae:6a:bd:7a:57:d6:45:95:39:ad:3b:
                    c0:cc:de:af:d4:8e:b3:5e:f0:7f:16:dd:07:01:59:
                    77:db:87:53:00:0e:9d:f0:4d:09:7b:27:8b:09:8e:
                    a8:73:20:9a:9c:e4:ad:2d:a9:31:2b:e1:05:d3:0d:
                    62:d7:40:13:94:24:69:d7:f2:88:02:6b:78:1d:c9:
                    3e:47:9a:8f:0c:77:39:9e:29:ef:d1:3e:7d:c0:74:
                    f2:ec:9e:75:0c:78:1a:44:35:86:a9:8e:18:a5:7b:
                    03:7b:38:e4:de:08:47:96:05:b1:5b:d3:69:af:63:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:34:DF:6C:B9:A0:4B:C7:9D:9F:FC:59:34:CE:2B:A7:B0:4B:C6
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3234203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:61:1b:b7:53:8b:e1:1e:fb:e2:25:78:b5:22:91:2b:03:a9:
         99:54:7c:d3:8b:c2:65:00:c8:2a:f4:c6:70:42:3e:01:a8:6b:
         d0:a3:00:69:2b:f6:b2:2c:dd:71:60:4f:11:c3:44:fd:45:91:
         13:90:98:07:d8:bf:a9:1b:0e:3a:b0:20:85:88:ff:39:42:ac:
         09:10:7c:0f:2c:3a:54:23:25:96:fc:79:2e:6e:14:34:19:a8:
         c9:2e:9e:02:da:20:aa:5b:6d:e0:62:7b:27:d4:dd:fd:08:2d:
         03:98:38:2d:8d:51:f4:03:64:09:12:70:97:1a:c4:27:5c:18:
         20:88:6a:85:3d:81:48:9f:ba:6c:7f:6b:3c:09:7e:c2:82:3f:
         dc:50:1b:ff:f3:6d:bc:7d:98:dc:f1:c9:24:f1:d6:f0:e4:a7:
         be:54:6b:96:0d:4c:b0:cf:6d:24:5a:de:4a:a1:c8:52:0a:e6:
         84:c2:3f:4b:4b:36:18:3d:32:89:84:07:ba:53:79:74:12:c4:
         1e:ca:09:6d:28:e1:db:7c:f2:14:bc:36:fc:9c:77:5e:09:08:
         58:92:0c:88:45:70:df:8e:27:48:89:51:30:c8:b4:1a:9d:62:
         0c:ed:44:8f:fc:85:f0:10:65:98:2e:fb:e7:7c:a8:3a:b0:33:
         a9:49:95:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org