Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32342d3234203d3e20323632373038.roa
File:                     3138362e3139332e34362e302f32342d3234203d3e20323632373038.roa (raw, json)
Hash identifier:          Qd46NcbdLVo6iBo3oa9jAfHkYi5+6JtxEIk4rb+PZao=
Subject key identifier:   25:31:34:5E:8B:13:C9:AC:4B:A5:88:28:5C:1B:27:68:57:A8:72:B1
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       1F01B9190481A274D6FF2A88FC9AC5FB78E34DAD
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32342d3234203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:19 +0000
ROA not before:           Fri 02 Aug 2024 17:09:19 +0000
ROA not after:            Fri 01 Aug 2025 17:14:19 +0000
asID:                     262708
IP address blocks:        186.193.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:01:b9:19:04:81:a2:74:d6:ff:2a:88:fc:9a:c5:fb:78:e3:4d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:19 2024 GMT
            Not After : Aug  1 17:14:19 2025 GMT
        Subject: CN=2531345E8B13C9AC4BA588285C1B276857A872B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:24:c2:74:a5:33:af:06:75:3d:ef:d2:db:
                    48:50:e4:21:64:df:9e:7a:2c:0a:8b:49:67:1e:82:
                    c1:f7:ec:3e:eb:1d:0e:96:6d:8f:d1:02:fd:df:1e:
                    76:6e:5d:73:36:63:6a:6e:5a:7e:8f:bd:e6:e8:7a:
                    6c:a1:0b:6e:d2:06:f0:a1:4a:d3:13:99:bf:2a:1c:
                    50:e6:a8:29:da:38:0e:bb:76:3a:7b:b5:f9:a3:0c:
                    8d:fb:e4:b2:95:4d:14:1b:d9:9f:e2:9e:4a:9b:30:
                    37:a4:4b:27:e7:14:f3:f4:4c:e0:74:4d:50:7c:56:
                    68:2d:d1:c8:96:3c:44:34:33:bb:e1:ab:46:ab:56:
                    55:37:26:d2:fa:ce:16:83:d6:b8:f2:1f:27:ea:13:
                    35:9c:a7:b3:6f:fb:38:e4:86:39:bc:44:58:dd:bd:
                    4a:53:d6:ac:70:0f:2b:17:a5:41:f4:cb:39:dc:67:
                    7d:7e:e2:0f:5c:5a:0c:53:ce:f4:8e:90:da:b7:79:
                    da:5c:90:6f:74:31:cb:ef:73:d3:a0:41:2d:b0:90:
                    65:79:e0:c0:ce:e3:f7:3c:72:a3:4e:18:fe:cd:ff:
                    c7:b4:35:4a:e4:41:0e:1b:1d:35:0a:4c:75:2a:04:
                    35:4b:1b:8f:9c:6e:08:63:c2:d8:ed:b8:35:b9:61:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:34:5E:8B:13:C9:AC:4B:A5:88:28:5C:1B:27:68:57:A8:72:B1
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32342d3234203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8f:1d:f3:6e:0e:b9:7b:d0:78:bd:75:02:70:c2:3c:96:be:
         ef:b5:8a:b1:c7:84:27:3c:8c:fb:a2:7b:09:e8:86:31:37:2d:
         26:d1:7b:ea:25:61:43:f1:45:3d:ef:e2:f4:53:28:cd:fa:75:
         2e:c8:2c:ac:9e:bf:2e:68:d0:72:2b:54:6c:4e:b3:06:b6:aa:
         64:8f:ce:df:94:79:bb:5d:71:de:42:ad:0d:12:d1:3a:fe:50:
         30:2d:98:42:4a:ae:2f:33:ea:af:75:f6:d0:92:b0:fe:fa:b9:
         12:31:1c:24:e7:93:45:4d:d8:b5:13:ec:d4:fd:c9:14:1d:96:
         8f:d9:89:1b:25:51:12:3f:d3:31:f2:55:87:94:c9:af:6e:06:
         53:24:f1:cc:bb:08:df:5f:a4:0b:94:e2:f6:05:e4:2e:b1:df:
         56:3f:83:35:54:ef:f9:e0:ea:3c:e8:a4:80:c6:d7:b6:f5:3e:
         87:2d:e0:53:94:c2:77:dc:9d:8c:eb:25:cd:63:5d:20:a1:fe:
         42:01:ec:5b:57:53:13:20:02:53:e1:02:83:91:e3:6c:db:1a:
         5b:d4:8a:ef:6f:4c:d6:21:84:c2:ad:bd:7d:a3:c4:c5:a3:0a:
         3d:13:7d:04:e9:8d:06:8f:ac:9d:e7:a7:44:a6:52:e5:0b:5e:
         7a:5b:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org