Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          OKriB/xUYr/t83s3xfIf583Y0pz7ZlYiKUb4whzpbos=
Subject key identifier:   98:BD:0A:77:ED:E4:27:34:FD:34:42:29:84:4F:21:8F:54:BF:AB:13
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       4A7E6388637F55F5FB0A5AAD426C17EA03E1DD20
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 16 Sep 2024 19:22:11 +0000
ROA not before:           Mon 16 Sep 2024 19:17:11 +0000
ROA not after:            Mon 15 Sep 2025 19:22:11 +0000
asID:                     53218
IP address blocks:        186.250.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7e:63:88:63:7f:55:f5:fb:0a:5a:ad:42:6c:17:ea:03:e1:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Sep 16 19:17:11 2024 GMT
            Not After : Sep 15 19:22:11 2025 GMT
        Subject: CN=98BD0A77EDE42734FD344229844F218F54BFAB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:5e:4c:7b:ca:58:9b:c6:08:72:be:61:3c:
                    7b:d3:a2:ff:cd:7f:3d:dc:f5:d0:96:e2:0b:08:3a:
                    c8:f0:2d:30:d1:3e:81:ec:15:e2:dd:cc:73:dd:d9:
                    b5:2c:2b:c3:8e:c2:cf:98:43:d2:43:7f:2a:5f:65:
                    cf:2b:c6:aa:0a:66:4e:26:34:d6:32:d9:1c:44:a4:
                    9f:e9:43:22:71:3b:f9:9b:73:08:3c:9f:0f:48:31:
                    9e:09:d5:83:e2:cf:7a:d1:ab:28:0b:b6:fd:9a:d3:
                    7f:10:b4:95:ac:eb:13:26:6a:a1:84:46:74:0c:8a:
                    e0:6d:00:ce:46:ad:c4:ed:ae:9e:57:3b:7d:04:30:
                    a2:a5:6f:6d:0a:fc:c0:3c:90:1c:14:fd:92:d3:92:
                    9d:d5:b8:0e:3c:38:df:67:07:9d:d8:a9:ec:cb:b2:
                    c1:84:45:85:6d:c7:0f:57:83:c8:db:04:18:11:37:
                    10:f2:5c:15:b8:54:5d:ff:b4:f9:9a:2f:94:88:6d:
                    63:20:e8:15:9b:1d:6b:3c:81:7d:20:90:7d:d8:4f:
                    90:24:fb:5b:cf:72:db:c4:69:9d:6f:03:e4:c5:06:
                    e3:6a:85:f9:81:02:92:b6:66:4d:5e:14:59:d1:88:
                    2a:61:68:2a:05:db:69:3a:a7:ab:f2:0d:6c:3d:73:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:0A:77:ED:E4:27:34:FD:34:42:29:84:4F:21:8F:54:BF:AB:13
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3137322e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:9e:4a:33:95:4c:8e:5a:68:d3:55:92:87:ec:2f:c7:96:97:
         eb:69:6c:6f:96:25:14:ab:f9:67:43:5b:fd:d7:d3:6f:2b:ee:
         70:62:ec:37:20:91:d2:ac:ea:9b:6b:88:41:00:cd:50:c1:f2:
         f8:ef:24:4f:bf:bd:36:e7:1c:7a:e9:db:8e:c5:50:61:32:e1:
         b3:7b:ac:f9:24:3f:7d:50:1d:db:10:c5:d2:73:9f:b2:85:8b:
         49:dc:34:db:8b:7f:18:d3:9b:88:f2:92:6e:8b:9a:c6:cf:9b:
         3e:0d:da:06:77:32:bd:36:01:50:88:37:88:97:ef:c1:0e:f8:
         ee:5c:a2:c1:71:c9:9f:8b:da:3b:a5:21:ea:a2:ad:ee:80:f0:
         d1:15:ed:35:ff:a4:91:ab:37:f9:83:40:ad:81:73:f4:86:1e:
         f0:22:9b:de:57:a3:c0:72:8c:fd:49:95:4a:8c:83:30:d9:96:
         f2:53:da:8f:4a:02:82:2a:2a:30:1e:31:47:8e:c5:cd:42:35:
         4d:eb:db:ef:a1:44:43:d5:ff:0b:cc:54:72:06:cd:82:d1:48:
         c1:28:80:09:06:0d:cf:05:99:0e:15:5a:32:6b:1a:74:e9:2f:
         d8:fd:70:82:da:2f:c9:75:d4:bc:55:ae:01:58:89:84:ac:9f:
         74:11:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:47:24 2024 by rpki-client on console-fra.rpki-client.org