Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa
File:                     3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa (raw, json)
Hash identifier:          JvWRO4GmF4ZuFMhZcXRaxJETE9oDq2Dhz6FTZvcN4Kc=
Subject key identifier:   82:C9:07:39:A3:CD:D3:21:0B:77:1D:84:1A:9D:18:C9:BE:4D:2C:01
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       6B6C51D761F9C7CDF5959E353C2BD8C6D2A43B10
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:03 +0000
ROA not before:           Sat 20 Apr 2024 09:44:03 +0000
ROA not after:            Sat 19 Apr 2025 09:49:03 +0000
asID:                     262784
IP address blocks:        186.235.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6c:51:d7:61:f9:c7:cd:f5:95:9e:35:3c:2b:d8:c6:d2:a4:3b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:03 2024 GMT
            Not After : Apr 19 09:49:03 2025 GMT
        Subject: CN=82C90739A3CDD3210B771D841A9D18C9BE4D2C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:96:92:77:78:05:df:8a:3c:e3:b4:0a:cb:
                    cc:c2:ca:bb:3a:b9:3f:ce:62:df:b2:b9:df:48:a5:
                    fb:73:e3:1f:5e:c8:3c:a3:40:8c:10:fe:3d:af:68:
                    37:05:50:c9:63:58:df:02:95:31:a9:98:b1:50:7b:
                    74:80:06:0b:a6:3f:d3:f0:07:60:c7:b6:8f:43:1c:
                    7c:3c:68:c6:26:45:0c:f6:20:1b:51:94:49:f5:4f:
                    7c:53:31:2f:17:f6:84:d7:71:b3:fb:e8:b2:a9:4d:
                    59:7b:1c:96:9d:4f:c4:30:27:09:f2:61:b1:a7:8f:
                    6d:70:17:f6:37:fb:ac:10:af:82:ce:d2:1a:d8:91:
                    31:e8:96:34:88:48:70:19:88:79:0b:69:84:a3:43:
                    72:62:15:e0:5f:48:12:e9:73:61:34:28:3d:45:b5:
                    e7:e5:e0:57:09:f4:a0:05:b6:fa:3f:11:80:4a:aa:
                    e0:59:3a:4a:ff:4e:17:d1:c4:9d:b4:9f:c4:7d:d3:
                    3b:e5:dc:db:28:8a:79:c4:f8:b1:fa:e2:f2:86:4f:
                    57:f4:e8:55:a6:75:88:b1:1d:e5:51:b6:b9:18:97:
                    ed:a3:e7:3c:02:36:29:a4:27:4f:b1:b5:85:d3:42:
                    7a:63:be:0c:0a:77:4f:ec:43:8c:d2:09:02:c1:e2:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C9:07:39:A3:CD:D3:21:0B:77:1D:84:1A:9D:18:C9:BE:4D:2C:01
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136302e302f32302d3230203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:04:38:36:85:90:28:fd:00:92:21:59:9b:b0:c7:09:32:
         39:58:6c:f5:c5:d2:a5:14:0a:a9:aa:be:0b:d1:d1:a6:71:84:
         29:0b:f2:1b:76:f2:c7:6b:3e:a9:ec:3a:54:ab:d5:83:ec:8b:
         b9:e1:de:05:e3:98:81:fc:d1:41:5c:7c:44:4e:f8:ee:07:7c:
         2d:fd:bb:0b:18:dd:8f:e1:4c:f6:8e:0a:cb:f4:d2:45:f5:e8:
         1c:c0:6c:69:56:6c:9d:2f:f4:e8:e9:11:d7:5e:53:eb:7b:47:
         11:03:24:4d:18:43:b0:67:fc:5f:37:e0:9a:d6:bb:85:ee:aa:
         15:29:77:02:8c:db:0a:13:bd:98:9c:6e:cf:07:73:e7:99:d4:
         db:c7:3f:5a:e4:30:1c:40:db:d0:00:0a:36:6e:11:eb:a2:3a:
         3b:cc:d4:7f:30:84:1a:7b:e6:2e:c6:9b:50:e4:8b:c4:44:04:
         33:a3:6e:7e:a9:4a:84:27:5d:25:72:b8:f9:57:95:1a:01:46:
         89:88:3c:53:f9:44:7b:80:e2:e5:32:5e:6f:a5:2f:93:f3:f9:
         16:bb:2c:6f:4f:a9:34:a5:c0:cf:66:5a:7b:7f:51:c3:bc:43:
         c7:89:98:29:85:71:8e:74:4a:90:e3:df:6c:04:15:ac:d1:be:
         8d:2d:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org