Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136332e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136332e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          S9WRb/tp/DOwxXHQM2UbdoAlEnjkTte0r4mvzVi1Y6E=
Subject key identifier:   47:F7:4C:30:B5:EC:CE:D2:18:1C:12:A5:0D:7C:42:BC:69:38:B5:DC
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       297A9B40568F9E388C150F9D93BB1E93045BF526
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136332e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:04 +0000
ROA not before:           Sat 20 Apr 2024 09:44:04 +0000
ROA not after:            Sat 19 Apr 2025 09:49:04 +0000
asID:                     262784
IP address blocks:        186.235.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:9b:40:56:8f:9e:38:8c:15:0f:9d:93:bb:1e:93:04:5b:f5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:04 2024 GMT
            Not After : Apr 19 09:49:04 2025 GMT
        Subject: CN=47F74C30B5ECCED2181C12A50D7C42BC6938B5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:d5:e6:2c:0c:88:e1:e5:9e:d0:08:1b:d1:
                    76:21:18:6d:8b:92:43:bf:b5:1d:ed:6b:23:5a:94:
                    8d:02:ba:61:7a:66:9c:27:74:af:93:fe:00:ea:1b:
                    3a:02:d0:04:9a:ce:02:87:7c:41:8c:a5:a6:52:8c:
                    d4:4c:9b:62:c4:3b:e9:05:7e:4f:7c:8e:c9:2c:8e:
                    d7:8c:d0:a9:42:9b:c2:04:11:f8:9d:33:cf:3b:38:
                    87:a5:28:55:28:69:08:d0:1e:d5:01:66:d0:ea:f7:
                    c8:dd:0a:94:d8:15:b7:d4:8e:e1:18:9d:03:93:86:
                    9f:4c:a7:91:12:c0:c7:42:d1:e5:c8:d0:e3:75:09:
                    7a:9c:37:e6:c2:a0:8e:cb:b1:13:7b:3d:24:e6:c1:
                    69:f3:02:06:6f:c7:db:e8:67:b5:fb:f9:93:11:47:
                    e4:c2:95:2c:3b:6c:0c:b0:38:55:f4:42:37:02:88:
                    d8:49:6b:50:e3:37:f5:c7:b1:15:2e:9d:5e:2a:63:
                    02:fb:01:3d:c0:12:ab:60:1c:1f:9a:c7:0f:99:8d:
                    7e:ad:16:d0:ed:00:14:dd:d8:2a:9d:91:ba:2f:d6:
                    91:0a:ae:ec:12:52:9f:0d:5b:53:48:8b:d9:23:ac:
                    7d:cf:1b:aa:85:95:6b:9c:9b:00:0e:02:20:70:ad:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F7:4C:30:B5:EC:CE:D2:18:1C:12:A5:0D:7C:42:BC:69:38:B5:DC
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136332e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:bd:57:6f:54:30:26:7e:c9:25:45:23:80:f5:99:9a:4f:
         50:d1:01:46:8c:7b:b9:a8:c9:e7:0b:6d:71:04:c0:98:68:07:
         61:9b:01:fb:6f:9f:46:fa:49:ff:da:84:66:32:93:1b:9b:ac:
         e1:28:3a:23:dd:4d:4a:13:2f:9f:a1:50:bf:20:cc:07:0f:88:
         4e:48:e3:ca:03:88:f3:2c:9f:e0:cb:e2:7c:1d:bc:69:13:9c:
         92:b4:30:37:ea:3b:e3:5a:b9:bc:37:eb:71:cd:21:00:1f:9f:
         e2:ff:ea:42:87:40:c4:66:6b:17:a2:81:92:15:6d:bb:dc:67:
         7c:4d:f1:2a:4a:ac:59:11:d3:02:95:68:4d:bf:f1:6b:6f:68:
         62:67:99:6d:b2:59:78:f0:f0:88:e5:7a:ab:e7:c4:14:f5:4e:
         07:19:52:d0:02:b6:a3:a2:35:42:ae:17:ca:ba:7c:fb:f2:c3:
         b1:53:a1:59:fb:18:94:c3:ed:8b:e3:fb:db:06:0b:26:87:d0:
         62:bb:27:8e:b0:13:60:fe:79:d1:ac:69:17:ac:e2:07:08:e4:
         b4:65:2d:42:84:05:1e:2d:32:06:38:4a:b0:25:7a:2f:8f:f0:
         8c:2a:73:51:b7:8d:5a:b8:66:93:f9:05:a7:96:6c:77:68:1f:
         8f:a0:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org