Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137302e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3137302e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          wgWi34qCM1UB05K5Vhcm98Ir6x2PM1aCi8gIlJ2lj8A=
Subject key identifier:   04:2C:37:DF:2C:F5:DF:D0:1C:D8:B1:8F:6D:A3:46:F5:FA:84:FA:D7
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       207365EF4CC2BF2C72FC5C2F14EFD0C0797B56AE
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137302e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:03 +0000
ROA not before:           Sat 20 Apr 2024 09:44:03 +0000
ROA not after:            Sat 19 Apr 2025 09:49:03 +0000
asID:                     262784
IP address blocks:        186.235.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:73:65:ef:4c:c2:bf:2c:72:fc:5c:2f:14:ef:d0:c0:79:7b:56:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:03 2024 GMT
            Not After : Apr 19 09:49:03 2025 GMT
        Subject: CN=042C37DF2CF5DFD01CD8B18F6DA346F5FA84FAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:5e:47:c3:ed:95:94:ae:eb:6f:df:16:aa:
                    94:eb:5d:2c:f1:e7:ef:b9:58:5e:40:df:b0:ae:bb:
                    05:3f:3c:26:e6:aa:70:bb:5c:52:90:e9:88:13:ca:
                    58:10:1c:81:6d:ed:7a:25:11:26:0c:90:57:bc:75:
                    4f:ef:2e:a5:c4:1a:bb:28:82:20:a0:78:cc:c5:7b:
                    71:41:65:b0:93:eb:1b:dc:da:8f:d2:46:f7:c4:40:
                    80:c9:db:ca:d0:7a:9f:e8:1c:ce:ae:ff:94:db:5a:
                    37:71:22:13:fd:31:d7:78:4c:4e:d5:7f:c0:65:59:
                    9a:3f:fa:b1:67:d6:b9:58:df:31:14:96:72:a1:dc:
                    2f:3e:9d:1d:ff:98:ff:41:28:52:22:81:a3:91:0a:
                    9f:75:71:40:ac:73:76:80:16:f1:c6:8b:bb:5d:c6:
                    b1:21:59:a4:9f:aa:f8:0e:cb:9c:18:5d:03:d8:cf:
                    ea:32:97:a3:bd:90:7e:a5:d7:df:88:58:c2:a4:bd:
                    62:dd:c8:5f:fe:b8:db:67:c4:99:5e:e3:92:82:7a:
                    ff:5d:fd:2c:c2:2f:6c:09:c3:7c:fd:a1:9c:df:0c:
                    63:ef:d0:13:f1:fc:57:4e:7a:83:c2:49:d9:57:ca:
                    c0:8d:64:d7:ce:64:30:04:f5:9b:44:25:56:90:d8:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:37:DF:2C:F5:DF:D0:1C:D8:B1:8F:6D:A3:46:F5:FA:84:FA:D7
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137302e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:66:0e:bd:78:49:00:cc:aa:09:29:8c:59:91:2d:98:f6:
         a5:d6:00:71:81:6f:f2:a9:c7:d1:c1:5d:ae:d7:e7:6b:cb:67:
         e2:3f:ed:be:19:ff:31:e5:9d:49:e6:70:59:74:84:70:2f:62:
         c1:40:96:60:5e:8f:5e:8b:84:31:04:64:67:90:dd:d7:c4:bf:
         c8:17:0b:4e:dc:0d:94:e3:c2:28:92:58:0b:b3:03:19:2f:a3:
         1f:33:2d:62:46:4a:a4:81:bf:f3:16:06:c4:60:17:40:ce:52:
         ef:4f:d9:72:82:28:16:8f:e8:78:2a:ef:e2:4a:41:1c:b3:d2:
         c3:c5:be:ad:45:9b:69:97:ff:7b:09:b6:c9:19:be:55:92:02:
         ed:06:d3:d6:a9:04:1b:47:28:7b:2d:1b:f9:00:e5:0f:35:58:
         57:69:86:18:15:a0:a8:bf:67:4b:d7:ac:ce:35:73:43:9f:ad:
         c2:8a:86:11:1c:84:1f:2d:cf:0b:c8:7f:9b:a5:7b:58:49:25:
         6a:5b:04:7e:b6:21:83:f6:dc:db:ca:a1:74:84:7b:98:cb:c1:
         db:98:2c:44:f5:f9:44:2d:e3:ff:a6:a1:86:36:27:2c:6e:18:
         78:a2:8a:54:9d:5e:dc:c1:8d:63:45:b0:9f:08:7a:ae:90:6b:
         e7:4c:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org