Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          FEsBxrZgEtH5YmbR0uDCkvzLh75YLYbEEN+1xjGTO74=
Subject key identifier:   73:D2:9E:45:12:2A:E8:EB:7D:EB:6E:2A:6D:28:10:39:81:CD:42:DC
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       56F1A7CEE56DB0A01954C1BA7C305A227A55CC31
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa
Signing time:             Fri 03 May 2024 18:04:06 +0000
ROA not before:           Fri 03 May 2024 17:59:06 +0000
ROA not after:            Fri 02 May 2025 18:04:06 +0000
asID:                     262784
IP address blocks:        186.235.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:a7:ce:e5:6d:b0:a0:19:54:c1:ba:7c:30:5a:22:7a:55:cc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: May  3 17:59:06 2024 GMT
            Not After : May  2 18:04:06 2025 GMT
        Subject: CN=73D29E45122AE8EB7DEB6E2A6D28103981CD42DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:e0:92:17:23:a0:a7:e7:7b:13:f1:e1:0f:
                    cc:55:84:de:0a:8a:c0:b8:b4:49:e2:03:dc:a5:cc:
                    06:aa:03:fc:1a:db:a5:ed:58:00:0b:80:6a:66:14:
                    bb:ab:a5:3e:9f:55:27:8c:73:e5:b5:dc:b2:f5:4d:
                    60:ec:71:a4:c8:b2:f9:e3:42:62:e8:9e:2b:13:43:
                    b9:5f:7e:79:bd:31:58:1a:c9:24:2b:81:2e:d4:72:
                    2c:29:ba:08:15:26:5d:e3:67:a8:98:66:8a:66:43:
                    c4:cf:51:64:5a:50:cb:a5:39:39:8f:70:c7:24:e6:
                    ab:24:8a:4c:d7:c6:ac:db:77:69:5c:9a:ae:84:16:
                    fc:59:2f:9c:14:54:3e:7d:7e:96:34:24:d2:80:26:
                    c5:a1:0b:cc:ba:44:67:87:56:31:b7:e3:95:fc:01:
                    2d:1e:0c:5d:cc:22:ff:e2:5f:66:67:64:2b:42:be:
                    7d:dc:3d:3c:e6:8a:02:a8:70:50:52:59:a5:88:7a:
                    3e:76:25:e7:a8:61:89:ea:60:0d:60:ac:e6:94:00:
                    59:9c:00:1f:c2:1a:24:68:32:2e:6c:52:ac:35:e0:
                    89:48:94:8c:d9:89:80:8c:e9:40:51:8f:15:47:e4:
                    90:ec:06:28:2e:24:8e:be:90:18:3e:14:f8:19:0e:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:9E:45:12:2A:E8:EB:7D:EB:6E:2A:6D:28:10:39:81:CD:42:DC
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137352e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:26:0b:2f:3a:b5:b4:eb:4e:09:d7:13:b8:5b:b3:0e:ed:da:
         c3:b0:cd:16:67:00:27:c2:7d:e8:9e:41:85:9c:a5:06:fb:82:
         37:0c:2f:8e:68:66:3c:65:ba:98:0b:16:c1:1a:df:8b:79:61:
         06:3d:7c:4e:c3:96:c6:c8:1f:67:01:94:29:63:d3:52:ed:a2:
         63:da:50:3f:58:81:aa:e0:73:89:e3:cb:4e:b5:f4:ef:41:a3:
         40:a9:e0:6b:a7:39:36:0d:87:f1:2c:be:c0:b8:a9:b5:da:54:
         37:4e:35:6a:0a:13:b5:25:9f:be:23:46:f5:01:ec:72:c1:39:
         6a:36:17:2b:ec:5b:1c:8b:ec:53:39:9d:7e:88:0b:13:36:a8:
         44:29:fe:b3:05:1c:b2:12:c8:46:89:1c:93:da:73:a0:7a:86:
         26:cf:99:44:55:12:4b:7f:21:35:13:6b:a2:4e:f0:6a:12:ca:
         85:20:78:f8:ef:02:ae:35:17:0d:e5:d7:22:20:4d:ed:55:48:
         93:cb:5a:89:18:42:4d:54:65:4a:71:fc:96:8f:aa:51:a4:d9:
         40:af:60:70:c2:6f:69:8a:29:d6:fe:60:2b:97:89:f8:3a:88:
         59:67:72:4b:fd:f4:ca:62:76:73:78:85:1d:14:cd:ad:e8:b8:
         f6:8e:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org