Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa
File:                     3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          HoHGf5xjpu1MfdI5TRo6GUOKT0jG1YBo+S6C8kqXFdY=
Subject key identifier:   4D:5B:47:82:75:9E:1B:88:E8:60:A5:B5:8B:12:95:84:B9:4B:14:AD
Certificate issuer:       /CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
Certificate serial:       261ACE964C4FFA39525C411EC3262D91D9D89CC8
Authority key identifier: 3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa
Signing time:             Thu 04 Apr 2024 08:59:27 +0000
ROA not before:           Thu 04 Apr 2024 08:54:27 +0000
ROA not after:            Thu 03 Apr 2025 08:59:27 +0000
asID:                     264075
IP address blocks:        186.235.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1a:ce:96:4c:4f:fa:39:52:5c:41:1e:c3:26:2d:91:d9:d8:9c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
        Validity
            Not Before: Apr  4 08:54:27 2024 GMT
            Not After : Apr  3 08:59:27 2025 GMT
        Subject: CN=4D5B4782759E1B88E860A5B58B129584B94B14AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:5e:98:0c:a1:a2:b0:37:a4:19:31:49:4a:
                    b0:7d:0f:fc:52:aa:dc:2c:54:a0:c3:b4:e6:3c:b8:
                    a6:83:ad:77:b0:6a:2a:c1:9a:1c:93:d7:4a:b2:c6:
                    2d:34:22:68:55:9c:1d:68:4b:f1:e2:da:df:fb:fb:
                    27:2d:31:29:64:c6:50:76:a0:60:c5:0d:a7:b1:8e:
                    f9:ba:9e:72:b2:73:03:66:25:a1:9f:f9:c2:1c:90:
                    08:7c:48:c5:b6:fb:34:6e:ef:bb:74:df:75:93:5b:
                    85:53:56:74:3d:cb:21:21:b5:c4:40:f8:db:b8:23:
                    43:fc:96:f0:35:ce:53:1a:0f:6a:37:22:99:f1:98:
                    61:95:55:48:3e:06:9b:46:42:d3:17:2e:03:4d:7d:
                    84:eb:ed:53:37:48:02:09:1f:c5:27:6b:de:8f:59:
                    9b:d7:77:af:ca:f6:df:f2:03:1d:dc:8c:4f:84:3c:
                    59:c7:a6:51:46:b4:00:b3:43:83:0a:f9:79:df:44:
                    93:f3:88:02:ec:eb:e3:69:cd:d8:66:da:05:85:06:
                    80:a9:f3:b0:e4:bb:70:3a:74:fb:0f:04:1f:7b:f5:
                    a1:4d:6f:9b:2a:af:2d:c5:dc:db:f6:41:87:98:56:
                    66:3d:e3:f8:b8:67:8c:a5:06:07:d5:22:64:55:dd:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:47:82:75:9E:1B:88:E8:60:A5:B5:8B:12:95:84:B9:4B:14:AD
            X509v3 Authority Key Identifier:
                keyid:3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:d6:96:ce:12:03:ad:0c:20:fb:96:8b:df:26:50:99:a5:
         61:96:4a:da:0d:25:80:d2:d2:3b:96:37:e1:2a:88:53:3b:5d:
         83:a7:94:1d:05:6c:f8:60:e4:85:e5:c5:48:51:ee:7a:12:db:
         4d:1d:a7:45:c8:e3:27:85:c8:7b:df:e4:e9:37:f1:db:25:67:
         b8:a8:ae:c3:71:93:98:4f:d4:42:38:32:a3:3c:d2:50:c1:fc:
         33:0a:ef:88:41:d5:c1:73:6d:7b:1d:ad:46:26:e9:ac:01:b3:
         66:a7:d9:42:f4:fc:34:67:ea:24:f0:f8:8c:16:ba:48:5c:53:
         16:05:82:7e:b2:10:01:5e:ac:7f:15:28:f5:2a:58:08:41:bb:
         0a:69:6b:e0:f9:e5:2d:e2:d3:4c:ca:6c:ea:d3:d3:d9:ab:0a:
         cb:32:ee:bb:23:08:16:6f:f9:36:1b:7c:9a:ca:40:25:0e:70:
         86:22:06:52:30:66:c3:40:18:e4:a7:a0:c4:70:c3:ad:2e:43:
         8b:2e:36:55:13:7a:65:7b:7a:b7:b7:c7:64:9e:75:d5:97:d5:
         b8:f8:ba:e2:fe:0b:ed:43:6c:59:eb:18:84:6c:81:41:66:17:
         1c:83:ee:ca:4a:4a:d6:7d:c1:e5:14:83:75:c1:9e:e8:10:88:
         61:bc:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:47 2024 by rpki-client on console-ams.rpki-client.org