Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e31382e36342e302f31382d3234203d3e203232363839.roa
File:                     3138372e31382e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          AcExeFJR25dRhwh6iYpFbbRqZ7z6/qLaUnJtVXXUrBY=
Subject key identifier:   15:D1:0D:11:F2:6F:BB:77:26:39:A3:AF:4F:DD:A7:2C:AD:6A:8D:A0
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       51B3389CD4AB02E778AF6887AFC592635DDADAD1
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e31382e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:15 +0000
ROA not before:           Fri 05 Apr 2024 01:30:15 +0000
ROA not after:            Fri 04 Apr 2025 01:35:15 +0000
asID:                     22689
IP address blocks:        187.18.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:38:9c:d4:ab:02:e7:78:af:68:87:af:c5:92:63:5d:da:da:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:15 2024 GMT
            Not After : Apr  4 01:35:15 2025 GMT
        Subject: CN=15D10D11F26FBB772639A3AF4FDDA72CAD6A8DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:6b:22:e6:b5:00:a2:8c:cf:6f:d9:0c:e9:
                    7e:a5:63:ec:5e:70:fd:12:de:14:66:32:12:fe:eb:
                    20:75:6b:90:05:a2:08:eb:14:9f:67:de:87:75:4d:
                    e0:88:bc:a6:89:4b:24:69:ef:4e:b2:3b:53:df:6f:
                    f8:72:5a:09:1c:30:bd:4f:92:eb:7b:81:89:6f:92:
                    6a:7f:5f:12:3a:25:5d:50:f5:b2:81:17:00:e2:24:
                    ea:e0:0e:fc:f6:65:6b:58:65:3e:69:ca:50:f5:b5:
                    7d:e7:49:c6:2e:5e:a3:c0:19:d9:93:a0:3a:ea:c6:
                    19:0d:65:29:2a:b2:a2:2f:3b:15:47:5f:a5:82:a7:
                    3c:5c:d4:e7:9b:ab:bb:88:a5:44:b8:1d:86:d6:f3:
                    ca:c3:bb:e9:cc:7b:f2:9f:3a:99:12:6a:da:f2:cc:
                    d9:ec:73:42:14:e0:c0:e4:5d:70:7f:55:4c:0c:10:
                    ee:ff:22:ff:aa:d5:8c:fb:f8:86:8c:52:3b:d4:d0:
                    d5:34:5d:3a:95:ef:77:01:c2:85:d6:06:5a:c1:e4:
                    39:a4:7f:b4:5d:b9:e8:9f:d3:3c:2c:3b:ac:fd:24:
                    4b:42:58:23:1d:e1:32:41:2e:8f:cc:54:8c:ab:79:
                    12:5f:f8:31:7e:65:4a:3d:21:ff:c5:75:2d:ff:09:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D1:0D:11:F2:6F:BB:77:26:39:A3:AF:4F:DD:A7:2C:AD:6A:8D:A0
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e31382e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:db:43:c4:7c:a0:1d:85:7a:8e:7c:2e:2c:64:46:bd:a5:
         00:20:19:c1:8c:3b:5f:85:ce:f7:22:5f:db:29:79:f3:cf:c2:
         89:0b:29:34:41:cb:e6:79:53:34:fd:91:6e:77:66:1f:60:67:
         ac:bc:3d:fe:92:17:3a:38:f6:b9:3e:90:d7:c1:3d:c3:66:68:
         3e:51:7d:53:15:7a:8c:98:35:5c:80:36:71:e7:14:38:ae:98:
         7d:ff:bf:ee:2a:fe:5a:e7:48:0d:78:6d:aa:e2:22:cd:5e:cd:
         d2:52:12:14:df:48:1b:27:e6:7a:96:a9:b2:84:c6:c9:c3:ff:
         d6:7b:ca:19:5d:b8:f5:77:8e:44:6e:fe:83:14:7e:48:b3:67:
         0d:89:7d:4d:42:b9:cb:d0:2b:5f:53:58:f3:e1:65:74:91:8a:
         a3:1a:dd:19:41:3f:a1:a9:ac:ce:ad:8d:f2:a1:39:6c:17:8e:
         83:16:4d:74:88:f6:0b:1c:4e:39:12:9a:a0:b4:d4:df:79:26:
         56:b0:2d:21:d4:11:e2:2d:fc:b6:34:b7:9b:66:51:1d:50:17:
         bf:c2:29:31:2c:18:d8:5a:df:6d:cf:e5:e2:8c:6a:55:4e:24:
         5d:e6:f4:e7:ce:0c:93:21:d0:89:13:6d:28:2d:8c:9a:88:2d:
         0e:8d:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org