Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          KgC8yybHmOVL0Wpmlgo2EE6tQuOzF6eeCisFp82spTg=
Subject key identifier:   2C:CD:46:51:A1:7C:75:B2:BD:49:2C:13:5F:73:B0:A0:55:8E:46:90
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       55BD1F382F54DB274531DE7644DF5F8CE398157D
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:29:00 +0000
ROA not before:           Thu 04 Apr 2024 07:24:00 +0000
ROA not after:            Thu 03 Apr 2025 07:29:00 +0000
asID:                     263146
IP address blocks:        187.86.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:1f:38:2f:54:db:27:45:31:de:76:44:df:5f:8c:e3:98:15:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:24:00 2024 GMT
            Not After : Apr  3 07:29:00 2025 GMT
        Subject: CN=2CCD4651A17C75B2BD492C135F73B0A0558E4690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:4a:34:45:f8:c3:a9:69:bd:cc:fd:9f:67:
                    3a:6f:4d:1a:31:f3:c0:36:24:a1:9c:99:06:6a:ad:
                    94:cf:f7:89:04:44:66:2d:2a:c3:03:04:e2:e6:4c:
                    3a:d6:9c:23:a7:f2:14:e7:fa:13:40:87:79:28:cf:
                    9f:0b:67:dc:7b:c0:d5:10:c2:f1:5a:f8:86:96:45:
                    5d:80:69:98:46:bd:68:ca:7e:d8:02:8b:15:79:d6:
                    84:6e:36:a7:5e:ad:7e:78:38:6c:47:28:6e:e5:79:
                    a1:38:02:4b:6c:3b:68:a4:1a:4c:fe:8c:da:e2:e1:
                    28:bd:17:54:33:f4:d2:02:4a:f0:80:b9:14:87:a7:
                    15:d5:c3:05:05:d1:37:f3:bf:7a:f5:a2:28:33:f2:
                    54:03:b4:09:e7:39:82:90:8d:5f:40:d5:73:3d:fe:
                    d5:cc:a5:cd:eb:5a:f5:27:f7:ac:0e:8c:5c:ff:be:
                    af:2d:39:24:08:58:23:03:2a:44:f7:62:94:11:4c:
                    18:10:a9:92:76:4d:8a:02:f8:f6:60:f4:eb:c7:e5:
                    af:a4:fa:a6:83:a9:ce:73:6e:1a:58:69:ad:94:12:
                    4c:2d:a7:3a:8b:6a:3d:1e:e2:51:cc:56:4b:c6:10:
                    24:d3:15:74:67:ae:26:f1:2c:92:e1:b2:48:a8:56:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CD:46:51:A1:7C:75:B2:BD:49:2C:13:5F:73:B0:A0:55:8E:46:90
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:b8:c6:a7:4d:14:7a:c4:0f:a9:c1:d5:20:6d:69:91:de:
         fe:c6:a5:56:47:d7:aa:5e:f7:cd:06:5e:8d:9b:53:8f:66:06:
         b6:7d:a9:47:b2:a1:6e:1e:22:69:74:96:17:8e:9f:0f:5d:e7:
         68:f6:e1:86:90:62:0e:cb:27:61:af:af:c9:54:64:85:86:cd:
         8a:94:96:6c:df:6d:3b:73:09:e2:6e:24:06:2f:c8:45:04:89:
         83:75:6e:7f:97:94:9a:29:48:ca:38:73:61:06:b9:e6:01:bd:
         04:2b:12:0e:50:26:0b:cb:f7:a8:d1:45:79:9c:6e:56:64:9a:
         63:af:63:a6:33:52:5e:ae:e4:fd:e0:78:67:55:ed:c5:09:b4:
         e0:f8:61:fc:db:d5:ab:c3:f3:fd:ae:93:27:78:c1:bc:67:f3:
         20:f7:3f:3f:7b:30:9f:a3:8b:53:e2:23:53:6b:a2:da:99:12:
         27:76:c3:09:24:36:f2:f7:3e:52:6f:7d:75:64:db:f5:4d:01:
         78:90:b3:6c:0d:9a:db:f9:7f:2b:8b:fe:78:ec:9d:b0:6a:58:
         ad:84:2d:8a:ca:c7:2e:05:e2:98:23:4c:d3:8b:2c:16:37:75:
         d6:d6:c5:e8:1d:d1:9c:d2:32:80:f4:54:c9:c6:77:9c:91:f6:
         64:93:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org