Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          C7n7NvwgXaR7Q/B9qsZ47T8oR6+hZ1A7o+dO/EK/3bw=
Subject key identifier:   55:42:BF:DF:58:3D:0E:3F:33:D8:E7:1D:05:DB:32:4D:44:B2:21:C3
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       37FB614B6BB9912400A3405559342359AE2504D9
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:29:00 +0000
ROA not before:           Thu 04 Apr 2024 07:24:00 +0000
ROA not after:            Thu 03 Apr 2025 07:29:00 +0000
asID:                     263146
IP address blocks:        187.86.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fb:61:4b:6b:b9:91:24:00:a3:40:55:59:34:23:59:ae:25:04:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:24:00 2024 GMT
            Not After : Apr  3 07:29:00 2025 GMT
        Subject: CN=5542BFDF583D0E3F33D8E71D05DB324D44B221C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:b4:ff:1f:4d:45:11:14:0d:e1:e5:71:5b:
                    31:9b:24:54:0d:24:9c:f4:ba:08:1e:13:90:ae:58:
                    cf:8a:f1:8c:07:17:38:6a:b9:6e:dc:6e:3c:02:70:
                    41:63:72:18:98:e0:48:dc:33:c2:44:2f:ee:20:4d:
                    21:22:4b:bf:a7:19:cf:5a:08:30:b1:f5:37:fe:90:
                    aa:cd:08:06:d8:85:02:e7:dd:89:86:e3:f0:77:6b:
                    3e:48:dc:0d:65:d9:44:be:81:f7:4a:20:80:77:2f:
                    da:35:70:7a:13:7e:64:cd:00:21:29:25:af:b8:f6:
                    7e:98:2b:ac:d9:de:d5:bf:7f:df:40:2d:fe:c4:18:
                    09:70:68:ba:ae:57:62:a1:98:96:f1:c7:5a:1a:c6:
                    3c:67:7b:50:5a:1f:85:a0:ae:32:49:d6:a8:8b:b5:
                    55:68:9f:e2:66:9e:e2:03:75:2d:81:99:e7:22:ca:
                    52:d4:16:bc:be:01:b0:3c:c1:31:ee:82:ba:f2:1e:
                    a8:49:b8:06:1c:6d:8a:dc:a4:6e:a2:26:4c:85:41:
                    7d:94:e4:6a:fb:a3:c3:b3:a1:cf:0c:3c:da:eb:df:
                    0b:49:a7:08:a7:be:15:e5:48:10:84:6a:b7:69:06:
                    1d:e9:91:8b:37:99:9f:5c:e0:91:54:bc:cb:79:e0:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:42:BF:DF:58:3D:0E:3F:33:D8:E7:1D:05:DB:32:4D:44:B2:21:C3
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d8:51:24:6f:d2:cf:ec:41:77:36:97:5a:e0:60:5f:87:dc:
         04:59:72:94:1f:90:84:c7:41:7a:43:04:08:98:e9:7f:73:51:
         81:ff:c9:58:42:a2:d6:24:45:b3:98:1d:42:33:9d:38:73:b1:
         53:c2:ad:8d:80:42:74:4d:44:8e:89:dc:91:af:e0:da:39:ec:
         5f:1c:22:18:ce:ae:d2:da:2d:a2:24:10:6e:1c:bd:70:9f:aa:
         53:a9:6b:4d:20:65:8f:88:cd:d9:46:b5:41:73:ae:41:c6:d1:
         91:05:f1:e8:0d:c2:9f:4c:47:17:a4:0d:86:33:03:c6:0d:d0:
         aa:87:a9:5e:36:88:46:29:00:0f:70:bd:4f:ec:56:6e:d2:4b:
         dd:8b:8c:eb:e3:79:a1:ff:02:a7:cf:c1:5e:bb:7f:6d:42:b5:
         84:e3:fc:46:bd:11:10:3d:6e:14:de:5a:99:2b:34:4f:d0:bf:
         cb:d6:0a:e5:aa:e6:ff:23:1e:03:39:e5:6a:ea:28:19:58:d4:
         f7:77:3e:f6:f7:58:13:6e:db:b7:9d:1c:c4:d8:d0:96:30:3d:
         44:4d:16:78:a9:cd:16:03:52:be:21:1c:12:be:25:92:a4:70:
         2c:87:26:89:02:9a:23:10:66:6a:45:00:8d:47:16:96:2b:f0:
         29:35:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org