Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230362e302f32332d3233203d3e20323633313436.roa
File:                     3138372e38362e3230362e302f32332d3233203d3e20323633313436.roa (raw, json)
Hash identifier:          kAg9eSlKK6elfHDo8NtelzixMqq2YVx8Qaa2TomZLBw=
Subject key identifier:   DA:61:1D:71:65:EF:A3:2D:0F:56:AB:9F:41:0F:39:4E:2E:FF:D9:74
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       5A69360BFB8AD64F78C426BBECAAE5C0908BF36E
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230362e302f32332d3233203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:29:02 +0000
ROA not before:           Thu 04 Apr 2024 07:24:02 +0000
ROA not after:            Thu 03 Apr 2025 07:29:02 +0000
asID:                     263146
IP address blocks:        187.86.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:69:36:0b:fb:8a:d6:4f:78:c4:26:bb:ec:aa:e5:c0:90:8b:f3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:24:02 2024 GMT
            Not After : Apr  3 07:29:02 2025 GMT
        Subject: CN=DA611D7165EFA32D0F56AB9F410F394E2EFFD974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:a9:98:e3:42:09:51:22:3b:1b:d5:1b:3c:
                    c7:0e:da:c7:30:17:a4:67:23:46:2b:32:b0:30:83:
                    53:25:e0:56:d4:85:eb:d9:35:3a:9a:5b:5a:c8:aa:
                    13:f9:f6:6c:8d:74:95:82:6e:a0:f9:0c:22:90:4a:
                    76:b9:c5:65:4e:3e:0b:bb:c8:6d:86:21:a9:8b:3f:
                    84:ca:5f:63:48:07:72:a6:1d:20:65:04:05:94:b8:
                    33:d4:28:88:69:62:2b:ff:b8:c4:bb:81:2d:3a:0a:
                    e3:9d:d9:66:f1:eb:86:b2:7c:02:e9:b1:ac:8e:48:
                    23:77:d2:c2:98:0c:53:f7:50:ea:83:06:90:4f:1e:
                    b3:58:81:73:93:96:0a:16:1e:33:29:c1:7d:d4:dd:
                    84:27:70:85:4c:9d:46:7d:92:66:e0:31:e9:75:06:
                    ae:95:c1:4b:63:e4:45:41:84:0d:7f:3b:46:77:8b:
                    d1:13:e0:cc:31:11:b3:fb:72:54:a1:1b:32:fc:64:
                    44:aa:cd:0e:85:9b:e6:1b:e7:43:fd:9c:de:28:c0:
                    5b:12:e2:ad:36:9d:e3:2d:8e:04:1f:d5:8f:c8:b6:
                    97:49:be:13:f0:60:ed:8c:32:cf:3c:83:93:0f:26:
                    be:8e:e7:97:88:09:15:95:81:19:69:d1:b4:c0:2c:
                    75:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:1D:71:65:EF:A3:2D:0F:56:AB:9F:41:0F:39:4E:2E:FF:D9:74
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230362e302f32332d3233203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:e0:b0:12:93:ed:45:8c:72:f0:8b:4c:5a:c8:79:cf:2f:d5:
         43:fa:af:12:b7:9f:a2:09:84:11:b2:2d:12:10:4e:13:c3:64:
         5a:ba:89:81:d3:c7:fa:d4:5e:2f:fa:14:92:83:7a:8b:7d:9d:
         87:ee:67:f7:57:81:b0:4c:d7:41:ed:5a:38:ad:65:15:e9:37:
         84:91:9b:e6:ef:d1:9f:11:34:48:b3:ff:3a:20:7a:41:92:cd:
         16:0c:6c:70:d6:f7:78:a8:1e:9e:dc:8f:6d:e9:72:f4:d3:1d:
         7b:bb:b1:4e:07:19:1b:ab:84:6c:25:e7:a1:3b:5a:6e:7e:95:
         4e:f8:e2:3d:c9:ca:4c:71:7f:e8:67:19:1b:00:3c:b7:98:84:
         45:4e:07:4c:64:c6:a5:56:cc:77:e8:92:0c:e5:1b:86:a4:fd:
         36:92:d7:96:40:48:a7:5c:1f:6d:d4:4d:ed:56:d3:ad:9d:12:
         40:96:de:44:4a:b0:a9:d8:c8:36:fb:e4:b4:07:2e:1e:91:fa:
         24:0a:b9:fe:67:04:c2:60:80:42:a9:bd:ab:82:69:de:ed:09:
         73:84:0c:2b:87:f4:e3:7a:0c:8c:0e:61:5d:82:ca:3d:1f:a1:
         4d:10:55:e8:61:4a:94:78:f9:3d:c9:2b:0f:52:56:83:d6:f1:
         9b:a5:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org