Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          8RdZ9aWHMLFmqDgc4kwNTUTkW4PPA82vY3xMS+uKnRQ=
Subject key identifier:   C7:70:83:1E:87:CB:89:8B:8F:53:CB:39:83:28:05:46:44:D9:40:44
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       285D1E73F2257207E0AAE551232AAAEC67B11B7B
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:53 +0000
ROA not before:           Thu 04 Apr 2024 07:23:53 +0000
ROA not after:            Thu 03 Apr 2025 07:28:53 +0000
asID:                     263146
IP address blocks:        187.86.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5d:1e:73:f2:25:72:07:e0:aa:e5:51:23:2a:aa:ec:67:b1:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:53 2024 GMT
            Not After : Apr  3 07:28:53 2025 GMT
        Subject: CN=C770831E87CB898B8F53CB398328054644D94044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:31:dc:01:71:12:47:60:a1:69:93:a3:a2:
                    8d:b4:f3:d8:39:30:96:82:f4:fa:60:db:d6:cb:2d:
                    5e:2f:79:82:1b:a8:49:ec:b6:12:37:91:f8:6b:fa:
                    1b:2d:8e:20:aa:cf:9f:a8:18:6c:a8:6a:32:7e:9a:
                    7b:70:2e:d5:ee:e7:de:e5:4e:85:c6:0c:f7:a7:c3:
                    58:ae:55:9e:82:7b:b0:91:93:fa:24:75:81:7d:0f:
                    7c:75:1b:71:fe:99:87:d0:57:0d:8f:88:a0:c3:f3:
                    56:ac:af:25:ff:23:26:15:88:3d:bb:23:dd:c7:d0:
                    20:a7:c4:6f:35:40:7b:0d:03:22:2c:8d:e3:81:b4:
                    01:db:9e:e8:8f:77:44:40:b8:7c:54:65:0a:86:62:
                    c8:47:60:8e:40:77:c9:f6:66:dc:12:6b:5e:4d:7c:
                    e4:fe:37:57:f4:0e:4e:bc:ec:03:56:a5:60:ec:fc:
                    b4:1a:d5:59:df:3d:d6:5c:49:b0:c6:b3:03:95:4a:
                    b5:dc:fd:84:a6:3b:5d:f8:14:f3:ba:47:8e:19:e3:
                    7a:86:9c:f1:58:39:3b:0b:be:c2:d1:a0:51:62:6d:
                    f3:7a:49:6e:79:7d:6e:4e:33:5b:4d:86:ae:c8:c4:
                    d5:ce:ff:9c:d0:09:96:50:15:f4:86:02:40:5f:67:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:70:83:1E:87:CB:89:8B:8F:53:CB:39:83:28:05:46:44:D9:40:44
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:39:0d:84:25:05:8e:73:2f:fc:82:57:6a:f3:57:6d:8a:ea:
         a8:d9:95:9d:a1:07:15:3b:64:1f:f4:d2:eb:c5:ed:bb:8d:59:
         3e:5a:43:eb:91:12:0b:46:15:ac:26:15:d6:60:d9:0c:46:4f:
         0b:5a:f8:ca:e1:df:13:50:48:77:22:2d:df:72:7b:e9:69:f7:
         88:a6:79:a6:c3:8e:09:62:48:d0:93:7b:d3:ef:3f:7d:d2:cb:
         25:92:54:dd:63:a8:b0:e6:1a:d7:0f:96:c9:43:80:16:83:93:
         26:01:cc:1c:37:f3:ec:45:b8:6c:70:6c:26:96:0a:12:2d:31:
         09:21:20:b5:18:8f:97:ad:05:cd:25:90:80:48:6c:c4:c5:55:
         9b:4d:e1:ee:b2:95:d9:ac:0a:e9:54:28:0e:23:6f:57:a1:ce:
         d1:80:1b:e7:c3:f0:15:10:d0:05:2e:b4:fc:03:1c:08:0a:05:
         cc:33:e7:3f:26:08:34:56:73:ae:fa:2d:84:fc:03:db:8f:90:
         06:e0:b5:68:46:f9:73:bc:f5:84:fe:8d:30:47:d8:67:7b:4d:
         bb:3b:9b:9e:36:9a:6d:24:3b:92:34:87:8f:4b:56:8a:5a:47:
         1d:51:e6:5d:f6:7d:9a:65:b6:86:9c:d1:0d:89:08:1e:11:6c:
         af:92:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:32 2024 by rpki-client on console-fra.rpki-client.org