Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131362e302f32322d3232203d3e20323636313831.roa
File:                     3138362e3233332e3131362e302f32322d3232203d3e20323636313831.roa (raw, json)
Hash identifier:          OhtEUPfEcI54tqQNAOTqNTpUHKfHK6HXww4eo4D5epo=
Subject key identifier:   39:BB:49:0B:62:EE:98:35:4F:86:EB:48:EA:8B:A4:58:33:09:B8:89
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       14BC6F1A199C1D6EBDD8642520EF31FB36400CEA
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131362e302f32322d3232203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:32 +0000
ROA not before:           Fri 19 Jul 2024 16:54:32 +0000
ROA not after:            Fri 18 Jul 2025 16:59:32 +0000
asID:                     266181
IP address blocks:        186.233.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:6f:1a:19:9c:1d:6e:bd:d8:64:25:20:ef:31:fb:36:40:0c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:32 2024 GMT
            Not After : Jul 18 16:59:32 2025 GMT
        Subject: CN=39BB490B62EE98354F86EB48EA8BA4583309B889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:40:20:bc:1e:23:36:70:8c:45:83:77:74:
                    5d:eb:f2:20:d2:d8:6b:e2:54:59:10:41:e6:90:10:
                    af:3f:8a:94:4a:46:66:f1:37:99:d3:26:ad:8e:5a:
                    3d:47:07:e4:46:5a:d0:b3:13:0f:ec:6a:9f:b9:39:
                    50:fe:27:2c:1b:ce:12:bd:d0:d6:50:45:89:53:de:
                    9c:0c:2d:14:2b:04:1c:2f:96:d1:a6:03:55:c0:93:
                    3b:b6:04:ee:2a:ba:39:da:50:24:f8:d5:40:27:d3:
                    0a:e4:a4:f7:ae:00:77:37:0d:66:75:14:72:26:df:
                    c8:5c:70:fc:5f:d2:a9:36:09:a3:69:84:b6:78:0d:
                    60:4c:fb:03:34:13:4c:aa:e2:12:a5:2f:1b:79:b8:
                    91:c5:10:e3:08:c9:27:e7:04:59:66:d5:fb:2e:37:
                    2e:ff:87:29:fb:e2:49:75:8c:12:dd:7b:c7:bc:d0:
                    80:8c:d5:59:36:8a:02:49:a9:ac:21:13:e4:07:4f:
                    b2:cc:92:88:e8:79:dd:d0:ca:a2:3c:77:aa:f4:22:
                    b3:70:ab:1a:cf:9b:38:85:4f:35:5e:6d:fc:75:ad:
                    93:90:43:96:20:80:33:27:fa:49:53:6b:fe:fc:ee:
                    0c:10:9e:01:1a:d4:36:3a:5d:67:99:d0:fe:49:c4:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BB:49:0B:62:EE:98:35:4F:86:EB:48:EA:8B:A4:58:33:09:B8:89
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131362e302f32322d3232203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:86:7e:74:82:0e:db:a8:51:36:51:0a:85:77:b7:e8:b8:
         b7:1e:04:9e:21:50:a8:ec:f2:fd:d6:13:f6:b0:6c:4c:11:b1:
         02:e7:10:56:b0:7c:46:a1:ba:6e:67:83:45:f5:87:0f:2a:80:
         92:51:34:bf:60:c4:26:a1:f0:98:61:9c:ab:64:47:8b:bf:29:
         5f:aa:ae:f8:b0:df:c5:f6:9f:0b:3d:73:37:3e:3e:36:53:2c:
         5b:4e:6c:bb:89:7f:da:e1:c6:77:5b:ce:10:6f:69:c7:f4:ff:
         32:f5:9b:21:cb:d3:e3:d6:7b:5a:a4:e2:e9:0a:a7:a1:39:34:
         30:5f:a2:1f:7a:00:ba:4e:76:82:40:2f:65:06:41:74:02:1c:
         fe:76:12:b6:d3:f1:e6:3b:21:44:62:8a:96:39:85:42:ce:2b:
         ab:90:ee:db:30:44:41:72:2a:a5:2e:2e:cc:6b:ba:5c:d5:14:
         71:62:e5:f4:f5:88:f7:90:fe:96:8c:b3:ef:14:00:03:57:dd:
         4d:84:b3:27:90:a4:80:fe:b9:aa:93:b1:f8:cc:89:ac:ca:b8:
         14:40:9b:52:b5:3f:dc:8d:fd:df:9a:cc:6d:dd:ad:5d:0c:3b:
         c8:46:47:14:cc:ee:79:96:8e:5f:d8:16:8c:ad:bb:58:92:5b:
         c6:3d:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org