Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131382e302f32342d3234203d3e20323636313831.roa
File:                     3138362e3233332e3131382e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          POP6+2EhjBaKt22VDFg1O0Pqd11IgJO1A6PCaHRkqXU=
Subject key identifier:   62:C2:81:D9:58:81:4E:A2:EE:1D:4D:D0:46:38:73:EB:52:89:EA:EE
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       4BCB7389E1FD76D7C50B19A6A28A95FA2FD4E9AE
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131382e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:31 +0000
ROA not before:           Fri 19 Jul 2024 16:54:31 +0000
ROA not after:            Fri 18 Jul 2025 16:59:31 +0000
asID:                     266181
IP address blocks:        186.233.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cb:73:89:e1:fd:76:d7:c5:0b:19:a6:a2:8a:95:fa:2f:d4:e9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:31 2024 GMT
            Not After : Jul 18 16:59:31 2025 GMT
        Subject: CN=62C281D958814EA2EE1D4DD0463873EB5289EAEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:10:89:58:ed:5e:09:3d:1e:00:40:21:0d:
                    e7:a3:b6:d0:a8:fa:f0:0d:64:ab:ff:1b:fd:b2:9e:
                    2d:8c:bd:35:78:4c:75:67:9d:a8:37:4d:2c:6a:d6:
                    64:59:70:11:6d:83:dc:51:6b:4f:b9:20:2a:93:95:
                    59:90:98:8d:c7:6b:57:e5:05:de:39:87:58:e2:05:
                    b1:93:40:b5:92:4a:07:20:32:a6:09:62:a1:cf:0c:
                    5c:38:f8:d3:90:5d:75:19:38:9d:d7:fc:b9:fc:6e:
                    9b:9c:b6:6b:ef:3d:ed:17:be:90:cd:75:52:8a:de:
                    dc:0d:db:4f:04:21:24:c6:28:9a:5b:89:09:ee:06:
                    dd:37:cf:2b:e8:af:05:c1:8b:38:bb:67:28:8e:bd:
                    02:5c:a5:cf:14:e1:88:32:01:7d:a9:59:8e:fe:96:
                    56:ec:a3:76:dd:d8:4a:f7:c6:26:56:c3:d8:fa:e1:
                    85:e7:cc:b1:36:6a:d3:0a:a7:9f:ab:33:06:35:aa:
                    65:69:1f:9d:60:f7:9d:42:42:3b:c5:dc:db:f2:2f:
                    3b:fc:02:11:f3:17:62:f2:46:aa:3f:a4:6b:3d:3c:
                    28:67:a7:e2:6b:f3:01:e4:74:05:98:3c:e4:6c:13:
                    0e:e9:50:ba:bb:77:03:4a:be:47:97:c8:c2:05:5b:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:81:D9:58:81:4E:A2:EE:1D:4D:D0:46:38:73:EB:52:89:EA:EE
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131382e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:85:81:2f:b1:63:00:2f:95:60:38:bd:51:7e:aa:0e:09:36:
         a9:d2:f7:49:3c:1f:bc:e1:37:23:18:3e:3c:87:9d:72:8f:f7:
         40:35:d6:8c:56:dc:22:0a:93:ec:12:91:a1:af:4b:e2:0f:34:
         24:8b:f7:26:31:e7:f9:ba:c2:53:d6:1d:9c:ce:17:fc:24:49:
         24:dd:dd:0a:8b:b3:ac:9d:75:5c:93:07:bc:08:c0:83:84:35:
         30:bd:32:fc:af:c0:f9:b6:14:51:d6:f4:4c:8f:8d:5d:84:af:
         e3:81:6b:a4:50:08:e1:86:45:8f:ab:04:3e:16:ac:4d:23:7d:
         99:5a:54:17:4c:75:20:c8:51:18:56:8b:a1:04:5b:2e:f0:78:
         45:40:f8:82:94:4a:03:69:c8:48:8e:da:0c:12:ce:24:fb:83:
         7a:c6:53:ea:16:64:13:a2:41:ff:e1:f3:10:c3:2b:45:d9:bf:
         f1:97:a6:2b:cd:eb:11:8e:3e:16:e7:03:df:bb:e6:e7:06:49:
         57:39:94:21:41:1c:fb:5b:08:48:f8:12:07:f3:e0:73:47:34:
         07:7d:d8:d0:93:d5:ee:7b:f0:9b:eb:e8:a8:24:1f:15:ab:5c:
         51:69:43:81:fa:39:d5:ff:88:e8:48:f7:78:b2:f2:08:24:30:
         fd:b6:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:20 2024 by rpki-client on console-fra.rpki-client.org