Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131392e302f32342d3234203d3e20323636313831.roa
File:                     3138362e3233332e3131392e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          azHjOqBFZDna2DaMW6B0Fwc51n6pACzDE+j2VIc7gDQ=
Subject key identifier:   C1:C6:65:40:E6:76:A7:29:9C:43:74:D2:3C:7C:09:35:76:C3:DD:55
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       232997984474D51D02843A91CE8CFA9562471B47
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131392e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:26 +0000
ROA not before:           Fri 19 Jul 2024 16:54:26 +0000
ROA not after:            Fri 18 Jul 2025 16:59:26 +0000
asID:                     266181
IP address blocks:        186.233.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:29:97:98:44:74:d5:1d:02:84:3a:91:ce:8c:fa:95:62:47:1b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:26 2024 GMT
            Not After : Jul 18 16:59:26 2025 GMT
        Subject: CN=C1C66540E676A7299C4374D23C7C093576C3DD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:07:b4:d9:b4:15:39:a1:58:ec:62:39:fc:
                    99:f8:0e:a9:3c:9a:4e:f9:a7:91:c1:81:c3:6b:66:
                    48:ad:fa:91:70:9b:e2:7c:c2:e7:10:5b:07:65:35:
                    f7:2e:2d:1c:1c:2e:93:2c:14:d5:05:90:8d:81:96:
                    d1:e1:93:45:20:17:35:5d:aa:03:51:a8:e0:a3:4b:
                    06:ec:e1:4a:f2:de:b9:94:6b:a5:5a:76:94:4c:7e:
                    74:32:70:d7:58:26:f1:b5:91:90:85:c5:8a:e6:be:
                    99:61:d2:4d:dd:12:75:fc:fb:b7:fe:25:77:8d:52:
                    47:4f:ee:ac:90:58:25:02:05:13:89:78:c0:32:96:
                    24:31:bf:22:6d:ed:e8:1f:a4:30:e3:c3:aa:5b:86:
                    b3:f2:9a:81:de:62:7c:0c:d2:19:84:0f:99:1e:f8:
                    51:e3:c4:83:2e:56:a3:c5:8e:af:37:fb:16:e5:69:
                    2a:ed:17:f1:50:91:4a:bb:b3:35:9b:82:51:0e:6f:
                    9e:85:69:52:78:b8:07:df:a8:79:70:26:a9:ce:15:
                    4c:b2:93:d1:22:43:fb:4c:f9:0c:82:e7:d4:e4:26:
                    fd:ba:5a:4b:0f:c5:67:7d:f2:28:fb:5c:2a:42:1a:
                    f1:50:a3:96:f7:6d:78:bf:3f:8f:78:38:ca:60:58:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C6:65:40:E6:76:A7:29:9C:43:74:D2:3C:7C:09:35:76:C3:DD:55
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131392e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:26:2c:79:43:9d:10:11:3d:46:cd:7d:5a:23:11:09:a3:
         7e:60:b0:c3:0e:68:59:80:8e:7e:0a:1f:5b:19:f0:f1:d4:55:
         3c:e9:01:98:e4:ba:6f:90:68:81:5b:b4:fc:fd:8f:0e:61:92:
         d5:bd:5b:a2:6e:ae:9c:0b:a8:e7:19:79:95:20:33:6e:83:35:
         28:12:93:ad:a7:91:bd:ea:37:1e:d9:be:49:8b:91:cb:7c:75:
         77:f5:8b:5d:ed:53:61:71:60:42:99:27:62:69:7b:2d:bb:a6:
         a3:60:eb:da:1d:0c:4d:28:ad:1d:5f:44:e1:b2:c9:30:20:5b:
         86:17:f3:7b:f6:e2:b4:d2:6c:0c:36:38:97:46:f9:d1:33:60:
         ce:19:61:a3:fc:95:ec:92:77:52:9e:7a:4b:93:e5:75:c9:ce:
         9f:f2:f4:2f:a7:b5:f2:4f:20:13:f2:80:4f:41:0c:d0:96:0d:
         89:bb:c5:14:39:bd:60:09:58:20:94:09:65:43:33:31:51:9a:
         13:1f:13:2a:e6:0a:06:a9:72:23:a8:ed:d8:94:8d:29:8b:d0:
         c3:d2:38:8a:9c:69:31:4b:c0:01:0e:7e:30:d9:3a:0a:68:7b:
         46:4d:3e:f3:ad:7a:c7:71:70:2e:5d:c0:e5:0c:44:6d:88:66:
         a9:33:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org