Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/3138362e32362e39362e302f32322d3234203d3e20323730393239.roa
File:                     3138362e32362e39362e302f32322d3234203d3e20323730393239.roa (raw, json)
Hash identifier:          lIZ3vEkHifNe2mujTdcux6l3uWAKzLc7FooLk+IBYhE=
Subject key identifier:   83:35:0F:49:BB:78:C8:D3:BB:CA:F2:EB:5C:B2:1F:0C:83:32:E1:6D
Certificate issuer:       /CN=D207CF8D6BDFDFC2B678E998F47F0745A6013ABD
Certificate serial:       04E5CED7AB388508B909D0BCDEA921D9F3266BD7
Authority key identifier: D2:07:CF:8D:6B:DF:DF:C2:B6:78:E9:98:F4:7F:07:45:A6:01:3A:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/3138362e32362e39362e302f32322d3234203d3e20323730393239.roa
Signing time:             Wed 25 Sep 2024 21:19:01 +0000
ROA not before:           Wed 25 Sep 2024 21:14:01 +0000
ROA not after:            Wed 24 Sep 2025 21:19:01 +0000
asID:                     270929
IP address blocks:        186.26.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.crl
                          rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e5:ce:d7:ab:38:85:08:b9:09:d0:bc:de:a9:21:d9:f3:26:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D207CF8D6BDFDFC2B678E998F47F0745A6013ABD
        Validity
            Not Before: Sep 25 21:14:01 2024 GMT
            Not After : Sep 24 21:19:01 2025 GMT
        Subject: CN=83350F49BB78C8D3BBCAF2EB5CB21F0C8332E16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:7b:55:ae:1e:ed:f7:da:4a:fb:36:a5:d8:
                    f1:52:b8:d3:a8:ea:31:7b:33:0e:8e:d1:af:e7:7c:
                    4c:b4:bd:11:18:f0:b6:ac:58:3f:83:83:9b:24:f3:
                    e2:f5:be:47:42:65:b8:4b:31:e1:82:91:6e:77:1f:
                    ea:2e:40:46:15:9b:c6:3d:74:3d:83:26:ae:ec:82:
                    ac:6f:e4:14:f4:af:f6:d8:da:5a:20:e2:73:5f:24:
                    72:11:8f:55:a9:94:d7:0b:c0:2e:dc:fd:f8:b2:9c:
                    fb:62:95:5f:65:cf:9c:65:6a:e0:e9:2e:ce:7c:ce:
                    5f:f5:d8:df:08:63:99:67:85:5e:98:7b:81:e7:b5:
                    ba:05:c1:4a:3e:55:20:00:8c:c0:cf:23:2b:16:f0:
                    98:4e:e8:da:06:9d:ff:16:ba:84:be:36:08:54:66:
                    9b:89:71:18:e5:af:31:5a:a4:eb:d6:ae:7b:ce:4d:
                    d8:a1:ac:f7:98:dc:42:0b:e5:e4:55:cb:f7:b4:6f:
                    a3:d2:cf:d6:a7:15:cb:46:2e:e4:10:d4:0d:65:5b:
                    b3:58:dc:04:3a:f5:a2:fb:95:41:76:b2:39:3d:7f:
                    4f:bf:fc:77:09:02:26:74:23:19:e1:b4:30:f7:34:
                    4b:49:7b:af:1d:cc:d7:8e:36:b9:24:33:63:43:1f:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:35:0F:49:BB:78:C8:D3:BB:CA:F2:EB:5C:B2:1F:0C:83:32:E1:6D
            X509v3 Authority Key Identifier:
                keyid:D2:07:CF:8D:6B:DF:DF:C2:B6:78:E9:98:F4:7F:07:45:A6:01:3A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D207CF8D6BDFDFC2B678E998F47F0745A6013ABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/3138362e32362e39362e302f32322d3234203d3e20323730393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:12:ed:cf:6e:d1:3e:a5:59:52:c2:11:b7:b1:80:1c:a8:
         3e:7a:3a:68:c8:69:97:d9:50:44:6e:8c:2f:ab:23:29:2a:a7:
         6a:e6:0d:c8:22:9b:42:4b:68:79:e0:62:18:ee:b8:c0:f5:df:
         9b:6b:76:68:18:a2:24:0c:97:6a:ff:db:cf:7a:ef:69:90:27:
         99:e3:a9:5a:df:88:84:33:90:3d:cb:61:2d:14:c6:2d:79:2c:
         a9:65:59:85:24:87:b8:c1:81:d7:4b:6e:32:c0:27:3b:1c:25:
         ae:fe:85:e1:ed:23:13:d0:d8:2c:46:47:f9:76:81:a5:17:4c:
         db:b4:40:1f:7f:81:33:ef:20:a8:54:bd:be:3a:1d:32:4d:28:
         53:9f:39:d4:f9:6d:e8:95:cd:65:09:5d:0a:9b:0f:2d:18:de:
         34:d8:30:c1:e0:75:e2:64:e2:83:e2:0c:74:7c:b1:65:2a:ee:
         bb:5b:2b:3c:aa:2d:e1:86:9d:78:01:d3:e4:db:cc:bc:5b:a4:
         4b:a3:91:93:c9:a0:55:40:af:90:6e:04:ae:c7:8c:7e:fb:80:
         3d:77:ab:e1:4e:8a:4b:57:67:2e:ca:3d:bc:be:44:4e:77:10:
         dd:aa:da:17:61:bd:8d:7a:1a:6a:7b:3b:d4:c7:7a:48:d8:63:
         e6:3f:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org