Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          mRkkZx28Vpj6VutlsGybFDPcqHNI9g+6kwvoRlcLRE0=
Subject key identifier:   62:82:51:3A:0A:A9:66:1D:5B:39:9E:9A:95:9D:41:1F:D1:6F:A4:4C
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       3D04360694660669520467B035A74A42D74DE19B
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:42:35 +0000
ROA not before:           Sun 11 Aug 2024 20:37:35 +0000
ROA not after:            Sun 10 Aug 2025 20:42:35 +0000
asID:                     262757
IP address blocks:        186.224.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:04:36:06:94:66:06:69:52:04:67:b0:35:a7:4a:42:d7:4d:e1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:37:35 2024 GMT
            Not After : Aug 10 20:42:35 2025 GMT
        Subject: CN=6282513A0AA9661D5B399E9A959D411FD16FA44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:0d:66:89:53:9d:75:b1:18:7e:08:e9:73:
                    41:1c:49:7b:8f:96:85:35:d3:ae:4f:3c:cc:8d:47:
                    aa:d9:8c:0c:1a:a5:b7:24:eb:9e:1a:95:db:43:a8:
                    62:eb:42:af:b9:9b:85:54:6b:db:83:14:f2:bb:b8:
                    75:0e:98:dd:a9:4e:8d:bf:e1:58:de:b6:5e:64:a0:
                    eb:98:8f:39:30:41:dc:7d:66:71:3a:82:76:3e:6d:
                    7f:64:a3:80:1a:ee:be:03:d2:18:7e:db:14:69:5e:
                    00:91:8c:7c:ca:0e:73:22:18:26:73:35:ee:72:29:
                    44:25:1d:b7:98:63:ed:6f:43:e1:ec:a2:b0:b8:d1:
                    ed:b7:e9:f0:f5:89:f5:3b:22:df:72:16:e3:82:6a:
                    53:6d:b1:1c:1b:ee:5c:1b:fa:1a:43:95:38:f1:20:
                    69:a9:64:dd:27:1f:7f:46:8d:c4:cb:9b:11:c7:06:
                    a4:e2:bb:80:4e:41:c9:6c:0d:7b:b6:b4:f1:c7:b5:
                    2e:96:93:71:a6:61:b0:a1:88:a3:1f:6d:85:33:06:
                    61:92:55:62:91:35:cf:3d:43:c2:92:3a:50:0f:d2:
                    50:50:ce:c1:08:b8:47:60:a4:48:fb:9e:40:e8:5d:
                    42:32:12:f7:34:bc:58:3d:48:e5:8f:28:f8:b3:35:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:82:51:3A:0A:A9:66:1D:5B:39:9E:9A:95:9D:41:1F:D1:6F:A4:4C
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a4:6a:1e:a1:08:b5:49:fc:a1:4c:bb:e0:4c:b2:7b:1b:64:
         b9:9b:5c:1d:32:3a:cb:87:7b:99:11:64:93:3b:6d:7c:29:53:
         80:75:96:64:0c:05:9a:98:73:fd:88:7d:71:d0:c7:ee:ae:15:
         99:b8:3c:b9:ba:f7:73:02:0c:34:73:2f:4e:ff:74:67:f6:3f:
         1e:4b:6d:8a:04:f9:72:dd:b2:93:9f:cc:30:70:40:90:73:af:
         6c:dd:52:a9:b8:91:51:9e:93:74:0b:d0:b0:67:c1:69:af:ff:
         3f:86:cb:19:1d:db:37:2b:57:2e:be:92:17:9a:29:e2:f6:3c:
         f9:1c:92:57:eb:84:4b:41:d6:5e:b0:63:b2:74:b9:c3:ff:7f:
         38:0c:22:a3:8c:7a:2c:05:07:00:ba:ea:cd:6b:65:3c:2c:58:
         5b:43:86:07:1e:e7:1e:39:1f:91:23:42:0c:9b:04:06:42:77:
         58:e9:03:cd:24:5a:49:38:db:bb:90:06:00:8d:82:27:53:7f:
         15:a0:20:08:aa:b5:f6:e1:b9:f7:cf:58:c9:cb:a0:b4:03:a3:
         ae:89:65:07:5c:bc:ae:63:45:8f:b4:a3:7c:29:8f:05:ac:4e:
         5f:ca:e8:96:90:5f:c7:51:75:25:82:97:50:58:9b:4f:13:19:
         e4:f1:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org