Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          xNoG8uEigM1y1XQnx6ru+Qzl2B9fqtBMSoeFWC58BDA=
Subject key identifier:   72:7E:D1:2B:02:E8:B0:6E:D3:72:EF:88:35:09:23:54:AB:3F:CD:3D
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       6815038C26C93AAD51E8111C07733EB383B53B34
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:30 +0000
ROA not before:           Sun 11 Aug 2024 20:38:30 +0000
ROA not after:            Sun 10 Aug 2025 20:43:30 +0000
asID:                     262757
IP address blocks:        186.224.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:15:03:8c:26:c9:3a:ad:51:e8:11:1c:07:73:3e:b3:83:b5:3b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:30 2024 GMT
            Not After : Aug 10 20:43:30 2025 GMT
        Subject: CN=727ED12B02E8B06ED372EF8835092354AB3FCD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:5a:45:fa:62:0b:bb:ec:22:13:4a:63:6a:
                    54:e4:1c:1a:b6:9d:7b:2e:64:a8:3b:61:aa:6f:9f:
                    76:45:bd:ee:d6:79:06:18:8a:97:3b:3a:ab:2b:e8:
                    88:eb:4a:9a:52:a8:89:70:34:14:0a:9d:f1:96:a7:
                    d6:bf:52:45:ae:57:d7:b1:ec:94:d2:7c:72:7a:d9:
                    ca:e9:a8:b5:18:c7:09:11:6f:dd:ef:f4:42:c3:45:
                    7e:f3:7e:f0:28:b7:db:57:8f:31:d7:47:5e:66:0b:
                    5c:95:b2:5b:0b:52:f2:23:5c:7d:b0:95:3f:b0:c7:
                    c5:68:20:d0:26:b4:96:53:15:95:4b:25:91:2f:ec:
                    83:5e:1f:b3:e6:18:23:88:5f:9c:b7:76:c6:35:ff:
                    b9:c5:08:f0:f5:b6:b8:79:5e:ed:17:3b:1a:29:a7:
                    7a:94:59:27:c8:fa:74:b8:8a:6d:20:aa:d2:e9:7f:
                    71:be:8d:77:82:aa:01:d3:a5:22:68:2b:53:8f:eb:
                    d1:6e:1b:ab:f9:25:c0:a3:d3:52:d7:4b:f5:56:11:
                    cf:42:62:fa:e4:92:26:25:03:e2:66:ee:67:33:07:
                    88:63:b6:95:a8:f0:d9:86:8f:79:60:b3:85:9e:08:
                    11:b9:f2:12:4e:d7:43:5f:2f:0a:a3:62:b1:8a:a8:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:D1:2B:02:E8:B0:6E:D3:72:EF:88:35:09:23:54:AB:3F:CD:3D
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:a1:da:5d:72:60:89:96:61:08:8b:c5:63:97:b8:31:fb:
         1a:2a:9a:3d:1d:00:f4:7a:b7:b4:99:2a:bd:24:bb:be:b5:7e:
         9d:ff:9c:6a:a2:53:73:7e:a8:f0:06:45:f5:e2:26:5b:ac:6d:
         2a:10:3a:d1:ac:1f:71:4c:a0:c1:a0:b2:e5:ac:b4:50:38:29:
         c3:15:77:bc:c2:6f:0c:cd:94:34:b6:15:d6:b8:1e:ac:1d:9e:
         3c:07:4f:5f:08:aa:8d:44:4b:b1:b0:bb:8f:f2:8e:c9:f4:0b:
         49:b3:b2:f4:5c:9b:45:41:b0:5a:c9:3e:80:84:00:78:97:6d:
         87:b0:2e:94:f4:2f:67:de:cc:57:f8:8a:a3:11:9d:50:f9:d9:
         43:64:68:05:29:c6:3c:42:01:a3:a3:e5:94:7d:db:71:20:b7:
         b5:fa:f7:2f:b4:38:59:7c:cc:20:23:12:d6:05:46:f0:46:dc:
         3c:e3:87:c9:9f:53:49:c1:cf:b3:b7:c1:89:3d:23:1a:98:99:
         0b:00:91:e4:27:fe:45:79:2b:77:3d:42:32:73:60:4b:bc:3d:
         09:d9:86:07:da:96:24:82:78:ff:67:ec:2e:b0:95:88:a6:61:
         3d:a3:7e:21:5f:81:f5:06:7e:aa:b1:24:83:44:96:56:8b:e5:
         26:fe:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:59:31 2024 by rpki-client on console-ams.rpki-client.org