Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131302e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          GLcdY9Mg+GFVYi9W+pMbHrm3eJIW6ZKv7XihqJJTRUk=
Subject key identifier:   CD:53:4E:1D:42:34:50:60:8F:B0:6C:8D:C4:D4:02:B5:07:C8:6B:8E
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       08D8F52A2E80137ED3D5673B7380844D4A0B3E6B
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:52 +0000
ROA not before:           Sun 11 Aug 2024 20:39:52 +0000
ROA not after:            Sun 10 Aug 2025 20:44:52 +0000
asID:                     262757
IP address blocks:        186.224.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:f5:2a:2e:80:13:7e:d3:d5:67:3b:73:80:84:4d:4a:0b:3e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:52 2024 GMT
            Not After : Aug 10 20:44:52 2025 GMT
        Subject: CN=CD534E1D423450608FB06C8DC4D402B507C86B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:01:91:84:e6:2a:2d:0d:b3:87:52:b5:aa:
                    fa:f2:03:09:c0:a3:cc:6b:f7:74:e4:3f:bd:9d:1e:
                    43:3e:50:1f:06:4b:12:51:30:11:b8:95:62:0d:de:
                    60:54:99:f7:79:49:97:89:74:04:54:6b:e5:26:38:
                    db:97:d7:6a:fe:ef:fa:22:e0:ce:94:c2:8b:1c:e0:
                    c7:a5:c5:e3:31:7f:f2:1a:2d:42:1e:11:f1:86:9f:
                    8c:04:ed:6c:d3:c8:71:95:70:93:29:41:68:d4:d6:
                    25:f5:e5:5c:78:d4:a8:e4:39:f0:52:b3:78:c7:59:
                    61:d8:d6:d8:05:bd:35:7e:04:c4:bc:94:50:01:55:
                    42:9d:95:42:40:40:66:ed:36:92:8e:e0:b7:17:cc:
                    6c:1a:95:34:c0:09:68:90:81:b7:21:69:4c:a8:86:
                    30:4f:1b:6e:e6:78:7a:02:08:6d:fa:a9:d8:43:68:
                    2a:1f:c6:95:b3:de:eb:f0:1c:35:ee:76:27:e8:12:
                    94:bd:d7:4c:53:ad:49:87:46:71:cd:c4:15:f5:a3:
                    06:a0:37:a2:09:6a:76:7a:1b:47:4b:be:54:66:f7:
                    84:c4:c5:10:ac:06:a4:12:1b:8d:3d:1c:e0:e3:89:
                    b0:2c:88:02:38:95:f2:14:71:11:60:ba:b5:4e:a8:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:53:4E:1D:42:34:50:60:8F:B0:6C:8D:C4:D4:02:B5:07:C8:6B:8E
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1f:a3:68:b6:20:f0:a0:02:61:3f:e4:a8:93:e2:71:33:a1:
         7b:db:ac:9a:fb:ee:84:36:6b:6e:36:8d:b5:c2:00:3a:c6:65:
         a3:3e:38:fb:78:2d:96:0b:ab:c6:7f:e0:72:1b:80:c5:02:53:
         3b:c8:3c:34:29:f1:b6:95:fc:eb:40:30:cf:d4:db:bb:81:83:
         f6:27:20:bb:f4:37:42:d0:0a:5e:67:df:1f:fe:c6:a3:dc:0e:
         6e:7c:d9:22:d5:f6:a3:5c:ac:81:78:ef:5c:3b:e5:3e:76:d6:
         f1:a8:9b:9a:f4:05:94:32:59:ec:44:a8:97:bb:64:b3:80:77:
         49:d6:17:3d:99:bf:0f:b1:2f:ce:d2:2d:33:8d:ba:78:6d:10:
         ec:ca:aa:1d:42:91:26:10:43:c3:79:59:4c:45:70:cd:62:07:
         b8:bc:88:03:4e:11:1e:9c:16:5e:62:39:00:4a:46:18:15:6f:
         84:5a:bf:72:97:ee:ea:3f:81:08:41:b7:97:02:7d:53:7f:cd:
         db:74:b3:e2:62:7e:fb:a6:43:23:c2:fb:4a:ba:77:7b:ef:8b:
         4c:2e:32:2e:a0:49:de:ab:6d:5a:73:2b:5a:ed:93:9c:44:1d:
         d4:78:b4:4c:f3:9f:56:a1:f7:81:82:1b:ce:19:73:78:dc:ff:
         ea:02:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org