Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          SavaP062hOrhApueVXAXCaNZl4ASZslSJbpK9RSVsMk=
Subject key identifier:   52:A1:31:9A:18:AC:5C:9B:61:41:AA:6A:2D:84:2A:16:C1:96:D5:A2
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       7332713BCBF1A258557B24FBA9A5E3C9C0CD8DAD
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:48 +0000
ROA not before:           Sun 11 Aug 2024 20:39:48 +0000
ROA not after:            Sun 10 Aug 2025 20:44:48 +0000
asID:                     262757
IP address blocks:        186.224.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:32:71:3b:cb:f1:a2:58:55:7b:24:fb:a9:a5:e3:c9:c0:cd:8d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:48 2024 GMT
            Not After : Aug 10 20:44:48 2025 GMT
        Subject: CN=52A1319A18AC5C9B6141AA6A2D842A16C196D5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:97:29:13:25:a8:b1:76:47:d8:b8:05:df:
                    27:e8:d1:9c:f6:c2:d1:12:6c:09:10:77:1a:e3:57:
                    5c:92:19:0e:d3:4c:09:64:0e:40:5f:82:87:7d:43:
                    d4:76:1a:e1:6b:c4:71:1e:ba:28:f9:7a:00:80:8b:
                    e4:c6:44:8e:b2:15:6c:04:b0:be:04:cf:33:52:84:
                    f1:09:45:b7:64:2c:77:0f:8e:27:c2:ee:b1:be:15:
                    34:1a:80:3f:17:85:bc:25:d8:a4:be:76:f0:90:e9:
                    7d:be:26:66:2b:c3:46:16:24:92:3d:7f:02:68:42:
                    12:80:ad:4c:88:4a:23:38:0f:41:ca:c8:6e:50:49:
                    02:c0:fc:39:62:c4:53:93:b3:a4:bb:9a:35:c5:1e:
                    8b:b0:fb:d8:b6:e8:d9:ed:be:89:58:14:c8:3d:e3:
                    c1:8e:f1:71:41:7c:4f:07:9a:da:77:53:58:04:40:
                    df:4e:79:c0:1c:63:6a:64:18:81:0e:77:cc:dd:83:
                    0c:7b:97:86:d6:b6:a2:68:5f:9c:e4:40:d8:de:b1:
                    09:89:b4:13:25:dc:9d:15:4d:89:5d:72:1d:d8:ed:
                    c8:f6:1b:13:a9:48:a8:0b:aa:e5:30:91:e8:50:8b:
                    2c:8e:7f:64:2e:3b:66:32:59:43:3c:73:dc:13:9c:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A1:31:9A:18:AC:5C:9B:61:41:AA:6A:2D:84:2A:16:C1:96:D5:A2
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:86:fe:72:c5:e1:49:4a:c0:48:68:78:2f:20:dc:49:ce:44:
         d6:60:ce:3b:bb:9c:e3:c4:b5:7f:09:50:ed:dc:28:15:64:c6:
         4a:b0:11:cb:04:9d:a1:41:ec:66:5a:2b:e7:57:98:17:95:a8:
         0f:d8:a5:b5:45:53:3f:38:0c:2e:ae:1f:d8:a3:a4:5a:4d:fd:
         e8:ce:5b:d6:e7:08:21:ed:3f:9f:72:f0:5e:bd:af:72:d5:16:
         4c:ed:65:27:0c:85:a8:c0:e1:6a:4c:1c:6b:02:27:33:10:65:
         55:37:71:78:86:78:fb:67:f3:42:14:ff:97:ac:45:ce:12:17:
         71:d6:2f:7a:b3:a4:c1:b6:dc:dd:06:33:c1:c4:de:ea:a7:97:
         86:83:c2:50:08:5d:8b:10:c4:bd:c7:fb:68:f8:7c:42:a3:c9:
         27:e3:f8:5e:75:dd:65:90:c7:fe:58:dd:0a:e4:63:a0:ba:2f:
         1e:5f:e9:f4:0d:0e:f0:c7:84:b5:c5:f3:c3:ef:d1:c3:f0:95:
         ba:ba:f1:d8:53:a6:86:07:d4:f9:8e:d1:e0:94:fc:5e:f4:9e:
         ec:b3:ef:0a:0e:ef:6d:d3:62:7b:7b:63:a8:26:d2:3a:16:02:
         1b:38:28:71:08:1a:fc:2c:8a:45:fa:2b:82:d8:ce:95:6e:92:
         5b:3a:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org