Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa
File:                     3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa (raw, json)
Hash identifier:          ZLPLXU4Rs5IIqJe37uaQ+WzSwBBWoEhi5Mi3DTfM91o=
Subject key identifier:   CC:73:98:A9:62:E0:EA:A1:8F:96:1F:D6:E4:47:B2:B0:AD:4F:C1:3F
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       6ECA2687E59F45C9EF9D826264B23755E0C161D7
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:43 +0000
ROA not before:           Sun 11 Aug 2024 20:39:43 +0000
ROA not after:            Sun 10 Aug 2025 20:44:43 +0000
asID:                     262757
IP address blocks:        186.224.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ca:26:87:e5:9f:45:c9:ef:9d:82:62:64:b2:37:55:e0:c1:61:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:43 2024 GMT
            Not After : Aug 10 20:44:43 2025 GMT
        Subject: CN=CC7398A962E0EAA18F961FD6E447B2B0AD4FC13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:98:8b:a8:69:d5:88:96:54:62:b0:ea:ad:
                    97:64:25:f4:a5:7f:82:a4:be:3f:4a:e4:35:90:cf:
                    12:43:d6:e8:84:36:16:1c:f7:a7:d3:a7:dd:c5:85:
                    82:bc:e8:86:2f:da:65:2a:6a:7f:a3:f4:19:42:fd:
                    6a:65:f4:d6:f8:d1:af:bd:0a:65:cf:98:6d:c5:53:
                    eb:9d:bb:62:1b:c6:ab:54:c8:06:fe:8b:3a:7a:d7:
                    f5:79:4f:ba:8e:cd:87:38:a1:4d:a3:0c:6d:f4:c9:
                    b6:1c:06:6c:68:40:ac:99:33:51:de:3b:27:d4:1c:
                    4a:2d:ce:06:0a:b1:83:e5:ff:97:ba:47:40:e9:80:
                    43:34:12:5a:4f:d9:f4:1a:d5:c6:6a:59:5c:e0:7c:
                    65:90:cf:c8:44:97:00:b4:23:39:28:01:76:68:a6:
                    83:16:b1:76:90:11:35:1d:ac:e5:91:23:1e:c8:01:
                    5d:ba:57:6f:49:6f:20:03:e1:27:24:2b:3c:47:3d:
                    49:0d:c2:16:df:98:c3:aa:9d:2b:06:66:6a:63:ae:
                    5a:14:dc:36:cf:39:68:4a:e4:9c:e7:e5:0f:f7:3e:
                    22:03:21:b6:67:30:c4:50:e8:ce:f6:58:5f:3e:0e:
                    2f:4c:b8:43:47:da:b5:a3:34:6e:71:cd:e9:08:8f:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:98:A9:62:E0:EA:A1:8F:96:1F:D6:E4:47:B2:B0:AD:4F:C1:3F
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:cf:9e:34:69:cd:50:93:53:40:58:2e:44:59:7a:e6:ed:
         2b:d6:e3:9b:1b:34:75:5e:03:e8:2e:ee:5d:84:3d:34:84:83:
         0f:06:77:ac:8a:b4:4c:2b:21:0f:e1:dc:2b:24:b6:2a:7b:70:
         18:9f:09:d7:20:2d:0b:ef:58:32:11:50:b6:f8:8c:d4:20:1e:
         99:a6:ae:bd:ea:50:72:57:69:f4:f5:4f:56:e3:fd:c5:3a:a2:
         61:67:66:19:8c:7e:7f:50:28:74:cc:0f:0a:d8:2e:50:d0:ee:
         47:c1:a6:08:13:09:d5:0c:b0:c8:d1:ea:7c:b9:87:07:04:9e:
         54:32:87:10:4f:4c:c2:be:18:43:78:5b:05:62:c3:8d:04:48:
         e7:4c:f4:f0:5d:90:59:4c:69:04:a0:2c:a4:cb:80:f8:05:44:
         a4:6b:d6:bb:9d:37:5d:5d:cf:bc:21:dd:91:de:f0:aa:7b:2f:
         19:6c:c4:4f:86:06:3f:f5:cd:3f:e4:96:4c:bb:c3:67:3c:96:
         86:bc:8a:ae:aa:38:bc:1b:1d:fb:15:af:b9:f2:de:86:99:e8:
         62:d4:03:ff:66:37:7b:cb:f5:c7:85:e5:71:7b:76:7e:21:a6:
         cf:51:26:9d:a4:6b:71:37:ba:93:3f:24:a3:e5:7e:5b:1d:96:
         88:b4:7e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org