Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32312d3231203d3e20323632373537.roa
File:                     3138362e3232342e3131322e302f32312d3231203d3e20323632373537.roa (raw, json)
Hash identifier:          cVecfS2K8P+/aLmzywjOQQS9YZvNx1kxWiMCJ3zZ3Zs=
Subject key identifier:   33:F9:4A:7D:B9:CF:EF:1E:F2:99:3A:81:D9:F1:E9:24:B1:9D:BE:4D
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       6749ABFA237D0BA9DA492BD9B977402965E70E72
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32312d3231203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:38 +0000
ROA not before:           Sun 11 Aug 2024 20:39:38 +0000
ROA not after:            Sun 10 Aug 2025 20:44:38 +0000
asID:                     262757
IP address blocks:        186.224.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:49:ab:fa:23:7d:0b:a9:da:49:2b:d9:b9:77:40:29:65:e7:0e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:38 2024 GMT
            Not After : Aug 10 20:44:38 2025 GMT
        Subject: CN=33F94A7DB9CFEF1EF2993A81D9F1E924B19DBE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:b1:c8:52:f4:0a:fa:c1:aa:a5:2d:92:87:
                    d7:91:a1:90:e3:33:3d:a9:e1:51:f9:8b:f3:c2:ea:
                    b3:74:eb:5e:eb:c4:ef:9c:40:8b:72:29:8e:e4:37:
                    8b:16:94:c8:3e:09:40:f4:13:d9:ba:f3:e6:68:54:
                    1c:c8:b9:98:db:e3:18:5c:4f:46:65:92:97:c3:98:
                    28:7a:95:2a:57:2b:45:9f:46:bd:a2:10:ff:90:7e:
                    77:4e:45:82:8f:24:0c:06:b0:3e:de:56:f5:cb:31:
                    1e:52:b1:95:5b:cf:f0:30:77:c6:03:e1:32:41:38:
                    74:31:49:f5:52:a5:fc:a4:d8:18:8d:bf:f5:ec:97:
                    6c:0c:61:ad:6e:76:62:38:d3:1e:e9:40:ae:ce:ce:
                    d3:a7:ed:02:d7:79:69:d1:55:4c:ca:21:1f:61:9e:
                    00:f9:4a:fe:47:05:4d:9a:74:b3:ab:f8:2b:41:f7:
                    ee:9d:26:27:ce:c3:86:72:14:a2:75:81:e3:b3:a7:
                    b8:10:00:9d:6a:ac:6b:ec:70:b7:cd:b4:9b:b4:1d:
                    c1:55:20:ff:c4:4e:ae:8e:3a:68:60:fb:d2:32:c9:
                    4e:db:54:d9:15:b8:10:a6:b3:11:81:e2:e2:02:4a:
                    f2:50:f7:a8:87:ea:e9:a3:0c:35:d6:27:0f:42:89:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F9:4A:7D:B9:CF:EF:1E:F2:99:3A:81:D9:F1:E9:24:B1:9D:BE:4D
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32312d3231203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:a3:63:f1:5a:53:80:49:8c:27:cc:b3:15:57:71:d3:da:1b:
         18:52:a7:41:87:d2:85:79:51:a5:16:2c:b2:a3:e6:01:a8:d1:
         7c:9e:62:65:90:44:2a:9d:ab:54:52:43:f5:15:d6:f9:d6:6d:
         6b:19:dc:8e:36:6f:47:60:b3:39:39:31:7f:72:c2:ba:bc:93:
         75:97:e1:39:5b:f7:41:3a:8b:8b:7c:59:aa:5f:05:cd:7d:9e:
         5d:25:f9:ed:a3:88:f6:76:1f:9d:e1:fd:21:33:0f:89:a3:9d:
         bd:28:cf:01:2e:1c:3b:8d:e6:ee:4e:bc:8f:9f:68:54:b8:ab:
         c6:eb:db:28:83:e2:97:f5:05:d4:b9:40:dd:d7:0b:f9:6e:dd:
         96:8e:08:93:0a:93:44:86:59:73:92:c9:0f:00:e8:86:3f:01:
         75:be:a4:50:1c:dc:95:4b:67:14:5d:2f:82:6c:92:f3:5c:a3:
         6a:6e:b5:6b:f7:1b:6d:07:e5:04:40:85:4e:69:8e:00:de:78:
         c0:d1:e7:5d:b7:06:bc:ed:29:76:11:03:f9:fc:9d:8e:db:a3:
         8c:56:ed:39:45:73:24:78:c1:b8:1f:a0:bc:a6:3e:2b:f4:8b:
         e5:a9:31:da:d4:74:2a:26:8b:7c:88:95:bd:e4:2c:51:24:61:
         7e:33:6e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org