Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e3131322e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          IicgvokgYyebLed0Kt0NWg/HkhVKCY/pgN4IMG33m9g=
Subject key identifier:   D0:91:A0:6A:04:94:BD:FC:05:54:B8:5A:20:BB:AE:CB:94:4B:63:8A
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       064FB48C8EED11F13C3638C182705BE8DE18B89C
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32322d3232203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:35 +0000
ROA not before:           Sun 11 Aug 2024 20:39:35 +0000
ROA not after:            Sun 10 Aug 2025 20:44:35 +0000
asID:                     262757
IP address blocks:        186.224.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4f:b4:8c:8e:ed:11:f1:3c:36:38:c1:82:70:5b:e8:de:18:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:35 2024 GMT
            Not After : Aug 10 20:44:35 2025 GMT
        Subject: CN=D091A06A0494BDFC0554B85A20BBAECB944B638A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:a6:2f:d3:61:ac:ae:0b:55:16:ba:b9:7c:
                    9b:4d:6d:76:39:62:8b:f5:e5:ce:a0:ce:a5:a4:fd:
                    17:82:20:b1:ff:0d:f6:db:74:b7:98:fb:99:d2:86:
                    6e:17:c1:88:fd:ae:a4:a3:db:6b:44:80:9a:37:6a:
                    bb:5c:e8:f0:94:bb:59:59:89:8d:b9:17:5d:c2:08:
                    64:aa:6a:b2:ca:fb:23:6b:6e:43:92:94:2e:58:07:
                    a8:66:0d:39:1e:5b:93:1a:f1:aa:6b:e0:fe:f5:3e:
                    3c:22:d0:7f:e8:6f:1e:1b:b4:8b:7d:8d:96:ec:0e:
                    fb:4b:6c:95:04:77:00:ef:56:54:f2:ce:e0:43:0b:
                    75:c8:0c:80:2c:0c:de:eb:91:e8:53:ee:10:16:de:
                    b5:6e:d8:57:5f:ea:f0:e1:c6:61:06:41:6e:0e:44:
                    ad:84:33:4d:ce:9b:f6:ac:63:c7:b4:a3:3c:c3:bc:
                    c7:28:f4:a0:cd:52:e8:05:7e:16:c1:21:31:bd:30:
                    2a:24:85:ac:25:6f:75:15:a9:42:1e:0a:db:3c:01:
                    24:81:33:7f:60:04:f4:e7:41:28:62:e1:7c:1d:ca:
                    6e:14:7a:17:36:4e:ee:e3:85:ec:9b:da:c5:76:9f:
                    e3:aa:78:85:54:7d:85:a1:af:4d:15:de:a8:ff:bc:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:91:A0:6A:04:94:BD:FC:05:54:B8:5A:20:BB:AE:CB:94:4B:63:8A
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:a4:63:18:44:e2:1a:d4:19:59:10:42:f5:c8:05:54:c2:c0:
         94:58:97:be:93:dc:7a:23:38:21:a5:b2:00:e1:b0:10:ac:08:
         d2:81:e4:96:1e:bd:05:fc:f4:9e:60:ae:c9:d6:79:a2:48:02:
         76:07:7d:b9:63:99:65:20:f5:86:7c:92:8d:40:d7:40:61:57:
         68:99:b8:85:5c:80:1a:65:47:ba:88:9a:c7:5c:6e:09:5a:4a:
         04:44:9f:44:e2:7a:e0:05:93:ce:e4:5b:e6:01:ad:30:f2:4e:
         82:9b:19:df:fa:14:56:43:cd:47:ed:fb:90:d3:86:e9:09:d1:
         09:6e:4c:ba:a8:42:32:a6:3e:3b:a2:1f:17:dd:ae:30:93:ff:
         11:aa:5a:4a:8d:63:5d:b0:c4:06:27:39:00:ba:61:95:3b:f3:
         06:28:83:f0:a8:64:8a:11:bf:24:b9:1a:89:84:f9:b4:58:50:
         aa:43:3c:5a:fa:d6:5a:e3:bf:a8:f2:2b:27:5f:12:f0:ea:61:
         e6:9c:fe:b0:21:ce:bd:da:17:c5:c9:0c:12:55:85:16:cd:0f:
         4a:fa:54:28:07:ad:55:5c:eb:3f:90:f2:71:0e:ba:e3:bb:68:
         a2:56:b7:86:75:98:03:eb:5d:6c:a3:8f:34:cc:34:3e:73:b3:
         b3:58:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org