Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131322e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          ifN69esARHlJYA8++R4puljPhY1xgaKntMCsc682h/8=
Subject key identifier:   CA:41:2A:A8:1E:7D:5F:33:F4:35:72:0D:9D:0C:FA:04:B3:1F:5B:24
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       55988F2B6B2273597F7A606ED118D1F88B1704B5
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:24 +0000
ROA not before:           Sun 11 Aug 2024 20:39:24 +0000
ROA not after:            Sun 10 Aug 2025 20:44:24 +0000
asID:                     262757
IP address blocks:        186.224.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:98:8f:2b:6b:22:73:59:7f:7a:60:6e:d1:18:d1:f8:8b:17:04:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:24 2024 GMT
            Not After : Aug 10 20:44:24 2025 GMT
        Subject: CN=CA412AA81E7D5F33F435720D9D0CFA04B31F5B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:00:69:f4:a2:7a:61:67:7c:9f:b0:52:a7:
                    28:d7:54:8c:81:32:68:62:57:08:08:7d:ff:1f:d9:
                    63:72:53:84:0d:0b:b0:57:13:d5:f3:24:da:39:d7:
                    0d:ff:c7:63:f7:dd:8a:40:e3:7b:ca:a8:49:89:b0:
                    ed:b5:53:3f:0c:02:ad:bc:af:92:fb:54:7b:c6:e0:
                    24:21:79:3c:5e:bd:71:e0:cf:28:f1:2d:61:2a:82:
                    15:ab:bc:a0:17:e2:f1:bf:cc:b1:09:1e:3d:ed:67:
                    60:01:46:77:18:94:5b:40:d3:81:65:45:9f:9e:63:
                    2f:4f:49:9a:04:69:d7:f4:d9:74:b5:f6:e7:a2:08:
                    15:1c:ac:40:0d:3f:3e:a4:89:cb:6d:65:73:8f:3f:
                    ae:d3:8a:eb:3f:50:d4:97:b8:de:e1:3f:1d:eb:95:
                    8d:a2:70:32:a4:12:7d:c3:48:c9:e2:09:07:2a:38:
                    4b:43:f2:4f:f3:4a:ee:c1:20:de:2b:11:47:a6:59:
                    d2:04:d2:b6:8c:49:fc:89:20:b8:de:b0:f9:13:ff:
                    95:31:a3:5f:3c:e3:31:ab:62:e1:ac:d4:0e:43:8b:
                    45:30:83:4f:ab:13:35:97:f8:39:10:bb:fe:63:00:
                    d6:be:13:87:9c:db:30:90:b5:f5:6b:00:e7:94:90:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:41:2A:A8:1E:7D:5F:33:F4:35:72:0D:9D:0C:FA:04:B3:1F:5B:24
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:63:61:83:7b:f4:bc:da:a8:11:89:d5:f4:45:5e:04:77:f7:
         89:8e:9c:f1:6b:5a:dd:d0:3c:0d:1c:0c:11:6a:38:f0:e7:3b:
         69:7c:8a:c4:7d:22:22:74:33:6a:d6:fb:7f:40:5a:b0:e5:52:
         04:1f:3c:63:87:b2:76:db:ac:11:23:eb:57:e6:a3:c5:bf:93:
         28:a9:23:fa:24:58:1c:c1:86:cb:98:f2:26:6f:e9:8a:4b:4c:
         47:fc:4c:d3:a3:c4:f0:7e:37:2d:d2:f8:18:4c:49:4e:23:e7:
         a8:64:27:fa:a4:29:83:1c:8c:e0:ed:96:38:52:1f:1d:0e:29:
         a2:2f:b1:51:4e:24:8d:6c:59:bf:7d:9c:d0:c2:5c:35:c4:c4:
         d3:fb:6a:bd:c5:a5:e4:10:09:f4:ba:98:51:63:e3:98:8b:d0:
         85:1c:7d:cf:79:0a:36:7f:42:6a:3b:ea:05:66:31:b1:43:cf:
         dc:c2:da:4e:2c:81:a9:5c:ea:c8:c2:f0:6f:fc:01:81:c0:c5:
         b9:29:ab:ff:3f:92:6d:68:76:7b:d8:ac:a7:e8:76:4b:86:63:
         5a:e0:9d:5a:4d:92:2c:ab:22:8a:4c:67:e9:58:88:17:1d:e3:
         95:c4:4e:c4:0e:d8:8f:04:1b:ac:6b:54:43:99:31:e7:8c:e8:
         b6:17:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org