Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          wqjpz3/Xj01biYuIg6HQZjP+GgZwEMQeNDG64YCt0yE=
Subject key identifier:   B2:F7:5B:8E:B0:99:5E:78:E3:AF:A2:67:B6:12:86:D7:1F:36:4C:F4
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       1A03CF13DFDE73B93E3E84C1A90D1884ABFBC313
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:21 +0000
ROA not before:           Sun 11 Aug 2024 20:39:21 +0000
ROA not after:            Sun 10 Aug 2025 20:44:21 +0000
asID:                     262757
IP address blocks:        186.224.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:03:cf:13:df:de:73:b9:3e:3e:84:c1:a9:0d:18:84:ab:fb:c3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:21 2024 GMT
            Not After : Aug 10 20:44:21 2025 GMT
        Subject: CN=B2F75B8EB0995E78E3AFA267B61286D71F364CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:c0:85:0f:05:5c:39:1e:54:c0:7a:8b:10:
                    bc:35:04:06:91:cd:d0:fc:f7:a3:a5:83:33:38:ae:
                    85:41:3a:31:a5:4a:9d:3f:9b:9b:b7:d5:17:f6:fd:
                    ec:df:85:e6:13:d3:a5:62:23:5f:2d:13:a8:59:f2:
                    a5:a3:07:ba:51:48:08:ad:d7:fd:b7:63:2e:78:c2:
                    2e:70:63:fc:ed:74:69:dd:fc:d7:21:18:90:e1:c4:
                    ce:29:da:e9:9a:a6:12:19:21:97:54:9c:f3:0c:70:
                    e7:76:82:d2:aa:a9:f4:69:e5:26:d2:7b:b8:16:b9:
                    8d:19:49:fe:6c:b9:e4:ac:1b:11:eb:c5:5e:a9:79:
                    6a:b3:5b:81:94:e5:b9:57:d3:cb:6f:b5:ce:d2:07:
                    78:09:64:10:35:1f:c9:a3:c6:5b:60:27:f8:c7:64:
                    ea:3c:3c:ae:e2:60:fc:e8:b1:d7:2e:85:50:c7:56:
                    b4:17:57:11:3e:c6:95:64:6a:6f:dc:6e:25:20:fb:
                    e1:90:fe:92:dd:67:40:53:6b:47:3a:47:eb:5c:6e:
                    2b:34:4f:4a:c6:4f:87:45:77:55:53:af:40:97:d3:
                    05:dc:91:24:c6:a6:56:fe:85:2d:8d:dd:75:c8:da:
                    4e:89:73:71:96:fc:61:e5:3e:fe:2f:51:0a:02:ef:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:5B:8E:B0:99:5E:78:E3:AF:A2:67:B6:12:86:D7:1F:36:4C:F4
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:5c:1d:eb:3a:f7:fb:17:61:85:43:17:cf:44:cc:b3:c2:e3:
         81:e7:2b:bf:49:4f:d2:0a:9f:7d:7d:b1:47:b2:9e:c6:f9:21:
         2f:96:39:5f:21:43:d9:9b:88:45:77:69:bf:81:d1:91:a3:0f:
         d0:11:01:02:d8:59:b7:7d:ed:fe:13:f9:a6:49:ab:3d:da:6a:
         40:f0:0f:fa:d6:c1:fa:b6:93:08:0a:04:ca:40:79:f7:10:ca:
         7e:39:b2:c7:c4:bd:2a:72:08:5c:70:dd:a9:0e:37:32:11:36:
         33:b3:15:3d:f2:bb:fb:3b:1c:85:86:3f:c4:6d:a9:c6:ce:15:
         d3:e4:cf:54:c1:5d:f1:65:1c:1e:86:6b:0d:35:f5:f5:34:c7:
         e5:b4:bb:55:20:8b:a5:66:f6:a4:23:a5:ac:df:20:a6:46:ca:
         f8:86:50:8d:3b:00:cf:2e:2b:c2:d4:63:d4:bd:36:88:9f:18:
         e7:7e:33:3f:1b:af:69:7a:c7:b8:35:59:b5:29:10:12:99:c6:
         47:68:e6:cc:41:ec:9a:03:16:9e:a1:19:04:1c:d1:d9:72:3e:
         5d:67:bc:bc:00:4a:5c:74:ab:82:44:15:47:a7:d4:07:6e:40:
         a7:31:3e:41:6b:8f:5c:92:8c:c1:7a:22:28:1d:72:0e:fc:69:
         83:6c:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org