Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e3131362e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          aNuoJo1fKZdwU1BUwQCKaTHgjQii7UKlx7VqAYoOF4s=
Subject key identifier:   28:86:D3:E8:C1:59:22:F2:6F:F7:6A:B4:F3:F8:99:BE:26:F2:F0:94
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       5E15199FD5554F35F7A10945032A2C80B6347BA0
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32322d3232203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:05 +0000
ROA not before:           Sun 11 Aug 2024 20:39:05 +0000
ROA not after:            Sun 10 Aug 2025 20:44:05 +0000
asID:                     262757
IP address blocks:        186.224.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:15:19:9f:d5:55:4f:35:f7:a1:09:45:03:2a:2c:80:b6:34:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:05 2024 GMT
            Not After : Aug 10 20:44:05 2025 GMT
        Subject: CN=2886D3E8C15922F26FF76AB4F3F899BE26F2F094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:5a:b9:b1:ec:90:88:f0:63:b0:be:28:8f:
                    c7:c1:01:ee:aa:a3:4b:8c:36:a3:90:9c:9e:bd:ad:
                    99:e2:2a:7a:f6:50:71:09:0e:20:b0:4f:7d:59:bd:
                    44:56:76:89:f2:3d:1b:f7:92:52:48:23:73:73:6b:
                    f9:90:0b:ec:bf:23:61:87:61:10:ef:65:c7:41:74:
                    86:55:b5:f1:c4:fd:46:df:a3:53:6f:79:72:89:67:
                    1e:7f:b0:37:6f:9d:5f:cf:c1:c8:c7:d2:5f:f7:d9:
                    51:7b:3f:2c:86:21:39:fb:19:b3:4e:01:c5:53:39:
                    25:58:25:2c:cb:64:da:8e:97:cc:46:37:0f:1c:08:
                    f3:eb:80:c1:92:8a:74:01:7a:65:0e:58:9f:a8:9d:
                    be:51:9b:87:96:df:7b:98:47:a1:e1:df:45:20:58:
                    61:a4:f1:cc:a3:69:32:52:a5:89:ff:05:f4:70:5b:
                    36:ca:97:71:9e:1e:c8:98:72:85:d3:e6:b9:05:2a:
                    93:e4:0b:17:4d:e7:13:b3:88:ff:d9:64:09:50:cc:
                    4a:c9:76:73:93:c9:66:d3:29:96:c8:f6:14:fc:58:
                    9c:9c:1a:32:be:5c:17:f2:46:c7:b2:5e:14:05:8e:
                    67:2d:65:7f:cb:ba:2f:fb:f7:95:93:42:61:23:75:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:D3:E8:C1:59:22:F2:6F:F7:6A:B4:F3:F8:99:BE:26:F2:F0:94
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:40:e2:d4:62:48:0b:21:64:97:52:56:f2:c0:30:81:ec:34:
         d7:c0:22:87:fd:3d:52:e5:2f:ba:92:01:4d:96:63:80:24:83:
         d8:61:2a:26:cf:80:07:36:64:34:6a:6b:f1:cd:39:14:4f:60:
         73:92:8a:f7:46:1f:f5:a8:84:5a:a3:78:93:fd:75:fb:a0:75:
         77:15:43:ba:50:b2:67:b3:57:4e:3b:de:54:fd:48:98:71:ec:
         b2:05:0b:9b:63:8e:86:bf:95:7d:18:c3:c1:b8:39:7a:c4:8f:
         b4:a5:5b:d4:a6:7c:c5:f7:3c:c1:79:19:65:22:ed:e4:33:f1:
         e6:ef:8b:a1:89:8d:03:d5:7b:06:22:7f:b9:8a:53:28:6e:b2:
         82:80:ad:4e:bf:27:86:8b:5c:d3:e0:6e:09:81:ba:eb:dd:3e:
         c5:55:12:32:2e:8a:d5:3f:c2:08:98:5e:b9:80:64:b7:25:2e:
         57:0f:0d:72:bf:de:db:4a:6f:20:47:15:fe:05:1d:c8:d9:1b:
         37:e5:b4:9e:01:fc:df:d5:15:1e:e4:fb:3a:22:84:2a:a9:13:
         96:e2:68:3a:12:02:24:bd:e6:53:aa:64:ce:06:28:3e:c6:ca:
         c3:dc:b7:6c:41:05:b7:fe:6e:7f:ed:5c:74:0c:74:3d:39:88:
         ae:03:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org