Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          k3aVFMMA3+QICAMLzhdupMyCcm+HtFy5g/X7q89XLHg=
Subject key identifier:   5B:67:70:95:9B:51:BD:96:F4:E9:9F:8C:3A:D9:4D:62:65:28:31:FF
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       520B1ED49DB2AF298722C27E6728CCCB367FD50F
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:00 +0000
ROA not before:           Sun 11 Aug 2024 20:39:00 +0000
ROA not after:            Sun 10 Aug 2025 20:44:00 +0000
asID:                     262757
IP address blocks:        186.224.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0b:1e:d4:9d:b2:af:29:87:22:c2:7e:67:28:cc:cb:36:7f:d5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:00 2024 GMT
            Not After : Aug 10 20:44:00 2025 GMT
        Subject: CN=5B6770959B51BD96F4E99F8C3AD94D62652831FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:a1:10:cc:1d:d7:e4:97:2c:64:4d:d3:e9:
                    25:f9:ee:8a:6b:5b:20:0c:de:e2:09:4c:68:99:4f:
                    bb:28:7b:38:01:92:24:76:7a:e5:f2:4e:e0:7c:9f:
                    fb:08:a2:07:9f:8e:ab:a2:aa:62:32:58:11:2b:5a:
                    aa:9b:48:bb:25:6b:bf:bb:16:64:bf:1b:2d:0b:25:
                    8e:cc:2e:4f:84:2f:d7:ab:84:e3:43:96:af:aa:99:
                    77:aa:b4:d0:ca:ce:e1:c0:b6:28:c8:78:05:91:5e:
                    f2:02:c5:a7:ee:b0:98:10:bb:40:09:f7:3f:13:ed:
                    d7:3e:84:7d:44:6d:1a:1f:5d:91:a2:91:29:fb:53:
                    65:ba:1d:20:59:be:35:b6:06:2d:fa:5b:53:8a:cc:
                    3e:d7:6b:5f:cc:eb:3a:7e:0d:ba:c8:55:65:f5:73:
                    2e:e6:f1:c0:66:d5:b6:78:d6:16:42:6b:68:08:a7:
                    e2:6f:0e:3f:7a:30:30:c1:a4:38:d1:ce:c1:99:33:
                    4c:87:d7:61:f9:c5:13:0e:35:59:7d:62:9f:0c:2c:
                    ca:b9:e5:52:84:60:d1:a9:39:c3:6f:3c:08:cf:28:
                    dd:7a:1d:71:ee:fa:17:5e:5c:6e:73:34:89:1b:e2:
                    1e:67:72:c3:52:0e:32:39:74:2f:49:fa:c5:d4:6f:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:70:95:9B:51:BD:96:F4:E9:9F:8C:3A:D9:4D:62:65:28:31:FF
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:0d:e0:95:d1:5d:a0:ae:5a:19:0e:63:90:49:7f:5d:77:
         77:ea:40:c0:5a:43:22:f2:61:cb:fd:27:8f:db:6d:43:5a:31:
         30:7a:01:4b:9a:d5:47:05:3c:57:5e:67:e3:49:85:85:1e:63:
         05:43:5c:85:e5:3f:22:34:15:ae:05:bb:0c:b7:36:3b:ab:54:
         74:54:39:ac:18:95:7c:f3:b8:05:55:62:c6:e4:c0:35:07:bb:
         9e:77:f3:1b:9c:19:42:17:0a:f9:c7:23:b5:eb:0f:ef:07:50:
         00:81:23:21:cb:38:ee:2d:3d:d4:e2:39:e0:7d:4c:a8:e2:9e:
         87:0c:7a:3f:03:ee:8c:bd:1c:57:3c:74:66:d1:a8:2e:f0:4c:
         13:e8:d3:ae:71:6e:75:c3:d6:53:fe:f3:70:74:19:2d:d2:c4:
         fe:ed:dc:66:88:a8:4b:af:8e:4a:87:db:24:59:41:7f:0d:a9:
         65:52:93:d2:ee:d7:73:ff:20:e0:06:34:1d:c5:57:1c:c8:37:
         82:a7:e3:61:62:24:ad:a8:6a:12:65:28:89:b1:d0:1d:d6:1c:
         7a:8d:f1:f0:a6:c7:9a:d8:92:ba:dd:0d:c9:b5:02:3c:c2:1b:
         81:e7:0e:99:f3:b7:1e:8d:5e:38:6f:2b:2b:1e:6e:dc:f4:8c:
         ba:0f:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org