Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          46fb14d3ADC7nw++EFsrPlVSIjRfp42patCNMvvJcng=
Subject key identifier:   B2:7F:8B:C3:CE:42:AE:89:E0:A2:48:A8:5E:16:11:1D:78:49:4D:41
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       11BFD0B2C68162A2E33E32B9DE90240D655894F8
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:52 +0000
ROA not before:           Sun 11 Aug 2024 20:38:52 +0000
ROA not after:            Sun 10 Aug 2025 20:43:52 +0000
asID:                     262757
IP address blocks:        186.224.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bf:d0:b2:c6:81:62:a2:e3:3e:32:b9:de:90:24:0d:65:58:94:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:52 2024 GMT
            Not After : Aug 10 20:43:52 2025 GMT
        Subject: CN=B27F8BC3CE42AE89E0A248A85E16111D78494D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:55:ad:20:46:dc:12:a6:35:b1:0e:ee:69:
                    fc:55:06:87:bf:0d:ba:8d:cb:4e:a7:2d:93:94:e3:
                    56:6f:ed:ec:51:64:09:b5:5a:62:cf:bc:a2:07:8d:
                    f9:a6:43:91:c9:09:c7:e2:e8:2b:76:f2:dd:d0:3f:
                    aa:1b:63:31:a9:e0:0b:50:91:e2:ea:26:34:da:d5:
                    78:46:cf:9d:86:bd:2d:45:5c:c7:d5:44:f6:8b:a7:
                    b9:c3:ea:c8:90:32:3e:ef:78:5a:9e:8d:c7:8b:b0:
                    09:60:75:b3:1b:ea:0a:e9:96:79:f9:e9:7d:e2:13:
                    3a:d6:54:f3:72:15:46:cd:97:9b:a4:1a:d8:8f:47:
                    0f:78:85:e5:60:1d:4c:56:33:ef:74:11:07:bb:eb:
                    ca:25:58:08:48:82:a6:c5:78:5c:c9:35:c0:ef:4e:
                    ca:98:30:b4:31:17:93:a7:69:79:75:3a:17:6d:cf:
                    0d:f4:64:77:db:c4:70:b8:cc:f8:b7:21:d7:8f:bb:
                    91:57:1e:c5:22:d1:e3:76:49:8a:ea:99:50:5c:62:
                    e0:e4:8f:1c:1d:d5:73:e9:57:42:d9:99:8b:74:42:
                    25:23:c3:45:b6:1a:1a:84:37:27:91:cc:5e:2a:3b:
                    ad:7d:a5:02:71:ef:2a:ad:b8:6d:96:28:e0:2f:80:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:8B:C3:CE:42:AE:89:E0:A2:48:A8:5E:16:11:1D:78:49:4D:41
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:17:00:24:54:68:04:6e:90:59:6e:6a:b0:28:10:32:7a:
         37:87:9e:a3:c0:44:40:ff:ba:10:61:f5:96:dc:56:32:80:3b:
         41:41:ea:4c:9f:6d:d0:8e:63:13:07:5c:e3:98:44:b8:98:b4:
         92:d6:e5:66:f0:cf:ee:b5:a2:3e:bc:f9:b0:16:5a:ac:a1:63:
         6c:3d:1c:14:54:bd:f2:22:28:67:ca:bb:a0:42:e8:11:b8:ab:
         99:66:eb:af:f0:0f:6e:ed:40:d7:62:00:3c:52:c2:92:9c:ac:
         b4:05:ce:0d:3b:9c:5b:ab:f7:31:5b:75:92:9c:b5:2e:85:2f:
         07:3f:bd:f0:7d:4c:da:1e:38:91:0a:5e:b2:b0:ba:2c:54:78:
         e8:9c:d8:64:9e:34:70:ba:b6:3a:77:af:7a:fb:e8:60:cd:95:
         9f:0d:37:b8:8f:ca:92:bc:28:52:a3:be:67:b9:da:bf:6a:dc:
         e6:38:c8:d9:59:e4:2c:94:ae:c8:6b:28:5c:dd:65:d2:af:29:
         51:1a:c2:fd:21:1d:45:28:1f:e6:ce:31:83:ca:df:9f:03:7a:
         25:cc:f0:cf:b7:ee:fd:38:31:e9:e6:c1:18:1b:a4:df:d1:f7:
         15:ae:09:1d:4c:70:cc:55:a6:92:68:c0:2d:ea:0c:df:c5:52:
         0b:a0:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org