Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          wugXQrsGIRXpZMHp9k6H4tH5UTC0BEgbzeVM4YI3srA=
Subject key identifier:   E5:A7:8A:59:10:08:9A:61:E9:25:87:5B:35:D4:52:BB:20:9E:7A:02
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       02F2A5215ED20DAB70B94651C27FBC62CDDCDFDE
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:40 +0000
ROA not before:           Sun 11 Aug 2024 20:38:40 +0000
ROA not after:            Sun 10 Aug 2025 20:43:40 +0000
asID:                     262757
IP address blocks:        186.224.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f2:a5:21:5e:d2:0d:ab:70:b9:46:51:c2:7f:bc:62:cd:dc:df:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:40 2024 GMT
            Not After : Aug 10 20:43:40 2025 GMT
        Subject: CN=E5A78A5910089A61E925875B35D452BB209E7A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:2b:ed:78:36:06:b4:29:a0:1e:9f:ce:87:
                    a9:55:7e:5b:81:8d:4c:ba:40:1e:2d:c8:ad:df:1f:
                    21:29:d0:37:95:d2:dd:f2:0d:13:70:4c:c7:c1:9c:
                    75:99:37:b0:60:f0:0f:1d:da:5c:94:aa:de:41:ee:
                    ae:42:38:7f:cf:8f:9c:0c:33:30:68:5e:cb:5e:bc:
                    92:1b:19:92:3c:34:27:a1:1a:71:9a:76:60:d2:8b:
                    13:ac:f9:75:0d:a4:37:18:da:97:4c:c7:a4:80:10:
                    d0:22:25:ce:ee:6e:01:4f:d4:af:3c:54:3c:63:40:
                    87:a8:df:d5:a7:6c:0e:fd:74:ff:b1:4d:5f:f8:06:
                    bf:4c:20:2b:a8:ae:fb:4f:84:0b:83:a5:81:44:0b:
                    a3:d5:fa:e4:da:25:b5:20:1c:a1:9b:ee:a2:14:79:
                    1e:6b:a7:9f:0e:9a:9f:05:3b:13:9e:f6:f9:61:39:
                    68:2c:83:c4:26:b6:ec:17:40:0c:09:73:ac:d7:d3:
                    08:27:7b:04:d1:b6:76:f4:fe:4c:a9:59:49:8f:d6:
                    47:b6:b5:3d:d4:4b:60:96:03:3c:61:1b:ef:8c:1f:
                    de:9a:2c:22:db:51:a9:37:36:87:78:f3:7e:4b:51:
                    41:40:46:ad:a3:5d:72:de:6d:35:be:72:9d:6e:1a:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A7:8A:59:10:08:9A:61:E9:25:87:5B:35:D4:52:BB:20:9E:7A:02
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:38:be:52:41:4a:2e:58:2b:df:d1:b9:ae:8f:31:70:ea:4f:
         ed:e1:93:39:a5:71:11:7b:55:d3:ad:84:3e:31:30:76:06:45:
         0c:1a:64:da:14:7e:e9:2b:b5:76:97:23:01:49:7f:7a:d7:32:
         08:8f:a6:32:72:80:c0:d3:0d:c9:68:8e:c9:3e:7b:84:d2:9b:
         63:7a:d8:49:87:5f:95:cd:4d:38:7a:60:e7:1e:fe:1d:0d:72:
         89:48:d5:87:d6:fd:50:8c:2d:8d:ad:8b:f7:ec:d3:4c:1a:fb:
         55:bb:8e:32:06:35:97:7e:da:51:ec:5e:01:a2:fa:ba:63:69:
         11:42:8a:cf:0e:01:32:de:a9:80:a7:0e:14:6b:54:39:8f:17:
         6e:c8:50:e8:d7:23:84:2d:c6:87:c1:bf:e7:0e:c9:35:8c:ee:
         40:b3:0a:03:20:f4:9e:d6:ff:0e:d4:dd:37:77:64:8b:6c:cc:
         ba:b8:c4:14:03:72:51:37:da:22:94:84:19:b8:4e:5d:08:1e:
         d6:87:82:3a:82:ce:c7:55:59:40:fb:73:d3:c3:6b:67:be:21:
         34:d0:2e:9c:53:b7:71:3b:7e:97:c8:01:b0:cd:ac:34:41:4d:
         88:fb:83:7d:f8:68:cb:87:12:a0:9c:bc:4b:f2:f2:de:28:13:
         e0:aa:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org