Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132302e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3132302e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          xpBvQqPsWq8kOUuqzGsvxaF3gYQYZMiO5/Kn/aU2rdE=
Subject key identifier:   67:3A:14:BF:60:4E:B4:6D:53:34:F6:DE:97:5E:03:B1:3D:A7:0F:84
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       550971182EEF473B7DCFF94F8087D625DBE84082
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132302e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:17 +0000
ROA not before:           Sun 11 Aug 2024 20:38:17 +0000
ROA not after:            Sun 10 Aug 2025 20:43:17 +0000
asID:                     262757
IP address blocks:        186.224.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:09:71:18:2e:ef:47:3b:7d:cf:f9:4f:80:87:d6:25:db:e8:40:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:17 2024 GMT
            Not After : Aug 10 20:43:17 2025 GMT
        Subject: CN=673A14BF604EB46D5334F6DE975E03B13DA70F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:f7:03:0f:17:b6:84:64:3c:13:53:c0:ab:
                    77:8c:a3:b4:05:7a:a4:b4:b2:40:7a:68:72:1e:06:
                    2e:c4:7f:68:70:66:0f:d1:17:a7:6b:8b:a4:e3:5d:
                    a9:54:55:ce:e1:4e:22:87:fb:4c:97:fb:b1:1a:34:
                    47:1b:af:50:24:8e:33:78:52:8f:5e:6b:39:99:43:
                    69:67:6f:09:3f:e2:de:d0:ee:d3:08:4f:95:4c:1e:
                    ff:3d:5b:9b:84:37:b3:36:2f:9d:cf:e1:32:c1:fa:
                    40:4c:29:01:4c:f6:76:9f:16:a1:89:0c:22:a3:c1:
                    83:5d:d0:c6:10:e6:ed:f8:75:05:35:44:14:18:d3:
                    a9:42:6e:2a:c8:56:8e:c7:04:90:a6:4f:e6:07:f7:
                    5e:40:7d:3a:f3:3b:5f:b7:e4:3a:63:34:27:69:98:
                    ff:91:25:3e:5c:eb:d5:47:3c:dc:14:c0:87:31:e3:
                    a5:d5:d2:18:7b:8a:af:72:94:a1:a2:63:6c:01:54:
                    b1:a0:ca:10:64:82:c0:3e:92:33:c4:8f:c1:fd:d7:
                    45:32:e8:6d:04:5a:47:1e:50:bd:13:9f:c8:9d:4c:
                    02:1a:78:37:0d:d9:4a:b9:9f:1f:6d:ce:09:d3:c4:
                    dc:02:f3:97:67:7f:8b:fb:7c:b0:58:43:ca:92:7e:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3A:14:BF:60:4E:B4:6D:53:34:F6:DE:97:5E:03:B1:3D:A7:0F:84
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132302e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:49:d4:14:ab:3f:93:85:8f:65:e7:3c:13:6e:b9:2d:b2:78:
         a1:da:42:31:82:60:4e:76:a3:1e:c8:c6:25:ac:32:4c:8a:a4:
         dd:2f:d4:7e:0e:1a:bc:64:ed:46:04:90:5a:8b:d8:27:ea:b5:
         74:c3:ca:4a:ac:61:fe:28:97:12:38:5a:98:8e:02:5a:4d:08:
         2a:1d:1f:7c:b2:16:9d:77:a9:4c:bb:45:d0:ac:7f:27:a8:cc:
         44:17:f1:96:d8:e8:a8:b5:be:d6:85:d0:3a:0d:e2:dc:a1:2e:
         3f:c7:8a:fd:fb:fd:ad:a0:28:08:8c:7f:df:75:70:0f:cb:ca:
         51:b3:0b:51:96:df:13:28:4f:88:c4:bb:a1:ba:30:4a:16:f6:
         15:f7:0f:cb:79:d2:da:1c:d1:08:ab:e8:e3:53:86:47:ea:23:
         7b:f3:fa:59:cb:92:6c:48:ce:da:7c:ce:55:65:91:a1:9c:70:
         5c:99:d6:0b:8a:74:9b:b0:be:68:92:dc:1f:af:c6:06:e8:22:
         7b:16:dd:ad:cc:f8:81:80:53:c3:10:02:54:9e:6f:5d:e0:94:
         c8:36:ce:b1:ee:75:4f:35:7d:c5:8a:78:dc:91:dc:95:3e:1f:
         76:2b:97:3e:48:03:ed:ec:19:cc:a0:30:73:d7:31:b4:85:d2:
         5e:af:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org