Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132362e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3132362e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          Pc2I+cAH9OOOvor8detttt9fcnUl3a7gGyXVpLULjMo=
Subject key identifier:   A9:A4:8A:A3:76:51:A9:FC:1C:58:37:97:5A:3B:F7:4B:5D:5D:8A:1D
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       6664C31B9B87971A7DE05D7DFCBA62C0CCD4BAFC
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132362e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:42:55 +0000
ROA not before:           Sun 11 Aug 2024 20:37:55 +0000
ROA not after:            Sun 10 Aug 2025 20:42:55 +0000
asID:                     262757
IP address blocks:        186.224.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:64:c3:1b:9b:87:97:1a:7d:e0:5d:7d:fc:ba:62:c0:cc:d4:ba:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:37:55 2024 GMT
            Not After : Aug 10 20:42:55 2025 GMT
        Subject: CN=A9A48AA37651A9FC1C5837975A3BF74B5D5D8A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:e6:8d:32:f9:eb:d8:7e:7a:70:04:b1:8c:
                    0f:f6:31:22:bc:14:91:f6:03:97:6c:a2:03:ab:95:
                    27:96:31:5d:2d:68:ff:42:47:bd:d2:d7:ea:4d:c0:
                    e9:e7:40:95:66:31:70:f2:89:e6:2b:82:7f:fe:a8:
                    e5:33:39:50:54:88:20:3e:ef:c1:f8:8b:92:ca:aa:
                    c9:49:d2:0a:85:6e:29:55:c8:dc:48:7b:5f:fe:4b:
                    40:6d:41:ab:17:2c:f7:dc:ba:a1:d0:97:a6:23:f0:
                    c4:fd:6b:2d:4b:3e:a0:4c:b0:23:cc:95:da:49:9f:
                    d2:97:94:11:25:1a:b2:52:e6:83:02:17:4e:c8:38:
                    ff:e8:ad:38:34:e6:30:de:a0:9f:58:46:13:34:06:
                    88:81:1e:c3:31:b6:89:45:7b:29:24:5f:ae:94:93:
                    ae:85:0b:2b:b7:6c:4c:b5:31:57:81:9b:5a:3d:ea:
                    19:87:0e:57:18:13:99:c5:c8:99:57:27:bf:55:e7:
                    e4:db:ed:1f:0f:a5:53:08:13:ad:ae:e7:43:eb:18:
                    03:8d:d1:32:a3:6a:2d:50:57:53:67:db:fa:09:dd:
                    94:2b:4d:4a:64:a2:ab:92:e6:31:2a:5b:29:e7:8c:
                    93:17:1e:dc:d4:38:f5:dd:8d:59:be:e2:95:0e:d3:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A4:8A:A3:76:51:A9:FC:1C:58:37:97:5A:3B:F7:4B:5D:5D:8A:1D
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132362e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:02:e1:80:5d:60:26:50:1a:34:f8:52:45:f8:3a:06:2d:
         1b:82:99:1b:88:68:e7:0f:c0:21:1c:6e:e3:33:9a:b7:0e:93:
         c4:df:5d:11:dd:d0:44:8e:6e:0e:21:16:cc:32:39:f8:30:b2:
         74:51:7d:df:e6:f8:ef:73:c9:26:91:29:d4:b3:32:7a:32:f0:
         66:a0:3b:63:7f:08:f1:96:15:14:c6:f7:ab:d1:87:93:1e:32:
         23:91:e6:cb:a7:08:0b:54:57:b1:da:c7:2d:ff:c7:2b:10:52:
         08:31:2c:a4:08:da:b1:d1:d8:9a:ab:85:8a:2a:1b:e9:8b:52:
         0e:26:d0:0d:be:38:d1:2a:15:fe:72:0f:81:93:7a:88:5a:52:
         8f:e5:1f:18:6c:a1:24:18:01:4d:f4:8c:59:91:6d:8e:cb:a9:
         76:69:fa:ed:8c:06:36:7f:cf:85:18:a2:fe:28:e3:1f:6e:23:
         70:21:68:a9:db:fa:14:d4:ea:5c:b0:46:4c:be:65:ae:40:ce:
         b1:9e:43:12:66:c6:e4:0b:f8:98:91:96:76:00:b0:f6:06:7e:
         c9:52:a9:cd:2f:75:2d:83:fc:db:ef:45:50:eb:81:20:23:e0:
         b9:d4:2f:73:1d:97:7f:f9:9f:f1:5d:60:8f:7a:0a:4f:1c:8a:
         7b:af:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org