Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32302d3230203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32302d3230203d3e20323632373537.roa (raw, json)
Hash identifier:          tNJflmgWda6rzJ/2aWOboMFPIhUmhytVl+UGTV/0MSk=
Subject key identifier:   A8:B1:B9:C8:02:DC:0A:40:56:A4:91:AE:18:02:4B:D6:26:0C:5C:8E
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       5B740D90CED61BFE8F95A621E460D6737AF70096
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32302d3230203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:40:49 +0000
ROA not before:           Sun 11 Aug 2024 20:35:49 +0000
ROA not after:            Sun 10 Aug 2025 20:40:49 +0000
asID:                     262757
IP address blocks:        186.224.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:74:0d:90:ce:d6:1b:fe:8f:95:a6:21:e4:60:d6:73:7a:f7:00:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:35:49 2024 GMT
            Not After : Aug 10 20:40:49 2025 GMT
        Subject: CN=A8B1B9C802DC0A4056A491AE18024BD6260C5C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:6a:f3:ae:6c:5a:04:e8:33:42:5c:68:ef:
                    24:7c:93:3a:98:16:2c:5e:d4:92:53:58:ba:8a:f3:
                    18:97:25:31:1e:b4:d5:31:23:52:03:41:75:56:38:
                    63:e7:5d:6a:9a:40:a0:40:27:4b:89:fe:5a:bc:4c:
                    5b:51:fc:21:9c:e4:05:86:c2:de:14:a1:58:29:ea:
                    01:59:7e:d8:66:17:16:cd:78:e1:94:fd:c3:46:f9:
                    2a:aa:07:11:0d:84:92:0d:e9:a9:aa:3b:a8:2f:41:
                    d5:f8:01:41:77:82:7e:ef:c5:15:57:8b:e9:6c:fd:
                    ef:d1:0f:ac:71:c7:d3:57:56:92:cf:9a:b8:4a:56:
                    57:b0:c0:ff:04:ad:34:55:a8:4f:a4:15:3f:3c:de:
                    ad:52:97:3b:f9:c3:ff:45:28:32:3b:d5:b2:12:a3:
                    87:0a:95:67:66:b9:74:d7:6c:c1:1e:9a:fc:53:a4:
                    70:ff:b5:b9:b8:cf:33:84:3d:bc:4b:2f:a1:77:0c:
                    24:5d:55:75:d2:81:13:94:7c:e3:11:66:8f:93:16:
                    c5:05:a9:a2:a3:15:ad:af:58:7e:be:96:80:38:f0:
                    72:33:61:8a:db:ec:1b:2e:63:5a:b6:9b:48:00:4b:
                    fc:51:6a:fc:42:58:03:91:56:15:0c:46:27:e5:f5:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B1:B9:C8:02:DC:0A:40:56:A4:91:AE:18:02:4B:D6:26:0C:5C:8E
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32302d3230203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:76:a8:a0:9a:f4:0f:9f:34:9e:cc:73:53:3f:8c:90:ce:
         cb:d0:7e:3e:85:cd:bb:fa:df:11:86:57:02:83:6d:49:bc:a8:
         91:ec:6c:ec:dc:49:99:20:d1:a3:17:50:1c:7e:9d:84:5e:67:
         a9:c3:e5:06:f8:84:f1:fd:44:1b:be:4f:18:ec:9f:6a:6b:d5:
         d1:60:99:9d:2f:d2:2a:e5:bc:8b:15:f1:cc:53:60:c4:cb:60:
         c1:79:88:a2:a5:69:2e:57:f3:58:bf:57:54:bd:06:a8:3e:ad:
         6a:a9:5b:29:59:08:80:d5:16:b7:29:2e:f1:ac:91:bb:2e:3f:
         63:68:53:12:e8:00:80:d5:b3:e0:38:95:98:c1:b1:e0:0d:af:
         50:41:96:26:b0:79:1f:5d:26:13:b7:2b:c7:e0:64:e6:1d:79:
         01:19:ea:80:54:04:71:1c:0d:1b:39:d9:01:a1:83:d4:34:bd:
         8a:94:a5:66:97:59:13:5e:3e:34:1e:91:6c:b4:72:5c:c9:b4:
         04:a7:ee:86:bc:b4:7a:64:c5:bd:d1:d4:6b:2b:aa:24:7a:db:
         90:61:b9:09:33:b4:77:8a:60:2d:47:74:16:8c:00:e3:7c:74:
         2f:36:ec:eb:ef:cb:10:3c:f1:aa:b5:0b:71:44:7d:f7:d9:db:
         d5:38:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org