Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          wl4aiTMKIKw/DJLxiTYvgeSMzB39hAui7C85O5dv1hg=
Subject key identifier:   59:2B:B5:6F:7C:3F:F6:89:2F:84:07:20:BD:AC:50:8A:33:A9:56:2A
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       73FF2377C714D7A564AFB677C09F136626E8E514
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:41:04 +0000
ROA not before:           Sun 11 Aug 2024 20:36:04 +0000
ROA not after:            Sun 10 Aug 2025 20:41:04 +0000
asID:                     262757
IP address blocks:        186.224.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:23:77:c7:14:d7:a5:64:af:b6:77:c0:9f:13:66:26:e8:e5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:36:04 2024 GMT
            Not After : Aug 10 20:41:04 2025 GMT
        Subject: CN=592BB56F7C3FF6892F840720BDAC508A33A9562A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:36:58:b4:72:46:2a:e4:b9:c4:a2:c9:1c:
                    a1:57:59:7a:e3:48:fc:94:9d:fd:7d:82:66:e4:25:
                    7a:c1:5c:96:7a:7b:bb:14:59:9d:4f:65:ca:da:1a:
                    69:bb:56:55:56:1a:e4:72:b9:e4:87:04:82:b6:db:
                    16:19:ff:46:23:ea:6c:92:37:c0:c8:4c:93:57:fb:
                    c9:86:4b:95:d2:7c:ad:b3:04:5b:84:8b:68:77:32:
                    10:4b:f3:ad:4f:93:a6:bd:16:38:12:c8:2e:0f:eb:
                    bd:df:e8:9d:fa:ea:9c:34:b7:8d:fe:bb:90:e6:be:
                    3f:ab:66:26:7a:06:23:9c:dc:cd:de:73:aa:b6:a4:
                    b8:37:1a:83:33:a7:36:b2:3e:9c:00:c7:49:c2:b3:
                    70:b3:f4:0d:9d:98:9b:10:a4:af:73:07:8a:4d:ca:
                    0e:89:72:0c:30:48:38:c8:f0:c7:b5:58:52:66:bd:
                    45:b5:f1:69:d1:4b:6f:17:9e:4c:12:ac:3d:cd:86:
                    8e:3c:36:c7:c4:4d:9b:5c:a5:0c:a3:1e:64:f8:76:
                    fb:52:bf:38:64:57:59:49:99:cd:41:54:e6:c3:c6:
                    29:50:af:90:3c:b6:21:86:02:58:7a:1c:85:1b:68:
                    d7:19:dd:bc:38:51:e5:a9:49:98:14:36:4f:81:5b:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2B:B5:6F:7C:3F:F6:89:2F:84:07:20:BD:AC:50:8A:33:A9:56:2A
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:03:9f:2a:b7:85:c8:da:f1:98:37:37:6c:a5:90:c5:ca:
         d7:ef:6c:44:5f:62:9b:82:d1:08:b3:d0:b4:75:9d:3e:4c:d4:
         d2:c6:30:ac:1a:e7:0d:f5:ac:37:69:66:0e:58:77:5c:68:21:
         42:e0:aa:32:aa:31:b3:61:27:27:80:fa:46:cb:7f:8b:80:81:
         1b:20:22:26:fb:ed:3a:00:02:c9:3c:18:c0:6e:d1:64:26:2c:
         d9:96:c5:e3:29:07:06:2e:30:33:d3:25:2e:ad:3f:53:8b:04:
         f0:ad:21:30:ee:b8:bf:1d:1d:8c:0d:2f:13:ca:2a:83:63:4e:
         54:83:a0:74:ed:8e:c8:1c:ed:c5:31:6a:76:51:19:8b:d3:e6:
         82:10:e7:da:9d:71:b5:b9:9d:99:ce:eb:d3:7e:07:da:f5:d6:
         76:d5:2a:47:67:78:a2:36:ae:7a:bd:3a:2c:80:c8:79:85:5d:
         cd:54:89:1e:ba:68:4e:5b:ce:8b:58:b5:8b:00:35:42:1a:04:
         22:be:7e:06:02:62:a9:c0:83:64:e0:9a:4e:54:25:31:4e:31:
         0b:93:9e:7e:72:98:46:73:dd:65:0d:95:68:97:04:ee:c9:c2:
         21:e0:1a:87:50:d5:64:3e:42:03:64:bc:c1:96:31:26:70:1e:
         4f:ce:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org