Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39382e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e39382e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          dXOKA4p0fzAqsBMoR9JRcD4abGFqzlpuqjg9nmc1jm8=
Subject key identifier:   35:60:B2:82:11:26:6E:2B:07:5E:B5:7D:21:73:DD:26:87:D4:6E:A8
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       0919C8857E9A88167E8181908CD07FE9C0A08D92
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39382e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:41:17 +0000
ROA not before:           Sun 11 Aug 2024 20:36:17 +0000
ROA not after:            Sun 10 Aug 2025 20:41:17 +0000
asID:                     262757
IP address blocks:        186.224.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:19:c8:85:7e:9a:88:16:7e:81:81:90:8c:d0:7f:e9:c0:a0:8d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:36:17 2024 GMT
            Not After : Aug 10 20:41:17 2025 GMT
        Subject: CN=3560B28211266E2B075EB57D2173DD2687D46EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:c3:7f:32:84:51:9b:fa:9e:7a:09:7a:90:
                    4e:2a:b0:27:55:ad:52:8b:d5:94:0e:55:a8:fb:b4:
                    b3:22:da:21:3f:72:35:65:ba:c2:e3:21:38:0c:5b:
                    09:95:47:c1:30:5a:ff:7c:da:2c:34:2b:41:a7:27:
                    1b:bc:4b:4a:11:c6:bf:ec:5b:19:ac:07:1b:8e:3f:
                    b3:36:93:1e:70:15:fc:25:a4:97:49:61:53:cb:db:
                    f4:77:e4:c0:01:a3:19:38:47:07:0b:ec:44:db:3a:
                    22:f1:a1:60:34:f6:9e:2d:40:5c:b5:61:08:35:19:
                    98:98:6c:9a:e4:5e:40:a1:d9:8d:03:45:ba:b6:9d:
                    37:1d:9b:2b:8e:28:fc:79:ed:8a:40:34:a2:8b:ad:
                    29:35:55:2f:04:a7:fa:e1:25:4a:c8:5b:e9:10:38:
                    f6:e1:2b:1b:42:7e:f9:4a:34:dd:11:5c:96:0e:f4:
                    36:db:62:c6:83:42:4f:db:79:c1:7b:f3:69:f8:ca:
                    e9:32:8d:f4:be:2f:e2:aa:16:b9:9e:68:73:3c:4d:
                    45:7c:69:84:24:b9:e2:98:b3:f6:db:6b:bc:c9:05:
                    40:f7:ec:aa:e2:92:d6:a4:66:87:a7:3a:2b:d1:b3:
                    47:d1:1a:e1:77:e7:1c:5a:c1:55:8c:f5:32:69:a1:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:60:B2:82:11:26:6E:2B:07:5E:B5:7D:21:73:DD:26:87:D4:6E:A8
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39382e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:22:07:b6:ef:fa:54:e6:17:e7:98:0f:d3:96:d1:f3:df:
         b0:1d:85:2f:18:01:09:d7:50:52:cb:f8:ec:04:26:13:da:fc:
         57:fa:93:fa:97:47:9a:b1:0b:65:b3:2c:ac:4e:7c:b0:87:07:
         a0:45:2f:ad:83:9b:27:5d:c2:df:26:e0:17:4f:91:ec:83:3a:
         33:bd:47:05:14:c8:8f:35:f4:6d:56:a0:22:1f:38:aa:db:f0:
         16:30:41:cf:04:32:1d:b8:58:ea:cf:d8:65:d2:6f:a8:8a:fa:
         b5:88:05:2c:bc:51:b8:28:a8:af:2c:0d:0f:7c:04:f1:8a:5b:
         af:eb:bf:13:d7:57:d7:8b:04:db:53:1f:7c:df:91:e8:7c:46:
         d7:d9:1f:c2:9d:61:91:30:0b:a7:2d:92:8c:1c:ac:f7:42:48:
         b2:c3:31:ab:60:12:60:20:62:b4:cf:77:69:c6:7f:c7:fb:2e:
         bb:af:47:49:2d:fa:fe:df:40:3d:cc:f5:56:4a:e8:1e:94:7a:
         f9:05:92:73:57:a2:4f:e7:e5:ca:6e:b5:c5:c3:de:d9:bb:e0:
         c7:de:bf:b6:d9:0e:5b:0e:fc:6a:25:85:d7:d8:e2:c5:30:98:
         8c:df:66:3d:f3:64:bb:65:95:8c:c7:f8:23:fc:f0:79:4c:9b:
         56:a1:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org