Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39382e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e39382e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          VW75uvKz2qQQBX23nmfqu54Mtui9OyfGop+mA0ZQGpw=
Subject key identifier:   39:E7:5F:F7:0B:8A:B2:28:EE:28:37:62:E0:13:D9:09:90:69:65:85
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       66176B94EC1CEEB0F5C66EAED4C6624FCBD81B31
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39382e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:41:20 +0000
ROA not before:           Sun 11 Aug 2024 20:36:20 +0000
ROA not after:            Sun 10 Aug 2025 20:41:20 +0000
asID:                     262757
IP address blocks:        186.224.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:17:6b:94:ec:1c:ee:b0:f5:c6:6e:ae:d4:c6:62:4f:cb:d8:1b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:36:20 2024 GMT
            Not After : Aug 10 20:41:20 2025 GMT
        Subject: CN=39E75FF70B8AB228EE283762E013D90990696585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:29:3a:3b:f9:75:1f:24:c2:21:a4:30:ec:
                    3d:43:0c:5f:f1:9e:0c:e8:91:a6:ca:e1:a6:a0:d3:
                    3f:a0:b7:c0:d1:85:72:b1:ab:7c:fb:76:5f:7e:2d:
                    d4:bb:54:36:b5:36:98:d9:1e:97:7b:26:40:e6:c3:
                    64:89:e0:38:d1:8c:08:af:90:85:12:6d:28:e4:29:
                    18:73:28:01:ea:72:12:42:29:1e:0c:58:c9:71:8d:
                    bc:7b:eb:39:cb:78:a9:68:c8:31:67:c7:66:33:db:
                    62:62:6d:86:eb:1f:9b:d1:42:77:d8:4f:e7:3c:e1:
                    2a:e9:1d:47:8c:88:1e:a7:1a:04:af:83:31:a0:8e:
                    70:4e:b7:64:a0:9b:9d:38:35:0d:45:95:f6:e1:52:
                    9a:b7:dc:6c:15:20:81:f8:9f:1e:18:15:79:e7:99:
                    45:70:95:0b:c6:80:25:9c:90:de:3d:fa:89:ae:95:
                    da:f6:9b:2f:c7:ef:04:6a:c3:87:8d:1d:67:d9:b7:
                    46:65:f7:5b:4b:3d:79:90:28:3f:70:1f:fe:52:c4:
                    83:48:4e:0b:09:4a:57:ee:e6:c5:2a:38:2c:cd:7a:
                    c4:53:e8:97:f9:94:6c:90:da:87:b1:d4:78:7e:54:
                    e9:77:de:9f:53:1c:a6:cf:bd:b4:a7:02:85:38:da:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:5F:F7:0B:8A:B2:28:EE:28:37:62:E0:13:D9:09:90:69:65:85
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39382e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:d8:30:04:ad:71:24:ac:07:d4:dd:54:a6:57:ac:25:cd:
         f0:b2:46:e1:bc:9e:a1:9c:6c:a9:c9:8d:ec:03:f6:98:dd:0a:
         45:f6:b3:5f:ce:87:66:7d:61:23:b8:c7:37:ef:82:cc:f7:b9:
         8e:ed:1c:c8:3c:45:e5:b7:92:e8:d4:bf:29:75:f4:fe:35:ea:
         63:4f:8c:ce:04:92:7a:ce:f5:25:f1:18:41:73:be:e2:23:eb:
         4e:9b:67:75:b6:b5:61:f1:fd:f8:53:a6:d4:cf:c8:53:41:07:
         38:a2:50:86:f4:c6:ba:fb:67:9b:15:73:e4:0e:8d:07:7f:b1:
         04:1c:d7:b5:10:af:f5:23:f4:c2:18:71:d5:6e:2d:8c:33:19:
         b1:9b:70:1c:bf:f7:37:27:b3:e2:90:da:2e:55:f0:3d:0c:8a:
         e5:81:6f:da:1b:9e:8b:05:ca:3a:7d:51:f8:f9:24:6d:2a:50:
         b1:2e:2e:a4:5a:8b:a1:a3:d1:78:c6:90:40:3a:71:dc:7d:86:
         55:67:99:ad:35:09:62:e2:a8:13:0a:b9:37:eb:86:ce:03:82:
         f3:7b:86:65:c5:20:88:d4:a8:ab:51:ed:19:82:5c:0d:eb:1b:
         bd:04:61:d1:7d:3b:9b:fc:1d:72:d0:eb:a5:dd:ad:ec:d9:ad:
         9a:70:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org