Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa
File:                     3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          BDhnALBjinUmeiTAWG9nzT5Z7bdw7uhsEnaa/NMy7Cw=
Subject key identifier:   83:81:73:35:BF:E1:5C:A2:62:E4:1B:C1:53:59:CD:6F:71:1F:1A:B7
Certificate issuer:       /CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
Certificate serial:       0136C0C7B437E71C183209F8AD72B33ED61F5C07
Authority key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa
Signing time:             Sun 04 Aug 2024 19:00:00 +0000
ROA not before:           Sun 04 Aug 2024 18:55:00 +0000
ROA not after:            Mon 04 Aug 2025 19:00:00 +0000
asID:                     262813
IP address blocks:        186.237.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl
                          rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:36:c0:c7:b4:37:e7:1c:18:32:09:f8:ad:72:b3:3e:d6:1f:5c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD
        Validity
            Not Before: Aug  4 18:55:00 2024 GMT
            Not After : Aug  4 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:28:84:d6:d5:8a:c6:0a:53:b1:8d:9c:75:
                    09:f2:1e:9c:c3:a4:2f:34:10:cf:df:80:f2:67:ae:
                    25:d2:81:ea:66:82:b7:7f:53:dc:b5:18:99:16:d1:
                    4e:2f:59:5e:07:12:4c:7c:01:ff:ca:59:e1:d2:0e:
                    9e:ca:7c:aa:a8:d2:36:30:c5:ed:f6:f4:d5:2e:7a:
                    41:0d:bd:76:08:39:2c:0a:13:ae:f9:3c:f3:01:03:
                    6f:ed:a4:34:5c:32:41:6d:e4:b0:a5:b8:b8:45:9e:
                    37:0e:b5:e1:41:3f:36:a2:a2:60:b6:67:cf:e3:b6:
                    66:5e:a1:e7:15:c8:31:c4:77:27:ee:7e:7a:e7:39:
                    e6:6d:37:10:7a:e6:13:90:39:93:6c:59:28:ed:63:
                    0e:8a:5f:bc:a4:16:b1:d3:f8:64:8c:a9:d7:32:da:
                    80:1c:6e:30:d4:ee:85:f7:93:f9:a0:51:e3:c8:34:
                    12:18:4b:94:95:df:6d:e0:e4:6a:cf:5c:f0:44:88:
                    6e:f8:3c:5c:09:75:55:1f:25:dd:94:52:40:55:fe:
                    a0:78:41:f7:49:91:65:56:42:c9:b1:97:0e:a4:82:
                    c6:64:6c:80:42:34:85:a0:d3:2e:36:18:4f:74:b5:
                    54:98:64:25:6d:50:38:5c:1b:fe:82:b2:b9:44:ca:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:81:73:35:BF:E1:5C:A2:62:E4:1B:C1:53:59:CD:6F:71:1F:1A:B7
            X509v3 Authority Key Identifier:
                keyid:76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:57:93:9f:c1:a1:36:90:3b:be:9d:82:25:3f:23:ba:99:09:
         35:eb:7b:a0:7a:53:e2:c0:4a:08:44:35:50:bf:60:fe:df:6f:
         c7:f1:bb:f6:09:a6:5f:7a:2d:3f:cb:e3:e9:9f:4d:b3:31:90:
         56:31:34:c2:b8:06:85:57:2d:fb:60:a8:e2:10:10:ee:16:43:
         b4:9f:ed:22:e6:31:8d:e6:d0:2a:02:17:a7:1b:57:a6:92:e0:
         49:82:ec:11:d1:9b:1e:ef:54:8b:c6:38:8b:1f:b6:5a:f4:ec:
         cd:05:da:f6:f8:dc:38:de:31:6c:54:8c:4d:04:8e:e7:37:3f:
         c0:05:12:df:d5:8e:42:b4:26:99:44:0b:6c:50:b2:c7:5c:25:
         18:c5:5c:77:43:44:ca:0a:f3:6d:6e:56:1d:bb:0c:5a:9a:0f:
         f9:d5:66:a0:56:42:f8:5e:cc:e5:4e:7d:9d:9d:07:11:5a:05:
         1d:19:03:3c:13:81:13:e5:e2:67:95:26:43:5a:22:b7:fa:f8:
         ec:e2:db:23:38:07:54:00:30:5f:5b:a9:57:1c:2d:46:dd:2e:
         13:a2:57:56:6f:69:12:9f:96:39:99:88:9e:b0:e8:5c:03:fc:
         8b:69:72:9f:ed:c9:63:f7:ff:dc:16:e5:6f:32:65:0f:31:9e:
         31:b3:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:22 2024 by rpki-client on console-fra.rpki-client.org