Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
File:                     3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa (raw, json)
Hash identifier:          fVNfJUtC/vhl++/l+PsPls2OX8DLAVORMbjYKPWbyu8=
Subject key identifier:   26:A0:41:84:D7:76:BC:D0:FA:9B:E6:40:38:5C:38:02:01:48:86:0C
Certificate issuer:       /CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
Certificate serial:       3D139A22C92D9E9B1BDCDCDF33E5A2093E632A0C
Authority key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
Signing time:             Thu 04 Apr 2024 09:09:46 +0000
ROA not before:           Thu 04 Apr 2024 09:04:46 +0000
ROA not after:            Thu 03 Apr 2025 09:09:46 +0000
asID:                     263285
IP address blocks:        186.235.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl
                          rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:13:9a:22:c9:2d:9e:9b:1b:dc:dc:df:33:e5:a2:09:3e:63:2a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
        Validity
            Not Before: Apr  4 09:04:46 2024 GMT
            Not After : Apr  3 09:09:46 2025 GMT
        Subject: CN=26A04184D776BCD0FA9BE640385C38020148860C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:03:75:6d:55:af:5d:d7:ed:33:50:2e:c1:
                    b4:9d:11:5e:ba:a6:ed:5b:72:bb:0b:c4:87:bc:79:
                    dc:2e:68:44:f0:7a:ac:04:a5:9d:13:8b:9d:2c:c1:
                    0d:6c:3d:fc:78:c8:de:b5:17:bf:03:69:55:22:e8:
                    76:93:35:0e:3c:88:47:e6:8d:16:0a:15:aa:6b:e7:
                    a2:f6:0b:f9:84:56:1a:12:f2:6c:93:ab:2a:91:1d:
                    e8:1c:5b:ff:09:4f:fa:1e:97:ed:16:82:a6:11:d0:
                    fb:a1:6f:c9:3c:97:c6:b9:04:5b:8c:cc:ee:71:4d:
                    41:76:58:9a:65:36:c0:8a:ba:da:2a:b0:68:a1:72:
                    5d:27:e6:dc:86:0d:9e:05:00:8d:af:67:93:78:a2:
                    f8:d3:f7:16:3d:51:fc:ee:3e:5c:5f:b2:07:1b:67:
                    55:cd:78:02:ac:f4:f2:43:bb:60:1a:5e:c0:b2:6d:
                    62:30:9b:aa:db:05:6d:b9:64:1a:42:a3:5c:72:ab:
                    ea:23:39:cf:78:9b:aa:df:e1:00:42:9b:b7:0d:e6:
                    40:00:f5:64:ac:bc:fb:09:4c:9c:2a:01:07:36:14:
                    05:e1:fa:03:e8:4c:c9:fb:38:63:fb:f5:92:6d:bc:
                    4a:cd:e0:0b:a0:45:f6:41:a9:f3:e6:3f:59:b3:70:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:41:84:D7:76:BC:D0:FA:9B:E6:40:38:5C:38:02:01:48:86:0C
            X509v3 Authority Key Identifier:
                keyid:66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:81:4e:c6:ac:8d:93:60:f6:c0:96:6f:49:41:02:05:d7:
         2a:7c:5d:cb:02:9d:d0:a0:c6:82:b1:74:4a:08:c8:70:e4:e6:
         04:29:d4:65:b9:ff:a6:54:90:dd:36:11:60:5d:6d:9c:29:a5:
         aa:92:89:f7:a3:4f:06:2d:a1:54:86:5d:cc:e5:30:3a:83:a0:
         90:af:0e:61:45:a4:6d:d1:03:81:88:12:bf:a4:9b:d8:af:0e:
         3c:c9:80:80:89:fd:45:a9:a3:8e:ca:f6:bd:c7:2e:69:63:0b:
         11:4e:14:c2:09:13:8a:e3:c6:80:c2:2d:ad:2f:46:64:b8:be:
         c7:82:a2:8c:35:7c:1d:16:d9:2c:05:fa:f3:4a:37:c2:43:c4:
         99:e7:78:4b:10:10:32:89:a3:f8:18:f5:87:d8:b7:2a:ad:41:
         77:1a:2b:0f:b5:2f:0b:ec:a1:80:fe:d9:2a:d1:4c:ae:49:e6:
         1f:9b:d1:47:4d:a0:92:9b:02:7b:ff:64:93:a0:b2:ad:8b:28:
         32:be:13:56:54:22:c2:3d:8d:39:1b:b8:15:33:5d:8a:cb:49:
         b2:96:9a:e2:f9:15:81:37:f3:67:a2:45:80:e7:cb:83:8e:35:
         6d:6e:4e:4f:8b:59:22:e2:81:7c:47:91:1f:1c:2a:4e:dd:64:
         32:61:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:05 2024 by rpki-client on console-fra.rpki-client.org