Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/3133382e39342e3139322e302f32322d3234203d3e20323634313836.roa
File:                     3133382e39342e3139322e302f32322d3234203d3e20323634313836.roa (raw, json)
Hash identifier:          wgfG/yPQr0fLc09mLuX14knyP4e8UdWH10lw2m11CCg=
Subject key identifier:   CC:08:44:B1:3E:DF:A8:6A:78:B5:71:57:C2:D4:0F:C1:DF:CA:41:2F
Certificate issuer:       /CN=86160D26C9FFA6E6DC351A634D107BD6D498A694
Certificate serial:       6E0487BC52C71A7AEFCDC48763E51E60A209D45F
Authority key identifier: 86:16:0D:26:C9:FF:A6:E6:DC:35:1A:63:4D:10:7B:D6:D4:98:A6:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/3133382e39342e3139322e302f32322d3234203d3e20323634313836.roa
Signing time:             Thu 04 Apr 2024 05:14:20 +0000
ROA not before:           Thu 04 Apr 2024 05:09:20 +0000
ROA not after:            Thu 03 Apr 2025 05:14:20 +0000
asID:                     264186
IP address blocks:        138.94.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.crl
                          rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:04:87:bc:52:c7:1a:7a:ef:cd:c4:87:63:e5:1e:60:a2:09:d4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86160D26C9FFA6E6DC351A634D107BD6D498A694
        Validity
            Not Before: Apr  4 05:09:20 2024 GMT
            Not After : Apr  3 05:14:20 2025 GMT
        Subject: CN=CC0844B13EDFA86A78B57157C2D40FC1DFCA412F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:bb:db:4d:54:91:ae:7c:57:82:96:8d:f4:
                    e2:a8:ae:49:73:d9:99:bc:b7:61:95:14:a9:fc:7b:
                    ea:a6:d1:ba:ad:52:c8:41:5f:17:2b:a4:7a:a4:5e:
                    44:d6:63:13:42:08:7c:92:9e:94:51:76:38:96:3b:
                    2b:74:c2:63:fe:11:5e:53:2c:c4:6a:f7:a9:dd:94:
                    07:53:51:73:73:56:0b:d8:61:a5:b1:c4:6f:b2:c2:
                    ca:8a:35:96:b3:8b:75:b0:de:5c:4d:d0:1d:4b:ed:
                    3c:a2:54:a7:cb:77:c3:05:69:c1:3a:c6:31:93:50:
                    1c:66:98:93:f7:1f:9d:d6:65:9e:10:33:2f:ea:13:
                    27:13:17:4b:1b:07:b3:2d:eb:87:7d:9c:00:1c:9f:
                    c5:1f:68:10:89:fc:d8:02:e3:41:43:d5:f4:23:df:
                    20:00:aa:03:64:39:f7:06:7e:85:0d:7f:eb:5b:44:
                    89:bd:0c:82:d0:e4:ea:18:52:15:5a:2c:f1:a8:43:
                    56:7a:07:4a:e6:cb:7b:c2:c0:f1:34:4f:71:f3:2a:
                    eb:d7:e8:39:8e:c5:aa:78:4b:f1:95:80:7f:f4:f0:
                    e1:43:74:01:0a:c0:1c:de:78:6f:db:28:86:13:dc:
                    ff:cb:2c:6c:03:14:10:d2:15:1f:94:e0:2f:b9:d3:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:08:44:B1:3E:DF:A8:6A:78:B5:71:57:C2:D4:0F:C1:DF:CA:41:2F
            X509v3 Authority Key Identifier:
                keyid:86:16:0D:26:C9:FF:A6:E6:DC:35:1A:63:4D:10:7B:D6:D4:98:A6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/3133382e39342e3139322e302f32322d3234203d3e20323634313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:75:be:5b:db:ec:e8:34:df:4d:9a:3d:79:af:02:d9:53:
         62:0b:7d:5f:b8:6c:4c:22:30:df:f8:3c:49:64:4d:36:2e:b8:
         6c:97:d1:d0:86:08:3b:96:30:17:87:b4:2b:2b:56:12:2d:92:
         78:5a:42:db:d1:40:2b:df:a4:f5:75:d3:02:c0:e4:b2:b9:dd:
         d3:b4:44:de:51:9b:0d:f8:05:d4:16:2b:a4:28:7b:e3:27:60:
         59:96:fd:57:53:15:88:3f:45:37:90:da:76:88:6d:7a:18:e6:
         c9:ef:8f:40:aa:cc:0f:cc:f3:3c:c6:1e:40:6f:63:45:af:42:
         35:93:8b:99:46:df:f3:9a:48:ec:50:ed:1a:cf:a0:0c:2c:4b:
         4b:f3:a4:41:31:d3:07:31:1d:de:3d:44:d0:31:fc:43:f5:d9:
         33:40:7f:73:73:4e:e7:95:4b:ac:ae:ef:04:3d:23:f6:3e:fd:
         cb:3d:fc:b0:36:8d:8e:17:01:b3:ad:cb:a3:ad:d5:da:2a:eb:
         af:da:93:e6:53:df:df:8a:37:57:90:f7:2c:47:2a:7f:2a:04:
         10:0b:6a:dd:8c:ec:e4:6a:98:8f:89:b6:80:0b:f6:6b:c0:d5:
         b2:38:2c:d3:0f:3a:53:f9:36:c7:6b:2c:60:4e:68:89:8a:b4:
         7a:86:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org