Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130322e302f32332d3233203d3e20323733363937.roa
File:                     3138362e3233332e3130322e302f32332d3233203d3e20323733363937.roa (raw, json)
Hash identifier:          8Qaua9dNdEWBhZXdu7x9TMMKEHS4krCt3mJ9pgT1uf8=
Subject key identifier:   BD:55:F2:EB:8D:C7:A3:9E:BB:10:5B:EB:2A:C7:ED:D5:17:98:7C:EF
Certificate issuer:       /CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
Certificate serial:       1E802C1E76D523B4666F04F88A6133B7968F4260
Authority key identifier: 48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130322e302f32332d3233203d3e20323733363937.roa
Signing time:             Tue 10 Sep 2024 15:15:18 +0000
ROA not before:           Tue 10 Sep 2024 15:10:18 +0000
ROA not after:            Tue 09 Sep 2025 15:15:18 +0000
asID:                     273697
IP address blocks:        186.233.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl
                          rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:80:2c:1e:76:d5:23:b4:66:6f:04:f8:8a:61:33:b7:96:8f:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
        Validity
            Not Before: Sep 10 15:10:18 2024 GMT
            Not After : Sep  9 15:15:18 2025 GMT
        Subject: CN=BD55F2EB8DC7A39EBB105BEB2AC7EDD517987CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:6c:4d:72:c9:5c:cc:a5:dc:b2:ce:cd:2f:
                    16:27:bd:f4:b2:88:79:3c:32:f5:46:0e:7c:df:22:
                    01:43:35:41:15:0d:28:96:69:f0:4b:63:0c:1e:03:
                    2d:8e:80:8b:59:36:32:80:8d:21:2a:fa:d1:98:86:
                    a2:df:5d:6a:c2:f3:ad:da:6a:8f:67:ba:45:12:dd:
                    f3:50:cc:46:dc:d4:15:90:65:6e:cc:b0:48:17:ac:
                    d1:f1:6d:a0:7d:8b:70:fe:b4:8a:fc:ae:c2:4a:d1:
                    61:c7:11:8f:f5:f4:99:91:58:7d:bc:86:14:af:c4:
                    5f:66:73:01:ec:1e:cd:27:69:b4:2c:12:c1:a4:b7:
                    5b:40:c8:5b:aa:d9:4b:c5:3f:0c:5d:d6:c7:f6:66:
                    af:3c:6d:56:61:f3:47:76:45:25:25:e0:a0:5e:df:
                    a4:04:da:de:cf:c5:59:c5:b0:79:b2:74:8e:1c:5c:
                    9a:93:5f:7e:4f:99:09:f5:93:be:3e:c5:30:bb:60:
                    9a:92:0b:02:1a:16:57:44:36:ff:b7:ac:37:6d:41:
                    7e:fc:d7:0c:50:c5:b7:46:1b:46:fc:13:d6:97:e8:
                    6e:bf:5e:8e:0a:4e:97:1d:38:8f:eb:9b:83:e9:e8:
                    ec:65:5b:f3:ff:87:4e:5b:f7:af:19:7d:39:af:cc:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:F2:EB:8D:C7:A3:9E:BB:10:5B:EB:2A:C7:ED:D5:17:98:7C:EF
            X509v3 Authority Key Identifier:
                keyid:48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130322e302f32332d3233203d3e20323733363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:52:b9:1b:bb:6f:75:e6:35:15:66:90:e5:c3:32:95:6a:
         6e:da:ba:93:48:ab:16:fd:1c:ee:96:2b:59:d3:f6:8d:4a:7b:
         9d:52:98:42:e7:d6:42:71:87:55:c1:a0:ac:77:40:83:7a:3e:
         3f:8b:3c:12:65:db:ba:58:a8:47:64:a6:66:61:a5:83:cc:e2:
         1c:a2:09:5f:7e:c1:3f:23:2d:9a:35:e1:f6:78:8b:fe:54:ec:
         d7:0c:be:3c:20:85:7e:e5:15:bd:cc:ec:46:0e:92:35:0c:de:
         9c:0b:a1:8b:c9:47:50:23:33:1a:3f:3b:ed:25:68:0e:6f:24:
         54:40:96:93:88:7f:d6:2e:fb:a0:0a:4d:7f:8f:01:96:94:c7:
         97:42:ef:6f:18:ef:0b:1d:9c:91:a6:3d:b4:a1:17:c1:5a:9c:
         de:b2:a2:bc:fb:09:25:5d:0f:71:95:ae:90:fc:d6:b4:f9:c5:
         af:86:82:7c:a0:99:a1:fe:d5:04:ab:ed:14:b0:1f:b8:2c:3f:
         4b:d1:f0:5c:09:92:48:5d:f8:06:f6:e4:de:cc:fa:db:d7:f0:
         06:77:fc:a5:1e:9d:0d:64:3f:f8:71:c3:e7:25:5e:3d:ee:02:
         d5:fe:94:05:b3:64:69:e5:87:7e:c0:cd:94:77:37:7d:e5:fe:
         e1:de:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org