Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130322e302f32342d3234203d3e20323733363937.roa
File:                     3138362e3233332e3130322e302f32342d3234203d3e20323733363937.roa (raw, json)
Hash identifier:          q+78W1imY2oa6g+lC077RGcNopmbqhaPH2Zxo5ihBAA=
Subject key identifier:   AB:AB:08:B5:35:15:27:65:2B:27:DA:17:70:33:97:FE:45:92:4F:0B
Certificate issuer:       /CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
Certificate serial:       7F1A30F3A859E730C955CA02819C088C561F86E6
Authority key identifier: 48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130322e302f32342d3234203d3e20323733363937.roa
Signing time:             Tue 10 Sep 2024 15:15:18 +0000
ROA not before:           Tue 10 Sep 2024 15:10:18 +0000
ROA not after:            Tue 09 Sep 2025 15:15:18 +0000
asID:                     273697
IP address blocks:        186.233.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl
                          rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1a:30:f3:a8:59:e7:30:c9:55:ca:02:81:9c:08:8c:56:1f:86:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
        Validity
            Not Before: Sep 10 15:10:18 2024 GMT
            Not After : Sep  9 15:15:18 2025 GMT
        Subject: CN=ABAB08B5351527652B27DA17703397FE45924F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:8b:7f:74:33:77:d5:6b:cf:08:d6:89:4d:
                    4d:b6:a4:c6:7d:13:e9:1c:a0:df:e4:4b:c0:6b:ca:
                    04:4d:5e:d2:2e:bc:b1:e3:e9:88:9a:b2:27:94:87:
                    4c:41:38:46:71:78:b3:29:78:68:e0:3b:70:a1:38:
                    4d:87:9d:5b:27:b7:4a:06:20:12:58:54:cc:6f:9e:
                    d3:4b:fc:9d:9d:75:3f:e5:c7:c1:fe:81:45:43:e5:
                    64:41:77:63:16:4f:f1:04:24:a2:49:11:32:b3:a9:
                    0d:3f:6b:32:9c:7f:cc:f5:e0:1c:04:b2:01:6b:bf:
                    36:fa:94:56:4d:96:4c:b5:b0:1e:b3:da:94:55:37:
                    f7:33:17:4c:86:a8:44:a1:52:92:18:80:2c:46:11:
                    f7:62:f6:0b:0a:65:ce:a5:7e:7c:b0:f7:94:bf:96:
                    1e:a0:db:5a:6f:33:5c:fd:bf:a4:ed:e0:c8:8d:38:
                    97:33:d5:4d:79:eb:5d:60:ce:fa:48:2b:73:ce:33:
                    ec:06:63:19:c3:d8:02:84:a2:5c:f2:10:aa:a3:d8:
                    40:ab:3e:de:5a:cd:ed:94:c5:95:47:be:b8:0f:89:
                    fc:b8:c0:9a:22:99:09:fe:26:cf:28:a4:ff:5c:59:
                    43:bd:34:07:45:0a:27:9b:d5:3f:75:19:b9:bd:b2:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:08:B5:35:15:27:65:2B:27:DA:17:70:33:97:FE:45:92:4F:0B
            X509v3 Authority Key Identifier:
                keyid:48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130322e302f32342d3234203d3e20323733363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:13:69:67:49:1b:b3:b9:5d:9f:1e:ee:71:97:43:bf:b1:
         da:f0:57:5f:6f:63:70:08:4f:0c:97:37:f9:65:5b:b9:0e:13:
         90:28:1a:f5:d7:52:99:25:0e:20:08:fe:f4:5a:53:0e:13:35:
         3c:39:e3:d4:39:ec:e5:40:1d:06:dc:5c:86:8b:c9:0c:0f:a1:
         8d:7e:f2:e1:d6:78:40:7d:9a:c5:3d:b2:0c:d5:0c:b1:ad:a8:
         ec:18:f9:34:6e:ad:8b:61:af:1d:03:f2:40:d3:90:6c:80:60:
         1a:da:8e:1a:c5:71:50:a1:ad:d4:60:66:2f:04:a8:a6:a4:8a:
         ee:7d:48:7f:bf:a4:24:03:d2:c2:47:e4:df:fe:83:fb:89:ad:
         96:04:ca:38:ee:61:f3:88:f5:8a:87:e1:30:e7:b8:b0:1a:81:
         01:5e:55:94:85:58:c4:4f:88:71:c0:5d:88:16:a6:3c:c1:82:
         d3:fb:77:fd:78:72:a1:46:02:ea:c7:8f:69:8b:63:6b:7f:b9:
         6f:55:b8:68:0c:09:7a:72:f5:3e:22:81:c7:7f:2e:66:e5:89:
         45:8c:c2:96:e7:de:d8:77:8b:6a:5f:e9:6a:f6:a5:e2:40:aa:
         25:1e:34:8c:dc:47:f6:72:46:83:93:b2:8d:51:f8:72:70:39:
         23:4e:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org