Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130332e302f32342d3234203d3e20323733363937.roa
File:                     3138362e3233332e3130332e302f32342d3234203d3e20323733363937.roa (raw, json)
Hash identifier:          wApdpWAl8XUd46TklKFbbfY311EQqeQVLKLDV+ejRXs=
Subject key identifier:   69:20:8B:A7:2F:56:E4:04:9F:37:15:C3:F0:FB:CA:34:98:76:BD:D1
Certificate issuer:       /CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
Certificate serial:       25E300140682CFD4DA80CC802F661D5B6A5CD356
Authority key identifier: 48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130332e302f32342d3234203d3e20323733363937.roa
Signing time:             Tue 10 Sep 2024 15:15:18 +0000
ROA not before:           Tue 10 Sep 2024 15:10:18 +0000
ROA not after:            Tue 09 Sep 2025 15:15:18 +0000
asID:                     273697
IP address blocks:        186.233.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl
                          rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e3:00:14:06:82:cf:d4:da:80:cc:80:2f:66:1d:5b:6a:5c:d3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
        Validity
            Not Before: Sep 10 15:10:18 2024 GMT
            Not After : Sep  9 15:15:18 2025 GMT
        Subject: CN=69208BA72F56E4049F3715C3F0FBCA349876BDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:3c:d6:19:bf:a7:9d:f7:74:1b:a4:13:e6:
                    32:9d:b8:a1:60:d7:cd:72:03:6e:26:80:83:d6:02:
                    b2:f6:a3:67:d5:c3:17:20:bd:48:66:7f:a0:e7:fb:
                    28:fa:22:5c:2c:43:0f:df:1f:81:48:c5:e5:c5:e2:
                    9f:a6:70:37:3d:31:bc:48:4c:9d:28:e8:2e:7d:78:
                    c7:77:dd:d0:2f:71:c0:31:1c:34:a6:19:a7:4a:c2:
                    e2:af:09:06:de:46:10:ce:5c:c2:c1:4d:ed:9c:7b:
                    5f:d8:fd:31:68:6c:d2:45:f6:c7:ba:cd:81:62:c8:
                    96:5a:94:b0:02:e3:51:37:f0:7b:73:73:ca:06:00:
                    43:7a:83:71:ac:a3:f5:86:54:ae:3c:fb:c5:6c:a9:
                    6c:13:bc:ba:3d:a4:7f:9a:59:25:4d:fb:5c:c0:59:
                    e2:86:ed:7e:bc:01:87:e8:0e:19:77:8f:65:25:d2:
                    ef:a6:ae:d9:63:bc:73:4a:3a:25:1b:e5:79:d1:55:
                    c9:2e:e6:0f:d3:b6:7d:08:e2:15:bb:98:14:d5:f7:
                    0a:f3:d5:4b:45:5d:eb:f3:01:e1:57:45:83:a0:e7:
                    e8:2e:81:cf:97:aa:16:67:6b:71:86:2e:32:eb:87:
                    2a:6e:5f:42:65:3c:67:93:a1:53:79:96:4d:7e:cd:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:8B:A7:2F:56:E4:04:9F:37:15:C3:F0:FB:CA:34:98:76:BD:D1
            X509v3 Authority Key Identifier:
                keyid:48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/3138362e3233332e3130332e302f32342d3234203d3e20323733363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:a4:30:43:0b:4a:03:70:21:ec:d1:4e:26:1f:92:7e:6f:
         9d:11:4d:5d:e2:82:15:b5:d7:0f:1c:25:76:77:fb:af:93:d3:
         cb:c4:a8:86:d4:e8:b3:ed:7a:7f:e1:d1:88:d4:5a:a2:f8:a4:
         89:26:d4:a2:cb:bb:2d:10:00:be:27:6e:2d:ef:5d:2b:d3:f1:
         1b:cf:49:e1:80:c6:9a:d7:46:3b:28:75:eb:ed:ab:30:95:44:
         a1:93:7b:99:c1:e7:63:bd:aa:d6:2c:84:48:a7:61:e6:6a:d2:
         30:1c:a1:7b:9d:62:93:61:19:c0:4e:99:7a:14:79:de:fe:37:
         72:97:4d:61:65:c4:9c:df:a8:ab:0d:6a:5f:2f:1f:80:76:90:
         fd:d8:ed:42:bb:78:6d:00:11:6e:c7:1c:ea:43:e7:70:74:4d:
         18:60:00:5e:b2:0a:7c:14:6a:a7:af:1e:60:2f:ca:54:a1:ec:
         22:89:f7:df:43:11:58:d5:e9:78:57:41:ce:b5:a2:b0:2c:55:
         c6:67:5a:4f:4d:f5:e2:88:02:91:c5:c0:c1:c3:b3:fb:56:a7:
         39:63:ad:cd:88:cb:04:87:fb:75:7e:6f:53:5c:4d:7d:1c:df:
         94:ce:b5:bf:eb:23:c0:e5:ff:09:15:31:27:4a:13:c3:4c:3c:
         b7:ab:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org