Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          OMaCENQnIWdQQ5KBxthA295Dlz4IGfgA1NYm8zvFCXA=
Subject key identifier:   D0:46:F9:9F:20:A8:1C:46:C2:68:3C:E9:1C:A6:FD:FA:42:DC:67:5E
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       07E772317E90639F59353BE2F8F8AD694FA793B6
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:03:47 +0000
ROA not before:           Mon 25 Nov 2024 16:58:47 +0000
ROA not after:            Mon 24 Nov 2025 17:03:47 +0000
asID:                     28669
IP address blocks:        186.195.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e7:72:31:7e:90:63:9f:59:35:3b:e2:f8:f8:ad:69:4f:a7:93:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:47 2024 GMT
            Not After : Nov 24 17:03:47 2025 GMT
        Subject: CN=D046F99F20A81C46C2683CE91CA6FDFA42DC675E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:c1:b8:f8:23:cc:7e:37:3c:f2:df:b5:9f:
                    49:82:de:3f:54:5a:a9:ed:d9:75:1a:d2:85:de:5f:
                    f0:d2:30:ea:6d:65:03:09:4a:ec:01:25:dd:cb:21:
                    9b:5c:01:a5:2f:dc:eb:4f:ed:bf:37:6f:09:73:c4:
                    49:cc:43:67:53:e7:4c:80:03:c4:39:92:11:4e:64:
                    7f:6b:fa:97:1d:3c:0e:3d:5f:24:1a:48:57:ba:b2:
                    3b:d2:bb:d2:28:46:23:45:bc:d0:8d:e6:ee:a9:d8:
                    6d:69:ae:33:5c:0f:2b:12:4f:79:a2:29:8f:8e:f1:
                    18:6c:3b:ea:cd:87:e0:54:ad:f2:d9:20:e1:8c:9e:
                    77:9c:9a:01:1c:0f:3e:55:7d:8e:cd:b4:67:f8:92:
                    0f:25:c4:79:d7:d0:2c:3b:49:89:a8:a7:e3:6a:de:
                    9c:bb:00:9b:c6:1c:93:44:2c:a4:c9:a6:3d:2e:21:
                    a4:bf:83:7d:50:82:09:86:4e:a4:2d:f2:d1:5c:e7:
                    58:6e:a5:da:35:99:1b:6f:67:f7:20:cf:63:0b:23:
                    0e:97:bd:b1:92:48:3e:47:47:c2:8c:ee:69:94:51:
                    dc:33:2b:f1:e2:17:98:7d:7d:dd:f9:b7:44:25:02:
                    74:10:20:c8:1a:da:11:ff:4f:c2:ee:d9:2c:57:45:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:F9:9F:20:A8:1C:46:C2:68:3C:E9:1C:A6:FD:FA:42:DC:67:5E
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:f7:ce:44:96:30:bb:c0:cd:8b:37:8b:ed:79:1d:da:d5:35:
         94:37:ea:e9:25:8e:b1:53:d1:a7:68:ac:68:6a:87:12:80:30:
         ce:95:7c:42:f8:40:cb:68:19:a2:21:25:cc:cb:1b:56:d5:12:
         dd:38:8f:35:23:45:3a:e9:5d:93:96:a1:cd:ff:58:17:72:fe:
         06:9a:9b:74:c0:a2:cc:1a:a5:86:2d:d4:50:48:a5:11:33:33:
         a3:cd:a7:bd:59:68:eb:cd:6b:d0:91:45:71:82:6e:e2:92:99:
         e7:e4:2d:f5:c7:b4:9a:48:e2:ab:b9:d6:9c:3a:6c:76:c5:cc:
         4e:2a:57:4c:2b:f7:41:48:44:3c:38:d6:4e:b9:fe:91:92:22:
         13:cb:01:d6:67:79:9d:f5:04:ea:5c:70:18:b7:af:07:0f:cc:
         bb:a7:63:e8:6f:12:6d:fb:db:0e:df:69:3c:91:4e:73:8d:15:
         64:40:76:ad:52:5f:bd:e5:da:66:c5:ad:b1:17:83:22:d0:cb:
         66:fd:73:ce:fc:bf:31:fd:b4:48:95:23:12:27:fa:26:30:ce:
         0f:8a:42:5b:73:c0:77:ea:f7:69:9f:37:23:7d:e5:d1:aa:4e:
         b7:ee:cf:c1:0b:b7:24:b5:88:4a:df:a8:70:70:9b:ba:af:5c:
         6c:f7:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org