Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa
File:                     3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa (raw, json)
Hash identifier:          fxrwjmPyQRU0xOdebHAazZIJGZ/IdixN7R72tmJtz3w=
Subject key identifier:   66:46:6E:E4:4B:E7:A0:74:CE:70:08:4B:F7:22:F0:29:7F:C6:77:CF
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       751B033E5EE9F9474C8E48CE960C1E75852DA8B4
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa
Signing time:             Mon 25 Nov 2024 17:03:38 +0000
ROA not before:           Mon 25 Nov 2024 16:58:38 +0000
ROA not after:            Mon 24 Nov 2025 17:03:38 +0000
asID:                     53171
IP address blocks:        186.224.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:03:3e:5e:e9:f9:47:4c:8e:48:ce:96:0c:1e:75:85:2d:a8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:38 2024 GMT
            Not After : Nov 24 17:03:38 2025 GMT
        Subject: CN=66466EE44BE7A074CE70084BF722F0297FC677CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:6d:69:fb:9e:a1:93:83:3c:98:c5:d5:62:
                    24:71:eb:59:3e:9a:05:a0:df:1e:c4:6b:80:c0:9f:
                    03:1d:45:b2:4a:96:c1:b7:2f:b6:bf:e5:67:9e:16:
                    b0:35:90:c1:72:96:15:b9:ac:6d:81:1d:6b:a4:5f:
                    16:a0:f6:a7:4b:b2:97:67:bd:0b:3a:86:17:5e:0f:
                    2d:c6:8a:2f:00:21:ca:5f:0a:0c:a5:e2:ba:44:bd:
                    f9:36:aa:cc:07:ca:5a:19:69:b4:4c:19:88:59:fd:
                    c1:88:37:26:74:02:9d:f7:cc:56:76:f0:55:9b:9d:
                    11:92:3d:6e:11:06:18:b9:80:ef:af:e1:67:fa:37:
                    4d:15:b7:c5:d9:c7:82:26:39:0c:18:ff:40:f2:a3:
                    b1:c5:d3:ec:ce:0c:e4:de:2b:3a:82:68:4e:26:bf:
                    5b:41:5f:67:dc:9e:40:db:80:bb:b2:d3:fd:7d:b9:
                    8c:83:7c:86:98:b1:70:8e:71:4d:90:af:91:ff:7c:
                    35:f3:c6:50:fb:fb:d5:b6:cd:bc:67:4f:94:4b:1f:
                    81:94:09:ae:7f:a2:23:74:21:7f:3f:25:2d:3e:b6:
                    e7:a4:9d:f0:c4:f7:28:0a:2f:16:b3:ed:7b:b9:22:
                    3c:a8:25:c3:29:79:f8:33:2d:d7:73:5b:38:dd:a1:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:6E:E4:4B:E7:A0:74:CE:70:08:4B:F7:22:F0:29:7F:C6:77:CF
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3232342e3232342e302f32302d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:48:f7:ee:cf:cc:a8:50:ae:89:02:d7:e9:c8:03:cc:3b:
         6b:b3:59:d1:3e:97:c8:10:1a:cf:66:4b:1c:5e:0f:de:40:f1:
         5f:7e:f7:0a:06:23:53:09:03:57:23:f2:d7:f0:2a:08:e7:73:
         d7:bb:d6:ea:0d:80:18:07:2f:c9:b7:d0:98:c6:2f:2e:a0:ad:
         50:7c:74:0e:b1:7b:f1:3a:71:5b:ae:a8:de:49:45:6e:a4:7e:
         57:01:4a:46:b0:68:0d:da:23:e3:a0:1a:be:1b:dc:d7:b1:86:
         cb:11:5e:3a:f2:57:47:17:5d:21:dc:b7:2a:ab:78:17:69:3b:
         f4:a7:5a:6c:13:05:e2:c9:c0:b3:09:fb:87:59:aa:90:2d:40:
         96:1f:84:25:13:78:7b:5c:6c:36:49:66:48:da:9d:e7:f5:90:
         01:51:53:2d:d4:39:d8:ff:fd:bc:a7:7c:fa:85:98:62:3c:d6:
         a2:df:38:d2:de:8e:62:c7:87:a4:3a:d1:23:53:b0:88:25:12:
         75:39:0d:db:11:91:56:be:c6:fc:5b:5f:ec:8c:f3:8f:74:62:
         c4:96:10:4a:99:34:53:7a:eb:5b:7b:f6:5f:65:98:79:6f:4a:
         83:41:6e:b0:fa:35:d5:a4:6e:e3:1d:5e:59:38:55:c6:df:d2:
         c1:47:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org