Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa
File:                     3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          0uGpbQdBUv3lGsKdSWLsRCWdUBaADZjmImQFAcB1Tdg=
Subject key identifier:   8D:FD:46:69:B6:D5:30:03:CD:96:05:D8:A0:23:B0:81:A4:5D:EF:C7
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       558755C0A9FCCD10950AD994109B019252D6F5EA
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:02 +0000
ROA not before:           Mon 25 Nov 2024 16:59:02 +0000
ROA not after:            Mon 24 Nov 2025 17:04:02 +0000
asID:                     28669
IP address blocks:        186.225.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:87:55:c0:a9:fc:cd:10:95:0a:d9:94:10:9b:01:92:52:d6:f5:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:02 2024 GMT
            Not After : Nov 24 17:04:02 2025 GMT
        Subject: CN=8DFD4669B6D53003CD9605D8A023B081A45DEFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:7d:25:91:93:c3:bc:1b:72:cf:ec:ad:65:
                    49:87:17:39:98:61:5d:c5:22:ad:97:22:79:75:33:
                    2a:90:4c:e0:49:3c:08:ce:47:4d:bc:32:d5:0b:7d:
                    d9:93:6d:08:66:3b:be:63:ff:8d:d7:ca:73:cd:65:
                    4a:9f:dd:61:0a:3c:89:c3:4e:20:05:38:f1:49:ab:
                    08:85:21:41:75:59:3d:3c:cb:26:e4:04:77:81:32:
                    e1:49:7b:ca:4d:f1:cd:d3:02:ee:ef:5a:5b:30:a7:
                    67:6a:01:16:f6:34:1e:a5:4b:33:49:61:40:9e:e4:
                    3f:65:f2:f8:7a:f8:77:1d:b1:1f:15:15:71:12:96:
                    46:e4:b8:f1:1b:af:a4:d8:47:23:44:a2:b4:c0:df:
                    25:cb:f2:7d:bf:ed:85:1b:f5:67:c0:ff:a9:ac:52:
                    86:86:0b:4f:68:c2:34:d5:9f:9f:f4:36:60:64:fe:
                    eb:95:36:52:d8:04:5e:df:d4:56:6c:5b:8e:21:f0:
                    d8:a6:44:fa:74:76:ac:bb:e2:85:83:6c:5f:5a:c1:
                    3a:83:13:bc:c6:9e:da:e3:1c:0a:95:5d:6b:48:48:
                    db:ed:31:13:e3:32:1f:48:a7:92:5c:3d:2a:2d:6d:
                    e0:0c:46:02:7f:cf:4e:b7:cf:ff:1f:2a:8d:93:e9:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:46:69:B6:D5:30:03:CD:96:05:D8:A0:23:B0:81:A4:5D:EF:C7
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3232352e3131322e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:60:42:fb:c4:ac:f4:4f:ca:5f:ac:9b:ae:b8:f7:35:1f:c6:
         bb:89:fc:26:33:1b:c5:a4:bf:83:41:b6:70:e0:c4:22:34:ec:
         84:f0:d3:82:7c:52:df:37:ee:57:bf:70:82:f0:74:f0:38:3b:
         ea:59:92:85:ff:0c:e9:05:f7:57:77:1f:f2:13:51:34:d9:e2:
         2e:30:cf:78:e4:ec:01:17:cb:9f:ed:51:13:ee:17:d4:84:dd:
         25:f4:f0:e7:aa:a5:ed:2e:49:f8:7f:3a:ce:84:d1:4e:74:e5:
         a2:93:78:46:db:ae:e9:c4:b5:c7:cb:a3:e3:12:ac:c6:97:78:
         c0:ea:e5:e0:75:d9:3b:bb:79:67:cb:81:8c:42:7a:bb:50:55:
         cd:5b:45:9b:27:9f:81:7f:ca:b3:ea:ca:fb:80:6c:41:f1:cb:
         ab:4a:05:22:4c:1b:f4:d2:ee:0f:a0:ec:c8:1f:48:2c:af:f4:
         72:d4:16:f6:60:43:2f:15:0e:ed:30:21:67:09:fd:06:c0:7b:
         1c:ab:89:ae:62:10:69:6b:62:00:e2:b7:f2:bb:fa:ca:b4:f6:
         83:0c:55:d1:61:bb:5b:2c:33:a3:25:04:87:ce:7e:e1:d5:ad:
         2c:e2:10:15:dc:1c:2f:17:1b:a7:3c:7d:11:ad:b6:a5:3e:84:
         a0:dc:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org