Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
File:                     3138362e3233362e39362e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          P6l0Qz7mRd0kyDSnyDm+J4w7VLADk4v/WR6q7dbUOxU=
Subject key identifier:   8C:00:C6:98:42:E5:43:CA:0D:02:8D:0F:78:A9:A7:21:CF:29:F6:74
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       2A8B1C4FA1E2EADAF82D7F9F5E0CF582104876E3
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:03:51 +0000
ROA not before:           Mon 25 Nov 2024 16:58:51 +0000
ROA not after:            Mon 24 Nov 2025 17:03:51 +0000
asID:                     28667
IP address blocks:        186.236.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8b:1c:4f:a1:e2:ea:da:f8:2d:7f:9f:5e:0c:f5:82:10:48:76:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:51 2024 GMT
            Not After : Nov 24 17:03:51 2025 GMT
        Subject: CN=8C00C69842E543CA0D028D0F78A9A721CF29F674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:e3:9b:52:8e:5d:00:f7:8f:bc:d5:c4:74:
                    7f:4b:fb:e7:e4:fc:29:fb:cb:2a:fb:b1:6b:87:8d:
                    0f:a2:98:5d:b8:22:e9:3e:09:07:95:c7:63:af:fa:
                    e6:5b:0e:0b:2e:c5:b2:8f:05:57:4c:b3:26:18:cc:
                    d0:69:7f:09:60:73:03:48:35:7d:a2:0d:3f:1d:7b:
                    bd:ae:b0:2b:10:f7:dc:04:fc:9d:12:b5:81:26:65:
                    27:4b:db:b4:0c:86:2d:66:0d:36:4c:58:82:72:bf:
                    f6:cd:90:3f:52:45:60:bd:b2:65:a5:ee:89:a9:f7:
                    b8:69:4c:50:bf:7b:79:e1:42:f4:1f:bd:15:5f:cc:
                    21:96:5c:12:ad:1d:54:e9:a1:f5:0f:a4:dc:21:0c:
                    74:d0:f5:a0:0e:18:44:01:97:50:dc:fa:f6:9e:f9:
                    03:46:e5:5e:01:24:74:97:f8:4b:4f:52:ee:89:3e:
                    b9:ad:79:56:3f:0f:f9:18:76:68:8b:16:e7:36:10:
                    6d:6f:89:81:da:d0:44:da:a1:d2:d6:b7:eb:42:88:
                    c3:11:ca:a4:a0:41:48:a9:82:c3:ca:4c:dd:6d:c0:
                    49:d1:70:25:54:43:0f:3b:3b:01:c3:4e:dc:71:53:
                    32:f1:4a:29:4b:66:fd:1a:2f:84:36:e3:73:f8:c6:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:C6:98:42:E5:43:CA:0D:02:8D:0F:78:A9:A7:21:CF:29:F6:74
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:01:ad:fe:a8:40:c8:0b:d9:f6:e4:b3:27:8e:13:5f:0d:9a:
         db:5a:39:77:c0:e9:02:db:26:c2:65:3c:7a:d6:ec:4a:47:c6:
         cb:54:1d:06:e1:02:af:bb:3b:a6:83:17:da:22:9c:3b:24:28:
         df:31:b3:a5:f7:6d:78:1f:eb:ee:c2:cb:a6:65:4f:3e:32:04:
         81:d1:85:a9:c0:fe:fa:7b:4d:8c:37:b6:52:bb:93:91:7d:1b:
         45:24:95:0a:fb:b8:97:d1:8b:3f:3a:dc:d6:8b:11:3e:04:6d:
         cf:15:21:60:6f:b8:7b:5b:76:dd:dd:ba:92:16:f0:2d:1c:7f:
         c3:0b:8a:53:8a:e5:05:b1:77:4f:e3:13:dc:2f:f4:72:e6:ef:
         ae:84:f3:93:06:34:53:ba:7d:5f:2d:00:79:59:e8:f9:ea:df:
         92:f0:59:ef:ae:b2:58:fa:1a:c3:da:fe:eb:64:67:c4:3b:4e:
         81:ac:10:20:00:bb:fa:78:47:1c:58:9e:eb:3f:9c:a5:71:98:
         33:02:06:75:74:f0:c3:39:b8:f7:ad:ed:47:39:9a:19:e9:5f:
         09:8f:9e:60:49:99:55:74:2b:f7:56:e0:14:c6:0c:0c:89:54:
         b9:30:c8:69:b4:e1:ca:f1:84:d7:3f:f6:4f:2f:11:86:e7:64:
         16:a1:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org