Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
File:                     3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          iuHnqhnDppieH096L0d0RFexg/yh857X3MqJN3UJPko=
Subject key identifier:   F4:E9:42:32:D0:8F:0A:FC:AF:28:92:7A:5E:BD:75:DB:3A:B7:07:CE
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       1A59535E2AD01723E57E3398435CA56CC8A7C117
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:03:41 +0000
ROA not before:           Mon 25 Nov 2024 16:58:41 +0000
ROA not after:            Mon 24 Nov 2025 17:03:41 +0000
asID:                     28667
IP address blocks:        186.250.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:59:53:5e:2a:d0:17:23:e5:7e:33:98:43:5c:a5:6c:c8:a7:c1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:41 2024 GMT
            Not After : Nov 24 17:03:41 2025 GMT
        Subject: CN=F4E94232D08F0AFCAF28927A5EBD75DB3AB707CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:80:4f:b6:02:ed:96:98:94:5c:51:52:03:
                    1f:8a:0f:e0:2f:08:3e:1d:a1:a0:7b:ba:93:3b:cf:
                    91:a9:30:6b:ea:3d:ae:08:32:c3:e6:fc:91:02:b7:
                    6f:63:99:b0:f9:48:2d:8f:79:bc:5a:90:11:3c:04:
                    59:7b:5c:ce:79:17:49:05:ad:2f:b8:a5:47:1b:d7:
                    55:d6:ae:ad:d3:f1:10:89:e4:e5:fc:6a:78:14:3a:
                    49:80:75:69:f0:b6:3f:79:b0:9a:90:0e:0c:68:d5:
                    93:dc:dc:23:48:1b:e2:04:7c:5b:81:f2:fd:4c:ea:
                    bf:27:66:71:0e:78:ed:43:82:4f:cf:a5:70:9c:d8:
                    f1:8f:2c:48:a6:e1:e6:a6:37:2f:2b:ef:bd:8e:a3:
                    51:80:b1:82:d2:39:83:3e:4a:20:ce:32:ce:84:fb:
                    37:ed:f4:6f:c9:e4:06:c3:63:0e:31:b4:17:19:2d:
                    e1:0e:7f:95:90:64:a2:dd:d0:e4:23:56:ff:33:83:
                    32:b0:8f:7c:67:36:41:47:f6:05:e1:86:39:02:01:
                    a4:3d:50:1b:5f:ac:c8:2b:49:a8:ed:4f:3f:26:d3:
                    7e:54:c9:df:cd:0f:ef:38:8f:98:b5:ff:f7:4a:e6:
                    6a:be:54:ce:53:3a:1c:03:26:94:49:78:20:dd:e3:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:42:32:D0:8F:0A:FC:AF:28:92:7A:5E:BD:75:DB:3A:B7:07:CE
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138362e3235302e3230382e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:41:ae:e0:79:03:9b:aa:76:ca:a6:f9:ac:eb:82:f4:69:
         14:b6:06:00:a3:fd:ca:7f:c4:3f:6c:b1:6d:da:91:71:2e:6a:
         fc:af:43:ed:ca:99:7e:80:ee:c3:4a:16:cd:a9:07:f4:d6:0d:
         a9:73:c0:f2:44:2e:cd:82:95:9b:d0:d4:68:94:e1:31:f1:5d:
         41:ed:2d:d6:6b:19:31:f0:c2:d8:33:86:8d:d8:a9:1d:e9:64:
         35:dc:12:57:0f:46:4a:33:d5:8a:7d:da:75:a9:c0:ba:28:4e:
         1c:19:51:41:e0:48:4d:a4:9c:14:1a:29:dd:74:c5:c4:69:35:
         68:e1:53:fe:33:89:05:7b:0f:c2:60:70:a8:18:e6:6c:0b:05:
         93:91:99:fc:c2:35:53:b9:9e:e5:e6:a0:3e:6c:a5:d2:ec:39:
         f5:de:7a:43:2d:c6:c9:26:10:e9:3c:e8:77:1e:6e:b9:09:18:
         f5:c9:80:27:b8:aa:25:c5:8e:6e:c4:21:6a:6a:ae:d7:ff:88:
         0d:f3:18:69:02:ba:b7:84:70:8c:76:66:8f:f7:a3:6e:b6:3f:
         98:a3:e1:73:48:e9:c2:bf:12:f9:49:fd:aa:96:45:70:29:4b:
         af:4d:56:35:1c:22:6c:d3:64:9e:32:d8:af:da:65:96:4a:7f:
         5a:0f:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org