Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
File:                     3138372e38352e302e302f31392d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          4kLp7XK4RL7AAArNtM+AM5q5GExFroMwUYCyOYtBsdU=
Subject key identifier:   86:AE:0E:F6:5A:9F:4A:2B:7D:03:97:E2:48:96:B1:F1:2F:EB:E9:19
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       095A74807B2A8E0C866A12C452B247CB26F048EE
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e38352e302e302f31392d3234203d3e20323632363539.roa
Signing time:             Mon 25 Nov 2024 17:04:27 +0000
ROA not before:           Mon 25 Nov 2024 16:59:27 +0000
ROA not after:            Mon 24 Nov 2025 17:04:27 +0000
asID:                     262659
IP address blocks:        187.85.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5a:74:80:7b:2a:8e:0c:86:6a:12:c4:52:b2:47:cb:26:f0:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:27 2024 GMT
            Not After : Nov 24 17:04:27 2025 GMT
        Subject: CN=86AE0EF65A9F4A2B7D0397E24896B1F12FEBE919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:c3:73:92:55:7d:39:b8:53:fa:f1:9d:e5:
                    c3:6d:f1:ae:7f:e0:2c:97:6e:e6:d3:3a:50:2e:1d:
                    71:16:e6:21:3b:da:d1:a7:66:5e:93:41:c3:0e:82:
                    12:4b:b6:bd:c8:a7:83:8c:b4:98:58:ed:a5:b4:87:
                    66:bf:61:f6:b6:7b:3d:1a:ce:5f:0b:07:73:ed:3c:
                    26:e4:79:09:59:88:2e:3c:0e:ac:53:ae:b1:f5:5d:
                    1a:50:d9:d6:7a:90:0b:2a:ca:49:17:79:e5:a0:bb:
                    64:72:ce:08:01:a4:e4:83:5c:54:db:77:40:01:16:
                    f5:c3:ca:69:34:a9:b9:ba:96:66:6b:d7:63:dc:18:
                    89:5e:25:15:85:c8:9d:6d:36:71:bb:15:49:06:4c:
                    64:d5:41:c4:5e:de:63:71:ce:92:01:6d:08:e0:11:
                    c2:4d:55:9a:af:30:3e:fa:98:be:0f:c3:55:2c:77:
                    97:1c:9c:01:e8:8b:88:56:2c:36:3e:79:3d:1f:1b:
                    d3:de:ff:b2:35:80:f6:bc:c8:86:52:99:4d:3d:98:
                    21:36:da:a5:a1:52:1b:ec:3d:4d:56:32:13:29:e4:
                    4b:17:2d:4c:c6:7a:17:be:1f:d0:4f:46:f6:e6:33:
                    c8:b9:81:a6:49:02:99:4a:d1:de:bd:a1:e3:83:ed:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AE:0E:F6:5A:9F:4A:2B:7D:03:97:E2:48:96:B1:F1:2F:EB:E9:19
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e38352e302e302f31392d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:56:e1:5b:cf:c4:54:0a:a7:a4:f4:26:2d:33:88:f7:67:cf:
         6f:ee:2d:df:3b:db:57:88:58:76:9b:68:63:ae:54:a9:b9:b7:
         95:e2:da:ac:c3:98:d0:b1:33:4f:61:48:83:64:31:44:42:17:
         7d:87:c5:6e:02:18:a7:3f:ff:c0:4a:42:d3:0c:2e:92:b9:f3:
         65:c1:b6:af:10:5f:1a:dc:c6:1c:c2:01:a9:c9:44:4b:81:86:
         27:28:2d:ae:f9:c2:d8:da:7c:bf:81:4e:9e:5c:fa:cd:cb:46:
         ac:f5:1d:6f:d8:f0:59:ba:c1:ab:25:bd:cc:9d:8f:bc:d3:94:
         07:52:a1:1b:d3:e1:ab:31:98:5e:a8:57:0e:d7:13:1a:34:c1:
         98:04:4b:63:b2:9f:d5:47:d9:1e:5d:1f:6d:d9:c8:7f:a0:19:
         ed:21:38:10:95:5f:02:60:a0:e3:21:48:45:82:a6:7d:70:7c:
         58:2f:12:4a:6e:a1:ef:79:89:bf:af:fd:be:07:a7:e7:1d:70:
         46:a8:f7:52:1d:f5:cb:e1:97:c6:ce:9d:a1:78:99:a8:3d:90:
         72:31:7f:2e:49:a6:3b:b2:00:8a:c8:cd:6e:00:03:30:b9:1e:
         7d:05:22:17:7c:da:c6:9e:06:9d:86:b6:3b:f4:45:f6:b4:cf:
         99:80:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org