Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa
File:                     3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa (raw, json)
Hash identifier:          Vh31/AAua7hzLgQMBSmuKYc0C5prBv6yDVsGNFIlyOw=
Subject key identifier:   1D:40:47:C2:44:8C:85:83:3C:59:56:CA:A9:63:18:22:2D:FA:99:61
Certificate issuer:       /CN=29D311E07E371336F94D10B16A429E47398D71E2
Certificate serial:       75A41162C390776B18081BD69C485086106C8741
Authority key identifier: 29:D3:11:E0:7E:37:13:36:F9:4D:10:B1:6A:42:9E:47:39:8D:71:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa
Signing time:             Mon 21 Oct 2024 14:38:21 +0000
ROA not before:           Mon 21 Oct 2024 14:33:21 +0000
ROA not after:            Mon 20 Oct 2025 14:38:21 +0000
asID:                     263278
IP address blocks:        186.227.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.crl
                          rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:11:62:c3:90:77:6b:18:08:1b:d6:9c:48:50:86:10:6c:87:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D311E07E371336F94D10B16A429E47398D71E2
        Validity
            Not Before: Oct 21 14:33:21 2024 GMT
            Not After : Oct 20 14:38:21 2025 GMT
        Subject: CN=1D4047C2448C85833C5956CAA96318222DFA9961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:06:56:fd:d6:4d:49:0d:56:72:05:ea:06:
                    2f:44:c6:dd:ca:13:df:4d:83:6a:94:3a:9a:62:a1:
                    6c:3f:96:93:af:46:43:ca:04:21:4a:48:56:cf:01:
                    8f:1a:d0:73:e0:c9:75:3b:3d:fb:2f:0f:d8:72:57:
                    cb:e0:c2:97:71:fa:9b:e2:72:31:d9:78:ff:2a:d5:
                    89:84:74:73:b9:08:e5:ce:de:b5:41:13:33:31:7b:
                    fa:3f:ed:81:44:86:cd:c9:ba:b9:5c:e3:47:41:5b:
                    b1:6b:55:0c:e6:1e:d0:bf:8c:18:5a:09:fc:63:82:
                    8a:5d:07:98:f6:19:33:7a:83:92:4f:d4:8f:de:39:
                    ca:e4:e4:c4:b2:11:c6:9d:e2:be:fa:b2:60:73:34:
                    d2:f7:5b:16:15:bd:c6:83:af:78:de:20:72:8f:6e:
                    38:eb:bc:38:dd:b3:aa:11:0d:3d:25:6f:f1:88:bc:
                    72:f2:64:88:4a:94:b8:82:d9:58:76:ce:85:f1:96:
                    75:33:3b:80:0d:49:fe:1e:9a:36:40:c3:3c:3c:79:
                    59:f7:fa:85:0f:08:58:66:f7:c1:45:c3:ed:18:83:
                    bf:2e:e2:a1:f6:64:4c:43:96:e5:bb:95:89:28:a3:
                    75:73:bb:e9:e4:8e:df:5f:62:84:f6:c0:f0:ed:48:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:47:C2:44:8C:85:83:3C:59:56:CA:A9:63:18:22:2D:FA:99:61
            X509v3 Authority Key Identifier:
                keyid:29:D3:11:E0:7E:37:13:36:F9:4D:10:B1:6A:42:9E:47:39:8D:71:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/29D311E07E371336F94D10B16A429E47398D71E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D311E07E371336F94D10B16A429E47398D71E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:75:95:95:b7:0e:97:e5:fc:a5:7f:ac:98:e5:2d:17:97:36:
         fa:af:1e:5f:9b:f4:d5:b9:96:34:95:14:c1:e9:3b:62:54:db:
         a9:19:7b:bf:4f:2c:cb:15:75:df:c1:98:cf:5a:ac:82:4f:f8:
         1e:3e:2b:03:c7:e5:12:8e:c1:03:c8:ca:19:74:ae:19:9d:1b:
         c9:fe:f6:76:e0:98:7b:8b:0a:7c:95:c2:86:c0:41:05:f4:28:
         95:e4:79:b0:2c:c2:06:e0:e0:19:1b:60:70:cc:17:bb:8e:44:
         91:90:7d:0c:19:4d:3b:a0:73:e6:68:88:11:c0:1e:fb:16:fa:
         47:51:37:13:b8:61:17:72:85:e5:60:e0:ef:2c:61:97:fa:5a:
         c6:e9:18:6c:17:06:ce:02:cd:c0:b3:96:7c:2a:50:0c:10:29:
         c5:25:b8:a8:5f:80:3a:d5:08:f8:80:eb:17:58:1c:69:78:72:
         af:3c:75:e3:8c:9b:b7:e6:01:32:9f:d0:cd:a5:0f:89:b6:d4:
         69:37:b2:9d:60:fc:48:bb:61:a5:07:4a:a0:e4:c6:c9:b6:fd:
         17:8b:ad:29:be:8c:dd:5d:c7:1b:4e:ae:0e:63:bc:5e:5f:e7:
         0b:d8:73:aa:33:58:f2:c6:24:b4:88:c6:e4:5d:65:9f:92:d4:
         ed:4a:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:08 2024 by rpki-client on console-fra.rpki-client.org