Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa
File:                     3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa (raw, json)
Hash identifier:          NXVCZdxlSQdeKnHJFBi6doqduhyTKzMbeQ+lIJ+b5Og=
Subject key identifier:   77:89:32:58:B6:B9:6D:84:95:47:40:AB:B0:66:4C:19:BF:18:F3:56
Certificate issuer:       /CN=04851B77FE9F6349AB1DA1958AF1E8141B03C6AA
Certificate serial:       033D78D18108141C347116D91673DC115E24953F
Authority key identifier: 04:85:1B:77:FE:9F:63:49:AB:1D:A1:95:8A:F1:E8:14:1B:03:C6:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa
Signing time:             Fri 28 Jun 2024 18:40:28 +0000
ROA not before:           Fri 28 Jun 2024 18:35:28 +0000
ROA not after:            Fri 27 Jun 2025 18:40:28 +0000
asID:                     262497
IP address blocks:        187.109.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.crl
                          rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3d:78:d1:81:08:14:1c:34:71:16:d9:16:73:dc:11:5e:24:95:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04851B77FE9F6349AB1DA1958AF1E8141B03C6AA
        Validity
            Not Before: Jun 28 18:35:28 2024 GMT
            Not After : Jun 27 18:40:28 2025 GMT
        Subject: CN=77893258B6B96D84954740ABB0664C19BF18F356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:e4:be:0d:5d:c0:0e:82:c6:be:1f:b4:f9:
                    5b:e8:8f:72:ec:28:db:3a:0d:3a:2e:c7:7d:63:bd:
                    0a:36:cc:2b:4b:b2:aa:b7:1a:fc:6e:de:09:70:ac:
                    ec:17:77:63:c3:8f:7b:ff:5f:9e:28:96:25:b9:91:
                    60:45:b5:3e:66:40:6e:5e:b5:3a:24:c1:8d:18:72:
                    fc:4b:c9:75:0b:ec:00:cc:f4:70:cb:11:5d:a7:71:
                    f7:0b:51:b5:0c:40:b5:f6:1b:79:ef:69:fd:27:d0:
                    aa:38:3d:f5:51:03:f2:39:c0:9a:45:2c:10:4a:cd:
                    86:1f:1f:e6:47:89:7c:59:b2:54:63:f9:fc:39:3c:
                    3b:ad:63:18:bc:e7:61:2a:57:f9:27:ba:02:b7:78:
                    8e:17:e5:a8:0b:f2:58:0b:6d:e1:74:9b:08:8e:16:
                    18:a0:c0:a5:c1:99:8e:36:de:61:a0:06:a8:fe:dc:
                    da:67:be:d9:0e:df:9b:4a:62:d9:71:51:17:5d:5d:
                    dd:b2:3a:61:35:e1:51:b0:51:c9:68:74:eb:7b:38:
                    4b:a2:db:60:c8:63:c9:82:b3:f7:a9:dd:6d:5e:58:
                    51:6a:3e:38:eb:80:33:88:75:93:2e:68:f3:e1:b7:
                    84:91:16:da:4d:7b:4d:eb:6d:12:af:6b:cc:e0:58:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:89:32:58:B6:B9:6D:84:95:47:40:AB:B0:66:4C:19:BF:18:F3:56
            X509v3 Authority Key Identifier:
                keyid:04:85:1B:77:FE:9F:63:49:AB:1D:A1:95:8A:F1:E8:14:1B:03:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04851B77FE9F6349AB1DA1958AF1E8141B03C6AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:7d:dc:27:de:9b:e4:a3:6d:89:2a:f4:10:a3:ec:96:6d:6e:
         82:a6:b5:c4:a5:a9:ad:f4:09:36:30:33:7f:ec:d8:94:1b:d1:
         e9:8f:dd:6a:a4:7f:ba:75:84:60:a1:8c:d4:52:6b:6e:b0:87:
         ae:df:19:eb:19:69:89:24:0c:f9:b8:cc:dc:9e:36:be:7c:53:
         e6:ea:d6:90:81:59:f9:9d:17:27:02:a4:dc:36:50:af:a5:dc:
         fe:a1:90:65:94:a9:7a:bd:44:0c:16:d8:b1:87:32:3f:fa:7a:
         b4:54:30:55:88:c2:44:ea:02:a0:4e:e4:d1:65:66:a4:c6:81:
         eb:04:e5:8d:56:78:f4:47:9c:68:ec:d0:11:44:ce:f7:e2:b7:
         15:36:8b:a2:30:1b:36:aa:7c:31:9c:e5:a0:ef:e9:20:6f:84:
         88:2d:e4:b0:03:77:da:72:c3:c1:9f:c5:39:65:de:0e:90:96:
         74:1e:c5:5e:d6:34:a1:89:3a:11:9e:7b:79:f9:d0:03:61:89:
         f6:87:82:e1:7b:81:b4:5d:2f:b3:8b:38:11:56:0f:54:ef:18:
         ee:b2:1d:23:39:61:da:80:c8:32:f5:4d:a6:8a:94:d6:46:60:
         10:6a:dc:a9:6e:6d:57:0b:f7:53:2c:65:4a:06:03:12:c6:da:
         cf:ec:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:40 2024 by rpki-client on console-ams.rpki-client.org