Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa
File:                     3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa (raw, json)
Hash identifier:          iRmWK7XtS7TkdNXx1rEcThew598Zsz3owZoougfWj+s=
Subject key identifier:   1E:FA:DA:E6:A0:ED:F5:E5:1E:E8:48:49:2A:17:EB:E7:51:F2:58:7A
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       455E23BDFBFDC9C9CA3737533D3026B4B6422C6A
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa
Signing time:             Wed 29 May 2024 13:40:46 +0000
ROA not before:           Wed 29 May 2024 13:35:46 +0000
ROA not after:            Wed 28 May 2025 13:40:46 +0000
asID:                     262764
IP address blocks:        186.226.192.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5e:23:bd:fb:fd:c9:c9:ca:37:37:53:3d:30:26:b4:b6:42:2c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: May 29 13:35:46 2024 GMT
            Not After : May 28 13:40:46 2025 GMT
        Subject: CN=1EFADAE6A0EDF5E51EE848492A17EBE751F2587A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:29:df:71:98:b1:fa:86:7c:4e:6f:83:92:5f:
                    2a:97:92:bb:9f:f8:81:5a:6a:cf:64:90:44:9b:06:
                    3a:1e:f2:d2:e0:4c:1f:dd:cf:e6:7f:3e:e4:50:04:
                    1e:da:c3:ec:4b:87:5c:b9:fa:f3:29:35:c4:6e:49:
                    ac:d6:9f:96:be:e9:b9:35:ba:cd:a0:3c:78:c1:00:
                    cf:82:94:ac:6c:93:8d:af:40:22:44:6e:d5:bb:ea:
                    2a:cd:69:52:57:d1:84:e3:31:23:0f:db:47:de:28:
                    87:a7:4e:47:05:de:36:fa:c5:3c:e0:4b:e2:83:5f:
                    c2:25:e0:ba:a3:d6:7a:81:3f:ae:c4:77:cc:62:f1:
                    63:9d:32:ae:a8:5a:e7:49:f4:1e:07:9f:f8:8b:54:
                    73:60:e8:95:92:42:06:04:8e:d8:1e:fe:95:5a:3b:
                    5d:7c:e3:26:73:74:ab:06:82:db:9c:94:d9:26:ae:
                    90:11:0b:49:8c:35:68:22:1b:e6:97:4e:e4:02:20:
                    4d:2f:87:45:5f:53:24:51:0a:13:93:f9:3b:31:04:
                    da:75:20:31:4c:9c:99:94:b1:a9:69:05:2c:f1:5c:
                    94:e4:88:5b:82:99:3a:da:a7:7e:dd:07:9b:0b:7a:
                    d9:d6:54:7e:18:2c:a2:2a:f0:a1:40:31:09:33:fa:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:DA:E6:A0:ED:F5:E5:1E:E8:48:49:2A:17:EB:E7:51:F2:58:7A
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/3138362e3232362e3139322e302f32312d3332203d3e20323632373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:fe:f4:7f:f5:05:e8:6f:ab:d8:4e:0e:97:f9:17:c8:3b:ee:
         ea:b2:de:ac:eb:31:7c:07:0b:c1:71:04:fb:56:a3:4f:e1:6a:
         7e:45:ec:51:09:f6:3c:b7:ec:be:c4:14:9b:f3:9b:39:51:11:
         b5:b0:e9:1d:f1:a3:fa:3c:7d:d3:d7:b6:30:99:4a:a8:1c:9b:
         b6:5c:5c:8b:79:2b:2c:01:89:b8:8e:25:73:40:82:74:75:38:
         ce:70:9a:a3:7b:2e:d2:e8:84:86:3b:8d:75:ae:50:81:5a:31:
         16:a8:f8:4c:8a:47:c1:14:cb:f3:e0:1f:34:03:29:21:a7:ee:
         0c:5e:06:dd:45:e9:27:13:55:70:59:ba:15:51:9f:e8:94:41:
         9f:29:ea:9e:ca:a1:47:bf:90:29:00:a1:e8:d4:af:b4:bf:40:
         fa:fe:64:fb:da:d7:ac:bd:0b:fb:4f:3b:3b:1b:fd:b1:58:f5:
         97:0e:e7:6e:ff:72:00:43:17:fd:76:87:5c:75:12:57:50:49:
         b1:37:83:86:3f:83:6d:a8:43:60:a0:8e:ea:0a:d0:3c:c3:7c:
         69:1c:89:6f:7b:59:e6:eb:9e:6d:09:76:48:23:b7:69:08:32:
         69:72:78:c3:4f:7c:6d:20:99:82:5e:32:01:46:47:e1:6e:a2:
         96:d6:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:30 2024 by rpki-client on console-fra.rpki-client.org