Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/3138362e3233352e34382e302f32312d3233203d3e20323633303936.roa
File:                     3138362e3233352e34382e302f32312d3233203d3e20323633303936.roa (raw, json)
Hash identifier:          o0YqaQLgEcdI4nNjXrIxr1UCxlNgPO/H23RKdxFWsqA=
Subject key identifier:   D3:ED:C2:34:15:14:6E:DA:3A:A6:C2:42:DF:94:A6:AB:F8:15:D7:B1
Certificate issuer:       /CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
Certificate serial:       6701F412F16A799C8DAF92BF462CFA6C66DD6243
Authority key identifier: 72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/3138362e3233352e34382e302f32312d3233203d3e20323633303936.roa
Signing time:             Thu 04 Apr 2024 20:07:24 +0000
ROA not before:           Thu 04 Apr 2024 20:02:24 +0000
ROA not after:            Thu 03 Apr 2025 20:07:24 +0000
asID:                     263096
IP address blocks:        186.235.48.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl
                          rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:01:f4:12:f1:6a:79:9c:8d:af:92:bf:46:2c:fa:6c:66:dd:62:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7292FC5483AF008ACAD31348DC7D4F5B8ABF4970
        Validity
            Not Before: Apr  4 20:02:24 2024 GMT
            Not After : Apr  3 20:07:24 2025 GMT
        Subject: CN=D3EDC23415146EDA3AA6C242DF94A6ABF815D7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cf:48:ce:4f:5f:07:16:95:fe:8b:59:b2:61:
                    ff:4f:bb:ea:86:88:9f:ea:8a:3d:c4:57:f8:48:d0:
                    4b:8f:2d:85:e4:e3:13:79:74:e5:67:b1:c1:37:ec:
                    33:40:70:c0:88:7a:50:54:ff:38:4a:fd:7b:c9:b5:
                    54:8f:3d:e8:0c:3d:8f:09:44:bf:8f:8f:d6:e8:00:
                    3f:7d:ea:77:16:20:29:76:93:73:a8:cb:9f:f5:d1:
                    00:73:60:98:c6:6b:ff:16:e4:dc:ce:8e:6b:7c:d4:
                    b9:55:58:bc:07:a9:73:b9:40:6e:f2:d4:c3:47:c5:
                    7a:f3:a6:8a:6b:64:72:04:1d:d2:f7:23:3f:63:5d:
                    07:b4:d2:b2:b1:9a:df:df:06:a0:1a:ef:a1:86:70:
                    b0:13:20:ea:39:ca:df:d3:c5:b3:8e:53:b7:51:a4:
                    03:0f:8a:ca:c8:66:19:af:8a:f0:9a:cb:83:60:cb:
                    6d:ce:db:0c:96:fc:c3:e6:e1:07:4b:6f:a7:d6:86:
                    dd:10:53:cb:54:2d:57:10:a0:84:a9:3e:c7:e4:96:
                    85:35:94:c6:b0:9b:92:32:4f:c0:5b:bd:91:c1:df:
                    00:3c:f1:9b:17:e1:94:35:df:9f:d0:bd:4d:38:d6:
                    c1:92:2b:cc:18:54:18:01:84:bc:3b:f1:86:78:5e:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:C2:34:15:14:6E:DA:3A:A6:C2:42:DF:94:A6:AB:F8:15:D7:B1
            X509v3 Authority Key Identifier:
                keyid:72:92:FC:54:83:AF:00:8A:CA:D3:13:48:DC:7D:4F:5B:8A:BF:49:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7292FC5483AF008ACAD31348DC7D4F5B8ABF4970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PpDQWjoVWtHeB2HP8Fm2szrNYrHZGTrUBPfsbtb3Zwh/1/3138362e3233352e34382e302f32312d3233203d3e20323633303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:87:c7:1b:13:be:9c:bf:86:de:2a:12:60:c3:da:47:a5:db:
         37:c0:d9:d5:c1:70:02:cb:43:be:cf:0c:dd:b9:54:19:d5:f1:
         77:6b:5a:4b:6a:52:2d:c7:fc:ae:64:f8:7e:6f:ec:b1:43:46:
         89:99:ea:bf:1b:5f:a9:a0:1c:c8:0b:e2:88:85:1e:52:0b:57:
         04:c4:1b:9d:d9:2c:6e:ac:2c:bc:f2:9e:10:cf:b7:57:75:1b:
         4b:f3:ae:06:55:f3:0f:dd:1e:9f:2f:ee:10:63:47:74:02:a7:
         39:12:40:99:95:cf:9b:50:6a:15:3f:e4:fb:cb:c6:d9:e8:5b:
         13:3d:51:bb:1f:a2:b1:f6:ec:ab:e0:69:17:b3:db:ae:f5:a9:
         5d:69:01:90:b9:f2:37:6f:3e:f8:1a:8b:1c:ee:05:6c:2d:80:
         0f:39:40:89:69:5d:31:6f:29:70:c2:16:94:23:5c:f0:18:05:
         1c:d5:3a:fa:ba:a7:72:eb:71:f2:6c:6d:d3:f6:ea:e0:d3:44:
         2e:10:a7:b3:89:a4:65:3c:e8:09:74:1a:55:3f:ec:62:14:9f:
         db:ee:6e:24:63:7d:43:39:04:1a:29:88:a7:98:d9:60:58:c6:
         db:61:fa:b4:72:b8:1e:e7:42:32:e6:b2:b8:9a:07:b4:6f:05:
         d2:c9:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:12 2024 by rpki-client on console-ams.rpki-client.org