Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
File:                     3138362e3139342e39362e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          aKAh+F+w2+LlWz4R102D484LpuL9MXjSKcgPW3sfUgM=
Subject key identifier:   45:4D:1B:18:5B:05:6B:92:72:47:49:4E:F0:BB:E5:8C:73:F7:8B:D3
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       26FC29879195AB74160F7835778E00E1D9DD58CE
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:50 +0000
ROA not before:           Thu 04 Apr 2024 04:32:50 +0000
ROA not after:            Thu 03 Apr 2025 04:37:50 +0000
asID:                     28210
IP address blocks:        186.194.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:29:87:91:95:ab:74:16:0f:78:35:77:8e:00:e1:d9:dd:58:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:50 2024 GMT
            Not After : Apr  3 04:37:50 2025 GMT
        Subject: CN=454D1B185B056B927247494EF0BBE58C73F78BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:80:64:00:23:3b:49:55:0c:14:94:0d:e5:
                    c6:c9:1b:ca:b2:53:b8:83:66:f0:37:8d:61:e1:24:
                    b8:eb:92:d3:79:59:e1:73:b2:81:16:41:39:d0:3d:
                    20:ef:3d:33:e8:48:7c:41:71:21:d4:6e:56:66:d8:
                    bc:a7:22:24:97:0c:4e:53:1e:db:b0:2f:18:2f:23:
                    3e:b4:36:b5:03:fc:01:cd:06:33:04:d5:26:f5:aa:
                    92:e1:12:8b:6d:95:06:00:00:8b:23:eb:47:77:20:
                    84:f1:8c:ce:53:0c:74:69:77:66:60:46:a0:74:78:
                    ec:30:2e:43:35:9f:b7:b9:4f:82:38:42:8f:c9:ba:
                    ff:b7:37:ce:d4:b9:22:47:06:96:7f:82:4d:df:b2:
                    53:e6:e8:27:22:05:53:8d:84:00:81:45:a9:ad:a5:
                    fe:eb:07:96:19:2c:e1:6d:42:65:71:c3:df:af:76:
                    d0:d7:f0:0f:9b:42:0c:cb:a5:60:0a:a6:bd:c0:38:
                    f0:99:ce:f1:22:ef:70:e5:55:0f:5d:61:58:69:03:
                    dd:05:58:a1:ee:de:bc:bd:e8:30:fe:d8:8a:f2:22:
                    1e:5c:6d:b0:83:84:2a:6b:64:9e:06:9a:68:83:6d:
                    c5:de:79:67:54:71:48:d5:f1:75:c6:1b:6d:6b:bd:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4D:1B:18:5B:05:6B:92:72:47:49:4E:F0:BB:E5:8C:73:F7:8B:D3
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138362e3139342e39362e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:54:eb:cd:ed:53:b7:e2:6a:53:fd:11:81:04:9b:be:c1:f9:
         43:64:d9:12:d4:c7:13:72:e2:9b:fe:a0:80:33:b9:eb:c7:ae:
         70:b4:54:cc:ab:46:9a:09:69:72:21:cb:9a:ff:3b:57:83:ff:
         5f:35:fe:5f:d7:fd:6a:a1:0b:1a:b2:a5:f3:02:50:9a:5f:ce:
         ce:b2:a3:82:24:6d:00:9d:51:db:e4:dd:57:47:46:ce:80:19:
         33:cb:7f:d0:9d:32:73:2a:84:20:91:84:c1:82:6c:25:ba:af:
         9b:29:bc:3b:78:49:d9:24:44:5f:4b:2f:10:b1:67:fb:21:8f:
         ff:11:af:35:54:54:93:35:01:6d:e6:e3:1d:8a:25:90:74:e5:
         73:73:f6:f8:61:ec:01:a1:d3:cc:2b:88:d5:2b:5d:c9:c1:68:
         90:8c:33:fa:00:5b:27:66:1a:53:41:7c:86:e6:3d:5a:27:4e:
         92:ae:80:ca:65:f4:56:f6:c3:a3:91:d6:be:f6:8a:ea:85:b3:
         0c:cb:b0:99:2c:4c:dc:f1:ef:65:90:8b:f0:ab:3b:88:0d:ef:
         79:82:80:53:42:91:ff:dc:0f:47:39:2a:d2:69:5b:e9:f5:c9:
         5e:c3:76:c6:a4:13:ec:b6:0a:95:86:c4:47:73:0e:a9:d3:56:
         ea:dc:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org