Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
File:                     3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (raw, json)
Hash identifier:          68r6IPemCaYD7QJtNH9ACyKI86qAUiv5lvnjQIum+ts=
Subject key identifier:   A4:29:00:70:BA:03:99:70:37:61:2C:4C:DC:C5:40:CC:7C:B0:26:53
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       4C60506D85C52CBC8AEF5F4810F78BA23B597100
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:16:50 +0000
ROA not before:           Tue 07 May 2024 19:11:50 +0000
ROA not after:            Tue 06 May 2025 19:16:50 +0000
asID:                     263022
IP address blocks:        186.249.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:60:50:6d:85:c5:2c:bc:8a:ef:5f:48:10:f7:8b:a2:3b:59:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:11:50 2024 GMT
            Not After : May  6 19:16:50 2025 GMT
        Subject: CN=A4290070BA03997037612C4CDCC540CC7CB02653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:f8:20:5c:fa:73:92:65:1d:f2:a3:19:93:
                    e5:7f:dd:7b:19:c6:fb:9f:d9:10:11:80:51:1c:4f:
                    00:24:85:e1:08:70:37:e8:91:9a:0b:a5:b8:34:b4:
                    b5:04:ce:0f:5c:f6:b6:2d:af:40:25:f6:25:53:5d:
                    1d:b6:2c:52:da:77:d6:98:5a:a4:ee:8d:f7:26:a0:
                    6c:7f:00:80:85:95:05:79:3c:9f:8f:cb:24:48:ee:
                    24:53:ff:34:12:0e:15:8a:f5:e9:27:07:ac:11:79:
                    9a:b8:45:cd:01:c1:eb:19:08:7b:1d:f7:5c:55:3d:
                    cb:00:04:88:26:8b:4d:6d:3a:81:5c:56:92:52:bf:
                    20:36:0b:08:eb:27:95:f7:0e:59:ba:aa:29:57:1d:
                    57:78:de:d2:47:b8:aa:b6:c0:15:c9:05:9b:ba:b2:
                    09:74:4c:30:30:9e:36:66:56:00:df:79:4f:32:af:
                    7e:c6:db:50:12:23:bf:b6:54:a8:90:aa:4f:d3:c0:
                    c4:d3:2a:22:a6:ed:c1:64:27:59:c0:c3:81:a9:63:
                    8f:36:06:d5:5c:22:17:6e:dd:8a:b9:8f:d0:a6:68:
                    6b:98:d9:52:8f:f1:01:a7:67:32:cc:0d:34:8d:db:
                    99:9c:a0:e8:37:74:f7:52:1c:41:bd:1e:d6:d0:ac:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:00:70:BA:03:99:70:37:61:2C:4C:DC:C5:40:CC:7C:B0:26:53
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:28:27:0f:28:2e:5f:84:02:92:38:97:c1:43:55:e9:09:
         1e:7f:80:0f:80:2e:0b:14:1d:90:d1:f3:93:ef:2e:d9:9a:2a:
         61:9f:c0:e3:d1:4d:22:8c:48:8a:b2:3e:28:0e:50:3a:15:0d:
         16:16:03:6e:d7:79:8e:ff:e3:ed:ee:7f:04:8d:5e:11:70:2f:
         99:31:75:30:62:b6:89:19:6e:66:fc:05:65:b5:71:6e:75:d5:
         e9:c1:b9:da:a4:9e:0e:ca:0e:bb:e9:07:0f:8b:83:01:cf:a2:
         2d:f7:fb:88:4a:a3:6e:e6:8c:f1:9c:eb:1e:c3:e4:e6:b8:fa:
         dd:48:18:31:8c:58:0c:3f:80:0b:03:8b:bd:8e:72:d7:9e:4b:
         7d:6f:77:96:66:a2:f3:de:0f:da:67:e0:e7:b6:19:d3:57:d8:
         b9:2a:d8:f5:10:34:44:a1:d9:99:66:af:93:fb:e0:8b:b0:e0:
         ec:69:7a:cf:32:df:c4:2f:46:b6:c3:4d:d9:10:32:c0:e1:43:
         16:43:67:87:3c:2e:34:ef:92:5d:19:07:25:1f:c1:27:63:27:
         52:c6:42:e1:1f:93:52:05:62:7d:c8:dd:48:44:bc:ee:85:8b:
         10:ae:e1:2b:95:e1:b0:7e:c5:b8:d2:88:30:c0:d9:5f:db:72:
         77:88:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:06 2024 by rpki-client on console-ams.rpki-client.org