Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa
File:                     3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier:          13xbZlPPrc37T73p03YsbhNRwz3s6hgRg8R6wKGVKyU=
Subject key identifier:   51:A0:DE:10:86:40:0E:88:EC:4C:B7:CF:AB:FA:B3:E3:22:76:7A:AC
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       1054B60C9B6955CC05797DCE047AEF87F2791B7B
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:16:57 +0000
ROA not before:           Tue 07 May 2024 19:11:57 +0000
ROA not after:            Tue 06 May 2025 19:16:57 +0000
asID:                     263022
IP address blocks:        186.249.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:54:b6:0c:9b:69:55:cc:05:79:7d:ce:04:7a:ef:87:f2:79:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:11:57 2024 GMT
            Not After : May  6 19:16:57 2025 GMT
        Subject: CN=51A0DE1086400E88EC4CB7CFABFAB3E322767AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:0e:5d:af:dc:06:bc:9e:42:6b:9e:57:7a:
                    0b:e5:28:20:0c:06:81:1d:39:1e:3d:f5:bc:2e:4b:
                    91:48:cd:4e:ba:64:63:33:38:6a:9c:e2:57:8c:cf:
                    ba:a1:76:72:e7:dc:2e:cc:c1:88:89:0d:c7:da:ec:
                    b4:a0:4c:7b:eb:4d:64:3f:7b:6e:51:31:1b:a3:4d:
                    07:79:fb:6f:b1:08:c4:57:a6:aa:cc:c6:8c:c4:da:
                    9f:10:fb:a2:24:f8:59:d3:1c:29:7d:e9:bc:70:d3:
                    07:47:f7:4a:d5:4f:6b:54:d7:1e:11:17:e1:9c:de:
                    62:f2:71:aa:64:da:10:69:06:24:78:ce:cc:c9:46:
                    95:f0:d6:b0:d3:90:e1:4f:6e:60:64:43:6f:b3:f2:
                    0e:68:9f:f3:71:10:0d:e7:24:28:d7:af:61:d0:a6:
                    12:03:6a:91:90:b6:4f:5a:a2:10:bf:f9:8c:28:10:
                    12:01:e7:fc:12:30:de:0e:ab:1f:75:72:ed:ad:4c:
                    5b:08:a6:d2:88:3e:d5:f8:09:c3:7c:9b:96:ea:8f:
                    55:51:bf:f5:d5:7b:be:a1:d3:57:03:33:6c:64:cb:
                    c9:e9:94:87:3f:0e:42:06:05:b2:ac:a2:7b:a8:13:
                    59:af:88:b9:10:10:cc:95:70:bc:40:bc:fa:c1:c3:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A0:DE:10:86:40:0E:88:EC:4C:B7:CF:AB:FA:B3:E3:22:76:7A:AC
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32332d3233203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:6a:a8:69:54:c7:93:a7:4d:77:7e:91:80:d1:51:bf:0f:
         3b:ae:a4:b4:3e:9f:9e:8e:6c:84:41:57:2d:b7:58:05:61:e9:
         20:b3:b3:6e:3f:95:44:df:81:30:37:9d:38:78:31:6d:b8:a9:
         ea:a1:bf:ac:e1:6f:c5:e7:bf:d4:84:e9:1d:1c:45:8e:cc:46:
         bf:b9:76:47:86:b5:b8:9f:5a:d9:0f:ea:32:92:cb:36:bd:b2:
         d5:86:9f:ee:c4:b0:94:1d:93:ad:80:07:aa:c1:8e:a8:64:ee:
         b6:8f:5f:7b:72:16:6d:ca:b2:01:ec:35:71:42:65:ec:8f:f3:
         92:ef:e6:46:d6:d6:fa:20:89:28:59:e9:b4:e1:54:d2:27:37:
         87:dc:80:f7:eb:b2:0d:a2:9d:1d:2f:7d:f1:6b:be:67:8d:29:
         c9:84:df:85:8b:26:7d:ee:69:11:32:d9:78:3d:45:47:57:9f:
         46:56:68:b4:cd:4f:a5:56:e7:57:22:1e:70:0a:8a:3e:8a:37:
         f7:91:fe:05:05:5b:05:b8:a9:40:39:84:0e:61:9b:93:7b:71:
         22:48:ea:97:33:87:ed:51:11:f5:07:a6:db:a4:87:5d:c9:7f:
         9b:ec:88:3e:dc:33:71:94:73:a9:52:54:e6:78:ee:63:92:e5:
         9f:f9:b4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org