Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31372e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e31372e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          CXvWX4zByqobS4lNQNnW7qNeQaN/4lpuvfbUQpi/LOU=
Subject key identifier:   54:A3:38:BB:4C:BB:95:33:BF:E4:63:DB:DD:1F:12:0E:7F:1F:30:06
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       1A968CF944698016C06911F17A3EB657205ED7F1
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31372e302f32342d3234203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:19:09 +0000
ROA not before:           Tue 07 May 2024 19:14:09 +0000
ROA not after:            Tue 06 May 2025 19:19:09 +0000
asID:                     263022
IP address blocks:        186.249.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:8c:f9:44:69:80:16:c0:69:11:f1:7a:3e:b6:57:20:5e:d7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:14:09 2024 GMT
            Not After : May  6 19:19:09 2025 GMT
        Subject: CN=54A338BB4CBB9533BFE463DBDD1F120E7F1F3006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:b1:b5:30:52:94:28:2e:79:ab:24:0a:cd:
                    bf:ff:ae:d0:07:00:1b:62:e5:03:9d:a8:96:07:bf:
                    20:b6:cf:d8:98:c6:30:c1:45:ef:d3:b8:d1:3f:4b:
                    29:85:77:0b:e2:23:10:28:8a:ea:1c:f9:c6:75:16:
                    eb:3f:dc:8f:6b:8c:e6:8b:28:c8:61:1f:12:9d:75:
                    9d:2e:ca:ce:99:26:bf:3c:61:44:56:88:d6:a9:39:
                    72:66:f4:e3:54:ba:b0:26:39:c4:4e:d1:9e:cd:9c:
                    19:30:7b:05:5a:aa:70:18:fb:e4:29:95:1a:3a:17:
                    97:56:b4:ec:4d:2a:2c:94:d7:89:b8:71:1b:f4:ac:
                    84:5a:25:22:a7:b6:c0:a1:76:a7:b9:84:5c:67:da:
                    39:dd:67:79:ed:c0:ca:59:42:53:37:b0:8a:1d:88:
                    b6:30:43:ed:05:ac:3b:91:8d:20:41:9d:bc:8b:6e:
                    bd:07:5d:0f:f8:2f:1b:cf:83:cc:14:4f:eb:d3:52:
                    49:70:a0:bc:35:0c:f4:e7:04:f6:c1:bd:b8:f8:f7:
                    56:1e:fd:9c:7e:bc:7f:e1:d9:0d:4b:c2:6a:98:5f:
                    32:64:79:9e:0b:ed:af:0d:31:52:28:25:45:76:a5:
                    53:f3:77:91:5f:1e:86:a3:2e:5e:8f:c1:dc:66:a0:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:38:BB:4C:BB:95:33:BF:E4:63:DB:DD:1F:12:0E:7F:1F:30:06
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31372e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e9:00:98:03:a4:e7:7d:4f:41:c8:c8:0d:e7:91:bc:c0:4b:
         12:92:7f:b0:4b:08:ac:92:ab:26:46:86:94:fd:c4:3e:ac:14:
         7d:9a:4b:8d:45:f6:31:be:2d:ae:23:44:18:46:d9:5a:d4:14:
         47:8b:43:2e:94:2b:15:3e:98:c5:61:67:1e:84:2a:d0:01:4f:
         39:9b:be:73:3d:e2:2c:d6:86:ed:5b:ae:d7:22:8d:b6:14:20:
         e1:40:b2:e4:73:1d:63:cb:d1:98:56:c2:30:66:fd:c6:20:d1:
         9c:2f:4e:49:49:9f:0c:7b:34:fe:03:85:ac:66:8e:66:50:c8:
         f1:f5:7a:53:51:99:c3:24:49:1b:a7:4a:33:78:d7:0c:44:d0:
         93:ed:f9:01:f9:f7:0d:f2:91:4d:9f:46:2f:f2:ee:39:28:d4:
         8a:8c:4e:36:97:ef:a8:31:28:59:15:98:ef:9b:78:a7:92:de:
         37:c0:9b:c3:98:64:71:31:43:04:de:f4:ce:48:f4:f3:f4:d3:
         ac:94:a5:60:87:a4:ae:ea:ed:54:93:55:e8:1a:c8:37:c8:64:
         51:5f:e6:24:a3:14:f7:ef:7d:35:e0:17:5f:9f:87:70:a1:b0:
         5b:f0:ac:61:a8:aa:c8:c3:53:68:43:e9:fd:8d:c2:43:d7:b5:
         02:4a:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:06 2024 by rpki-client on console-ams.rpki-client.org