Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          dhBrzFHPRT+uUI4pjVhwobUYKPbiAWsAO3er9Bm/SYo=
Subject key identifier:   DB:51:33:0D:F0:59:23:B4:D6:EA:CC:D5:C9:03:FA:AB:64:13:4E:70
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       58219F95D1129675721FDDB4817250EB74EEA8C6
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:19:45 +0000
ROA not before:           Tue 07 May 2024 19:14:45 +0000
ROA not after:            Tue 06 May 2025 19:19:45 +0000
asID:                     263022
IP address blocks:        186.249.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:21:9f:95:d1:12:96:75:72:1f:dd:b4:81:72:50:eb:74:ee:a8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:14:45 2024 GMT
            Not After : May  6 19:19:45 2025 GMT
        Subject: CN=DB51330DF05923B4D6EACCD5C903FAAB64134E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:49:c9:1b:80:ac:74:4d:51:58:35:9d:2c:
                    7f:ab:ab:d8:21:aa:2e:6a:e1:34:92:9e:2d:e7:35:
                    70:06:15:c1:7a:ae:df:3a:ac:cf:9b:17:6d:ae:ab:
                    39:78:6f:6e:30:9d:73:9b:3c:98:b5:f5:a6:bb:49:
                    dc:fe:73:fa:22:c1:28:7c:d7:02:d9:0b:9d:14:3d:
                    a3:6a:68:81:3c:eb:43:0b:1f:c7:a4:72:db:b4:7c:
                    35:df:24:2d:2d:4f:1b:ba:a7:c8:a9:cb:37:7e:e2:
                    7f:ec:56:d2:79:3b:a0:8f:89:2b:90:08:65:84:cd:
                    0a:d2:0d:ee:54:37:ee:44:b0:02:e0:ec:08:95:ca:
                    96:16:ef:5c:6a:91:6e:cb:36:47:57:b4:49:c3:92:
                    77:d7:12:85:5b:c0:a7:3e:f2:83:22:81:36:bd:a4:
                    1e:c1:6e:1a:5d:e4:c1:21:30:86:b0:ab:c5:fe:50:
                    1c:b9:be:be:fd:e6:e7:ac:04:f6:36:7d:db:44:c7:
                    8e:80:89:cf:ab:9f:53:eb:b7:f1:22:42:92:73:6d:
                    1a:57:bc:31:43:83:88:52:1d:fe:e1:89:9b:13:c6:
                    fb:65:22:4e:27:83:3f:91:c7:f8:ef:7d:5b:6c:b6:
                    59:00:dc:88:fe:5b:6f:4b:50:b3:13:9b:0d:49:b1:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:51:33:0D:F0:59:23:B4:D6:EA:CC:D5:C9:03:FA:AB:64:13:4E:70
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:e1:69:5a:6d:e3:c2:c1:e2:86:05:b4:34:b8:a4:9b:d7:
         d0:a1:7b:c8:20:d7:e3:5c:4c:e2:da:4a:a7:a6:ff:88:7f:96:
         96:2f:3a:2c:87:bb:b1:60:25:9d:99:38:be:24:98:24:5e:c9:
         31:99:2f:8b:0d:ad:c1:be:71:dd:0b:02:e3:da:46:c0:f1:18:
         72:8f:fb:d8:7d:24:20:86:f2:07:64:49:e2:ec:ab:40:75:a7:
         3c:f3:0d:53:3e:e9:74:7e:f1:b1:72:b4:e3:de:2e:69:d7:3b:
         7d:6d:ff:db:f9:ee:1e:44:12:db:8c:68:ac:ee:cd:fe:9b:ba:
         0b:95:0f:d0:98:05:4d:bc:cc:27:d7:b5:76:63:93:b8:3d:c7:
         7f:c1:86:4c:5f:18:33:db:dc:b8:30:19:94:42:b8:ff:aa:c6:
         2a:98:d9:99:26:42:1f:ff:c5:1f:94:e2:6c:57:7d:95:d1:eb:
         93:20:f4:a3:4b:81:0c:97:a5:f8:51:37:94:ac:72:fc:3b:94:
         bc:9f:1d:5b:3a:c1:84:12:0b:e4:e3:96:91:84:3a:6f:cb:68:
         2e:5d:54:99:a1:a1:a3:e2:ff:2d:6c:bc:ad:f1:6c:30:58:98:
         5f:9f:7e:1f:c7:fb:0e:8e:50:b7:ca:db:f6:43:de:62:d1:4a:
         2d:b7:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:06 2024 by rpki-client on console-ams.rpki-client.org