Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138362e3233352e3137362e302f32312d3234203d3e203238313339.roa
File:                     3138362e3233352e3137362e302f32312d3234203d3e203238313339.roa (raw, json)
Hash identifier:          dnQPps8tr4m9svNooIP4El44ogOljlwMs5lEkmuzfDY=
Subject key identifier:   47:0C:78:6B:D1:0D:C7:DF:46:D5:0F:2C:E5:6A:29:14:78:96:D9:1C
Certificate issuer:       /CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
Certificate serial:       4C3B09AE463E2FF9085BEA24E3702AFC0D8FAAF3
Authority key identifier: 7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138362e3233352e3137362e302f32312d3234203d3e203238313339.roa
Signing time:             Tue 21 May 2024 01:37:44 +0000
ROA not before:           Tue 21 May 2024 01:32:44 +0000
ROA not after:            Tue 20 May 2025 01:37:44 +0000
asID:                     28139
IP address blocks:        186.235.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl
                          rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3b:09:ae:46:3e:2f:f9:08:5b:ea:24:e3:70:2a:fc:0d:8f:aa:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
        Validity
            Not Before: May 21 01:32:44 2024 GMT
            Not After : May 20 01:37:44 2025 GMT
        Subject: CN=470C786BD10DC7DF46D50F2CE56A29147896D91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:11:4d:c4:a6:f6:ac:8c:0f:26:35:06:4a:
                    41:9c:7d:8e:e7:26:90:0a:a7:85:d3:c8:fe:c3:e9:
                    2d:a3:4e:95:16:06:76:7c:8d:36:0f:72:f4:37:db:
                    8a:c5:56:66:32:aa:1c:d9:aa:8d:c5:69:5d:7f:b9:
                    5c:76:e1:a8:6f:53:af:7c:4c:f9:7b:61:d0:60:20:
                    f9:40:e6:21:53:24:84:13:44:64:96:9f:0f:5b:d6:
                    44:35:9f:66:4f:26:83:35:ca:dd:28:48:ef:7f:6a:
                    47:7d:e3:30:40:e6:48:21:75:93:2e:8f:bc:99:e8:
                    1a:3c:e5:72:c2:db:b4:e3:69:5a:a2:ca:1b:33:90:
                    5e:7f:5c:74:0f:e9:b0:43:4c:50:cb:95:64:80:4d:
                    20:18:e6:c7:ca:26:61:e4:63:ea:17:e2:32:02:b2:
                    13:1c:0a:eb:8b:9c:26:75:d5:19:0c:ed:ad:9f:d0:
                    f8:8e:ed:3e:17:5c:a7:02:89:96:5f:f5:5f:fa:2d:
                    8c:1c:f3:31:15:e2:a3:f4:ca:84:c0:dc:ba:94:40:
                    37:e9:53:ae:e6:96:64:52:db:4a:61:ed:1e:a8:2e:
                    9b:19:bb:26:47:b7:42:76:f1:05:de:92:19:01:15:
                    ed:d7:9d:5e:90:4b:36:13:48:14:09:9a:b0:99:08:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0C:78:6B:D1:0D:C7:DF:46:D5:0F:2C:E5:6A:29:14:78:96:D9:1C
            X509v3 Authority Key Identifier:
                keyid:7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138362e3233352e3137362e302f32312d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:11:92:48:10:28:83:98:6d:54:1d:7b:6e:43:eb:9b:d2:00:
         ad:2b:2f:2c:c4:79:25:d5:a9:aa:dd:56:f6:f2:91:de:b9:f1:
         0a:1c:80:13:77:ca:8a:40:ff:a6:29:53:51:52:de:d6:27:94:
         f6:e8:f8:db:33:7e:9b:35:8e:4e:de:65:e4:7f:1b:12:c5:29:
         bf:03:b4:aa:8f:6b:63:96:45:ec:2b:99:f4:09:a1:73:a4:d5:
         e9:17:05:6d:47:62:e3:6b:01:ee:a0:5c:57:41:35:b1:fc:82:
         0c:8b:47:38:5c:02:91:46:ef:cf:d8:87:15:7e:02:c8:c2:f1:
         a2:db:10:7d:ba:ae:de:7f:48:32:80:ce:2e:58:b0:25:d8:38:
         37:a6:5f:8a:3b:88:fa:9f:f2:09:e0:99:19:bc:51:39:0b:23:
         85:58:51:b5:b0:5d:70:96:5b:4c:56:88:69:67:f4:33:d2:a3:
         c6:65:a3:99:a8:c1:89:72:2a:68:21:60:53:2f:b2:29:9f:8d:
         4d:67:02:75:8e:66:a6:1b:d4:9d:f5:09:dd:f3:7f:6f:c7:fb:
         c5:7e:8c:ff:10:1a:92:83:67:24:ec:2b:ac:f8:35:8c:bb:00:
         9d:02:68:b3:e3:0f:b2:31:bd:d9:c6:be:9b:52:e1:78:af:a5:
         e2:49:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:53 2024 by rpki-client on console-ams.rpki-client.org