Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
File:                     3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (raw, json)
Hash identifier:          hs1qLGqjNo/YBZvQzLRpNbFZ0LtwQZ1YvdBN1Vu4GrI=
Subject key identifier:   AD:B4:EC:2D:6C:3D:54:45:5E:FC:0C:B1:5C:DD:AB:A8:C8:41:08:94
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       307EA8BFF8927733E071CE6DD1A5853A837C30C4
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
Signing time:             Wed 03 Apr 2024 18:30:03 +0000
ROA not before:           Wed 03 Apr 2024 18:25:03 +0000
ROA not after:            Wed 02 Apr 2025 18:30:03 +0000
asID:                     28334
IP address blocks:        186.194.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 17:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7e:a8:bf:f8:92:77:33:e0:71:ce:6d:d1:a5:85:3a:83:7c:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Apr  3 18:25:03 2024 GMT
            Not After : Apr  2 18:30:03 2025 GMT
        Subject: CN=ADB4EC2D6C3D54455EFC0CB15CDDABA8C8410894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:92:54:13:d3:07:6c:0b:0a:df:c0:39:72:
                    b9:ee:ec:76:b0:8d:37:ba:77:3b:8f:cd:98:32:ea:
                    9b:7d:c0:fd:6b:c3:f0:e1:8c:7a:5d:ca:15:66:46:
                    75:22:f3:14:99:b0:47:41:b9:e0:4b:90:84:66:c6:
                    b7:3d:3b:52:c8:b5:ce:e7:6f:7c:cd:77:1d:b2:04:
                    14:cd:aa:2a:d7:43:56:7a:99:c8:51:eb:1a:8d:65:
                    ea:5d:a6:2c:90:5f:26:66:53:df:d4:93:e0:d9:48:
                    80:7d:22:b1:f2:de:21:e7:8b:11:df:f8:f8:47:c9:
                    e9:24:df:16:98:d4:78:a7:a9:34:ed:ce:b1:5d:31:
                    c3:74:da:05:ba:1d:fb:6c:56:0f:b0:2b:47:be:7d:
                    bf:42:36:05:1d:82:34:64:75:2c:80:15:69:b8:ba:
                    c2:ae:08:f5:55:ad:14:a4:48:ce:49:19:0a:3d:e6:
                    49:2c:c6:23:4b:4c:14:29:9d:01:24:f4:c2:c5:02:
                    ca:ca:d2:78:19:f3:4c:27:76:70:06:ae:44:4f:74:
                    4a:e9:3c:e7:8a:2b:01:a2:ab:d2:2a:f6:b1:95:ac:
                    c1:a5:b7:40:e7:1d:84:80:67:c9:f9:38:4c:3e:4e:
                    79:73:d7:15:4c:80:b3:21:84:e3:44:55:36:c5:2c:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:EC:2D:6C:3D:54:45:5E:FC:0C:B1:5C:DD:AB:A8:C8:41:08:94
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:80:74:4b:57:ce:5e:e7:c5:fd:08:6c:d0:f8:18:81:44:5c:
         7c:0a:b5:ca:8e:2e:40:98:9c:69:8c:52:9e:ad:20:40:6e:a0:
         b2:c3:ac:d6:36:c2:5a:4c:ba:97:a6:04:57:b8:b1:3c:ca:0a:
         07:d7:c7:21:77:43:49:92:b3:09:98:8b:48:68:30:55:ea:32:
         72:15:32:4c:48:6c:4e:96:37:25:47:29:01:d1:aa:bd:7c:46:
         b8:71:0a:cd:3b:69:69:38:da:35:d4:d9:e5:2e:99:43:03:ca:
         f3:f2:65:d3:cb:9c:04:0a:39:31:8b:74:c0:14:bf:49:04:cc:
         d2:a6:d7:64:66:cc:c7:a5:70:82:d6:1c:bf:00:72:44:bc:c9:
         6c:ab:d3:1f:a0:18:66:1b:2d:c6:f1:ce:41:17:ff:3e:64:32:
         69:df:de:3e:c6:43:53:bb:5c:35:a0:4e:cc:90:b0:df:4f:9e:
         15:b5:b1:c1:91:aa:ae:3d:d1:93:fd:bb:6b:56:ad:eb:88:3d:
         15:05:a9:84:18:22:98:14:d2:c5:d2:44:60:db:5d:0c:d6:6d:
         91:8e:6a:1e:1c:52:54:d7:b2:44:a3:42:17:a1:9c:92:8b:26:
         4f:65:11:e4:2b:9d:46:40:97:f1:2f:f9:5b:c4:1b:3b:53:1e:
         5a:0e:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:43 2024 by rpki-client on console-ams.rpki-client.org