Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3132382e302f32312d3234203d3e20323635393733.roa
File:                     3138362e3233332e3132382e302f32312d3234203d3e20323635393733.roa (raw, json)
Hash identifier:          daCZVYdQlVzFzisTkWPp9UI9qDeq4t4ouQfwqecELvU=
Subject key identifier:   30:A5:95:12:F6:EC:5D:71:3B:4A:51:05:1F:48:42:85:20:7C:3F:A1
Certificate issuer:       /CN=57DB3581E707C22BBA17B8AD12B81942965761D7
Certificate serial:       3B0C2557529249BC4316BABE07AA6E2357ED4D50
Authority key identifier: 57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3132382e302f32312d3234203d3e20323635393733.roa
Signing time:             Wed 28 Aug 2024 13:37:23 +0000
ROA not before:           Wed 28 Aug 2024 13:32:23 +0000
ROA not after:            Wed 27 Aug 2025 13:37:23 +0000
asID:                     265973
IP address blocks:        186.233.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl
                          rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0c:25:57:52:92:49:bc:43:16:ba:be:07:aa:6e:23:57:ed:4d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57DB3581E707C22BBA17B8AD12B81942965761D7
        Validity
            Not Before: Aug 28 13:32:23 2024 GMT
            Not After : Aug 27 13:37:23 2025 GMT
        Subject: CN=30A59512F6EC5D713B4A51051F484285207C3FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:17:38:61:7e:de:50:6f:7b:ab:65:29:21:
                    6e:08:25:2b:4f:10:d0:f5:8f:36:de:7f:db:23:bf:
                    d8:d0:7f:ea:9c:10:7d:89:ab:5b:6e:8e:89:11:16:
                    b7:b3:2f:b5:f7:7c:48:ab:cc:9c:94:2c:b5:12:cc:
                    94:6c:b1:3b:4f:2b:45:12:55:f5:80:51:51:92:3f:
                    e0:b4:7d:7b:78:15:c8:9a:8e:e9:d1:6f:4a:7f:c4:
                    6f:49:6d:c7:e3:56:17:b7:1d:26:f8:98:e7:4e:c4:
                    ac:e8:37:8e:c9:31:6d:c8:a0:bc:d8:48:ec:92:1f:
                    af:03:41:3c:17:ae:2b:1b:ec:c1:b0:23:dc:e9:af:
                    a9:de:7b:b2:d7:19:2b:fe:c6:a0:99:d6:30:60:ec:
                    43:b0:8f:3e:6f:90:86:da:b0:9e:ba:0c:f0:0e:86:
                    df:35:6c:d7:e8:9e:af:4f:57:51:a0:b5:50:81:02:
                    d4:c5:ba:78:a1:00:e2:d2:e5:37:bf:e2:8f:97:ac:
                    49:c0:6c:30:d9:35:5b:a7:3d:d0:84:ac:90:fe:45:
                    66:de:e7:af:5b:f3:83:8c:e8:67:c3:65:d1:4e:54:
                    83:39:9b:65:16:47:8c:e0:7c:8f:2b:ef:1d:47:3c:
                    27:7c:3b:b9:50:3b:0c:23:3e:ac:1e:fd:13:1d:03:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:95:12:F6:EC:5D:71:3B:4A:51:05:1F:48:42:85:20:7C:3F:A1
            X509v3 Authority Key Identifier:
                keyid:57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3132382e302f32312d3234203d3e20323635393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:25:94:99:b7:21:a9:ca:10:c9:ca:38:b3:74:7b:50:e9:a9:
         d1:e3:78:f1:3e:af:ed:84:70:a0:06:4f:19:e2:49:91:26:7e:
         a5:d4:86:28:3f:df:9e:a9:44:fb:9c:db:d5:bc:97:86:5f:b9:
         55:21:df:b7:6c:e1:22:76:7e:06:d4:96:ba:f8:92:f8:f6:39:
         a9:2a:e6:64:71:0c:ed:4b:64:71:3a:fd:0a:7c:af:81:c2:7b:
         3c:bb:58:5f:1e:a6:ab:c1:02:30:fc:d0:f4:30:91:61:3f:a8:
         d5:da:8a:3b:ac:50:ef:50:3d:31:5a:1b:47:8d:4b:b2:72:72:
         be:9e:a4:42:c6:d7:21:55:b2:98:54:33:de:01:44:43:3c:07:
         95:36:1b:5d:5f:48:80:ac:4b:bd:56:16:24:4b:71:b9:74:b1:
         65:41:4d:db:63:ce:16:89:3f:c0:4e:5c:58:2f:40:05:84:46:
         e4:41:43:2b:7c:aa:92:45:d0:2b:06:df:c2:2d:0b:ee:dd:de:
         91:2a:9b:32:65:47:79:e4:6c:1a:98:69:63:f7:36:9b:73:82:
         d7:26:40:a0:fc:9a:f5:fd:97:d8:8d:fe:b6:f0:84:99:de:02:
         cf:ba:02:47:24:b0:df:af:c2:27:0c:76:bd:89:41:98:f8:5c:
         3d:f4:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org