Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
File:                     3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          7j7UP1+9yF/VAOiPFmW1meA80uskJKHEV1+fzeE0pwI=
Subject key identifier:   07:B8:BD:98:70:C2:6C:B2:46:63:C9:C1:1B:72:63:3F:92:60:D8:2B
Certificate issuer:       /CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
Certificate serial:       49B5C5EFDAF611D1A00AE9E7E185EB8798631024
Authority key identifier: BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
Signing time:             Wed 31 Jul 2024 16:25:30 +0000
ROA not before:           Wed 31 Jul 2024 16:20:30 +0000
ROA not after:            Wed 30 Jul 2025 16:25:30 +0000
asID:                     262403
IP address blocks:        187.61.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b5:c5:ef:da:f6:11:d1:a0:0a:e9:e7:e1:85:eb:87:98:63:10:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
        Validity
            Not Before: Jul 31 16:20:30 2024 GMT
            Not After : Jul 30 16:25:30 2025 GMT
        Subject: CN=07B8BD9870C26CB24663C9C11B72633F9260D82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:af:8e:af:1d:33:58:cc:39:ba:94:27:d5:
                    9e:97:9b:a5:b2:19:73:ea:6c:95:cc:70:03:d2:f3:
                    d7:79:a9:c8:8a:2d:30:69:27:af:a5:5e:67:82:2a:
                    1f:88:dc:8f:11:25:89:c8:51:98:3b:0a:65:71:c8:
                    d5:15:54:21:4c:6f:27:d2:a1:be:67:b9:b6:b3:ff:
                    54:1b:85:2f:eb:df:34:1d:2f:57:1e:d3:da:5f:91:
                    fd:86:6a:20:c1:27:36:11:85:e7:74:1e:14:86:9b:
                    82:e9:29:02:ff:99:28:cf:b2:d6:6b:f7:c2:c5:83:
                    a1:ad:09:d2:b0:fe:47:d8:5d:ef:70:4f:ae:b9:4d:
                    1f:94:76:b2:18:09:96:a3:9d:3a:95:6f:de:33:82:
                    c1:b9:d9:95:2c:f6:f9:ad:f9:6c:1b:79:32:34:fd:
                    be:c2:c4:77:2e:38:cf:ad:8b:63:ec:fc:70:aa:99:
                    3e:e0:ca:6e:ff:42:d4:98:7f:73:ec:80:dc:d9:78:
                    3d:e8:39:2d:98:85:9a:d2:c7:b5:8a:b5:f9:43:5b:
                    a2:42:74:aa:52:12:b2:89:e7:72:ae:d7:a9:f9:f9:
                    f4:40:c7:dd:a9:de:1c:9e:39:4d:5b:d4:5c:7e:65:
                    68:ce:ed:5b:25:de:e4:24:06:7a:6a:7a:c0:ad:b5:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B8:BD:98:70:C2:6C:B2:46:63:C9:C1:1B:72:63:3F:92:60:D8:2B
            X509v3 Authority Key Identifier:
                keyid:BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:09:cc:e6:1d:43:0b:80:b3:92:15:34:12:a6:9f:97:53:d6:
         21:96:93:48:da:4e:47:2e:82:39:5c:d1:53:9e:91:bf:0f:85:
         71:73:a0:e4:c8:cd:58:a6:1c:24:c0:a9:dc:34:5c:1b:05:69:
         20:dc:32:44:e9:d6:28:6d:62:53:5c:ed:00:ca:61:10:02:ce:
         af:0b:dd:60:b3:61:f0:a1:27:64:51:1a:d6:16:1a:6c:4c:16:
         08:8e:b2:ab:46:46:b4:11:7c:5e:21:db:87:24:bb:34:59:ed:
         f7:01:da:df:45:93:63:d2:8d:35:3f:ef:ad:fb:51:01:82:8d:
         08:35:51:b6:90:59:ce:cd:83:3d:42:35:c2:8b:07:d2:f8:c9:
         49:b5:f2:01:8b:84:74:2e:07:57:97:b3:b3:fa:ac:5a:0e:15:
         64:d9:56:9c:83:17:f9:bc:aa:8f:01:e5:d1:c8:31:cd:24:86:
         84:f5:f3:4f:b5:fb:c7:c9:af:fd:d0:43:72:34:00:4b:77:e1:
         7d:87:37:a7:c3:b3:20:48:bf:70:f3:60:c5:30:cb:fa:07:ea:
         fc:a7:cc:bc:7b:f6:5c:41:1f:4a:90:71:67:49:b4:80:22:bb:
         2b:60:62:eb:20:fd:82:75:55:37:c2:59:96:ae:86:4f:f6:eb:
         e8:d6:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:16 2024 by rpki-client on console-fra.rpki-client.org