Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138362e3139332e3131322e302f32302d3234203d3e203533313433.roa
File:                     3138362e3139332e3131322e302f32302d3234203d3e203533313433.roa (raw, json)
Hash identifier:          bxLE6pK+ywsgXb4cKWrnf3cRZ1R4nkRZ9dD8gey5Ltk=
Subject key identifier:   04:C3:7C:D6:D7:09:89:23:A7:86:80:0B:91:89:4D:94:2A:C1:40:5A
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       5D7CB69B51E37B9A767E8A3AC8E5355987688F25
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138362e3139332e3131322e302f32302d3234203d3e203533313433.roa
Signing time:             Mon 08 Jul 2024 19:43:04 +0000
ROA not before:           Mon 08 Jul 2024 19:38:04 +0000
ROA not after:            Mon 07 Jul 2025 19:43:04 +0000
asID:                     53143
IP address blocks:        186.193.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7c:b6:9b:51:e3:7b:9a:76:7e:8a:3a:c8:e5:35:59:87:68:8f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:04 2024 GMT
            Not After : Jul  7 19:43:04 2025 GMT
        Subject: CN=04C37CD6D7098923A786800B91894D942AC1405A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:56:43:a0:6b:2c:d4:24:3c:55:b2:59:f2:
                    04:dd:78:20:1e:de:47:63:4d:8d:db:87:33:85:d3:
                    6a:d3:21:38:e9:6b:94:a1:c2:f6:b6:bb:31:c7:13:
                    50:cb:33:eb:4b:d7:ef:19:8d:06:d9:30:0a:31:70:
                    d5:d2:66:c1:18:76:9b:87:30:90:52:0b:0e:d1:ff:
                    8f:44:52:49:24:ee:bd:f8:52:89:8d:c1:2f:8f:8a:
                    da:b5:d1:ee:dd:e0:77:fa:2f:28:eb:0f:2f:db:cb:
                    dc:b5:4f:97:79:f7:85:a7:bc:d7:a9:0f:85:29:f8:
                    78:4b:55:e7:e6:06:d2:5a:6b:32:7f:b6:5f:74:fb:
                    4f:3f:bb:71:67:dd:eb:c1:e2:c9:86:88:b5:9e:bc:
                    c9:25:ba:78:86:6c:66:e8:f9:7e:90:50:e1:3b:63:
                    32:2b:6d:8b:73:84:6d:98:39:50:94:ec:6b:d3:a0:
                    52:f1:5e:9d:30:e6:d2:40:cd:ca:a8:15:8f:b7:a0:
                    a4:a4:29:c3:cc:db:b0:ba:82:1b:84:dc:f3:ed:57:
                    7e:ea:51:95:87:89:7d:24:23:48:1d:13:37:43:3f:
                    0a:c2:d8:af:10:53:f5:9f:71:22:c8:27:47:3d:6f:
                    6a:5f:1a:4b:42:a6:2c:b6:dd:30:6b:85:d0:61:7d:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:7C:D6:D7:09:89:23:A7:86:80:0B:91:89:4D:94:2A:C1:40:5A
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138362e3139332e3131322e302f32302d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:ce:2f:1c:13:f6:3a:dc:84:c7:ae:56:40:44:00:e0:9a:
         9f:4f:22:f1:5d:3a:83:9a:91:d4:42:91:08:99:93:0a:ab:a0:
         e9:49:e0:1f:9f:97:ce:99:0d:8d:6a:fa:9f:3c:7e:31:eb:d9:
         2e:4f:75:46:11:f4:ab:03:04:d7:d9:e5:a5:4c:73:b5:a2:83:
         32:f9:b7:61:64:50:1b:2c:7b:60:86:24:29:7e:81:24:4b:25:
         ee:b2:2d:bb:4d:df:6a:88:e2:48:bb:76:a5:a9:5c:e8:12:52:
         18:38:62:2e:84:3c:92:a9:bf:0d:10:e8:58:4e:ad:e4:ef:54:
         f6:59:34:c2:e5:b3:53:d2:73:fa:5d:80:eb:bd:29:a6:74:a4:
         4e:80:5d:e6:17:cb:7c:bd:ed:ed:2b:93:ae:e9:4b:ea:73:3b:
         43:7d:b4:c2:d2:c4:91:7d:12:ad:38:81:c5:11:d9:62:ef:58:
         57:6f:66:79:15:19:c3:58:ab:62:24:ed:22:49:86:01:d1:e1:
         a0:fb:be:93:d7:40:72:61:fa:44:c7:11:96:f5:53:6a:6f:8c:
         b9:3a:2a:a8:b8:17:1d:c1:14:13:4a:97:30:df:6f:cb:8a:c3:
         4c:1d:07:e1:1b:3b:4d:72:7d:74:d8:fe:f8:bb:8c:14:10:7d:
         c3:70:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org