Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa
File:                     3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          KAer2/28otvbLp5sVAATaZiqPNgvfezbQyJYdGLkdE8=
Subject key identifier:   59:ED:A2:5B:B1:E9:22:16:37:5C:15:E9:B5:27:ED:92:06:D6:8C:9E
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       5322CF13995CDC0C62EF3501DF2816C02AC80FAC
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa
Signing time:             Mon 08 Jul 2024 19:43:07 +0000
ROA not before:           Mon 08 Jul 2024 19:38:07 +0000
ROA not after:            Mon 07 Jul 2025 19:43:07 +0000
asID:                     262420
IP address blocks:        186.219.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:22:cf:13:99:5c:dc:0c:62:ef:35:01:df:28:16:c0:2a:c8:0f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:07 2024 GMT
            Not After : Jul  7 19:43:07 2025 GMT
        Subject: CN=59EDA25BB1E92216375C15E9B527ED9206D68C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:94:85:90:fd:ba:b6:48:69:5d:ca:51:1e:
                    5e:80:dc:aa:cb:83:07:93:54:8a:9b:24:9f:e0:0d:
                    c4:f7:69:14:41:1c:c3:33:53:9a:c0:f6:1a:47:47:
                    ef:72:cf:12:03:b0:5e:1b:3e:30:a0:cc:43:b1:11:
                    b5:5f:41:33:d8:a1:f8:61:d8:e9:90:58:b3:1a:74:
                    49:9a:2a:1b:be:5b:3b:b1:fe:19:4b:61:65:ca:8a:
                    b6:eb:44:a4:6a:3d:c4:f6:d2:ec:38:8a:34:e9:e0:
                    58:b5:6f:36:57:60:9b:30:4d:a4:bd:f5:78:b2:17:
                    e1:43:52:7a:67:7b:74:10:54:ed:2b:6d:b8:b9:6b:
                    13:02:6a:3d:36:b7:c4:fc:dd:99:d0:f0:fa:a2:13:
                    54:4d:08:2c:5e:b3:06:10:1e:73:1c:f6:c7:41:69:
                    7b:fd:0c:31:e6:93:da:bb:e6:c0:5d:d5:8c:4e:48:
                    06:b7:7a:bc:6f:f9:a2:cc:e4:ef:00:82:95:fb:eb:
                    32:61:42:65:31:56:86:6f:30:a3:b1:9a:f2:24:bb:
                    03:b9:bf:61:dc:a7:29:0e:c3:49:4c:41:08:53:87:
                    69:14:91:b7:88:1e:64:16:2f:a6:87:21:e8:07:83:
                    f5:99:68:22:ba:26:e4:8f:8e:24:cf:7b:49:88:81:
                    d6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:ED:A2:5B:B1:E9:22:16:37:5C:15:E9:B5:27:ED:92:06:D6:8C:9E
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e8:76:97:6f:48:4c:80:f4:09:4c:57:e1:d8:73:ab:0c:5c:44:
         28:c4:25:91:3f:50:7c:5e:4b:a0:1d:93:01:ee:93:04:b7:2e:
         84:8b:27:31:87:14:e9:0f:a7:0c:53:a1:e9:e9:b5:f9:07:bf:
         e4:64:4e:98:ed:e0:69:3e:51:09:fd:1c:fd:d5:18:ed:85:c6:
         83:39:3a:9f:62:4a:2c:4d:2e:59:6e:1d:22:4e:4b:a8:51:23:
         62:ad:de:f3:1e:99:6b:a2:68:d3:c4:88:b8:76:dd:52:3b:04:
         7e:4d:60:b9:75:f0:17:28:57:bd:58:93:10:31:fe:23:e9:48:
         80:81:37:c2:b9:9a:6b:41:93:8b:18:40:95:6d:9d:48:a1:3c:
         2f:ed:2c:7a:ad:0d:84:db:8f:f0:22:a9:18:e5:e7:f8:54:97:
         3f:eb:19:fe:cc:7a:3a:1f:84:40:2c:ae:8b:92:44:af:f9:44:
         65:a9:b9:a8:6f:ca:19:c9:16:49:ee:6a:ef:9e:9b:c1:63:84:
         2b:ef:fc:76:7a:ef:8c:90:b7:8b:3b:c6:c5:2f:e1:1c:49:f2:
         59:05:08:11:8b:4b:06:b4:1c:9b:d6:d4:82:20:a1:e8:33:ba:
         23:2d:20:80:dd:3c:6d:23:72:8a:43:63:b3:10:73:9d:13:e8:
         25:b4:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org