Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137382e302f32332d3233203d3e203533323039.roa
File:                     3138362e3233332e3137382e302f32332d3233203d3e203533323039.roa (raw, json)
Hash identifier:          h+RLC0e0DQ5JJTRZj/NXPeAl1F+zXFNULpc0ovnDDuk=
Subject key identifier:   08:18:1C:C7:7C:F7:78:16:1A:15:32:A7:40:0C:5C:56:E9:1E:2E:A8
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       6CFDFE714EF0F278CDC5577FE0C548A63DC54DB5
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137382e302f32332d3233203d3e203533323039.roa
Signing time:             Tue 06 Aug 2024 17:59:44 +0000
ROA not before:           Tue 06 Aug 2024 17:54:44 +0000
ROA not after:            Tue 05 Aug 2025 17:59:44 +0000
asID:                     53209
IP address blocks:        186.233.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:fe:71:4e:f0:f2:78:cd:c5:57:7f:e0:c5:48:a6:3d:c5:4d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug  6 17:54:44 2024 GMT
            Not After : Aug  5 17:59:44 2025 GMT
        Subject: CN=08181CC77CF778161A1532A7400C5C56E91E2EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:d2:b7:5d:2c:08:a6:6a:a7:52:35:2d:b3:
                    33:99:3e:83:d6:0f:f9:79:c6:79:fc:de:69:e5:72:
                    1e:48:85:0c:1a:f4:58:6d:8b:89:2d:29:a0:9e:f4:
                    70:30:9f:a5:c1:97:25:d0:41:4b:74:3a:2f:f3:77:
                    12:ef:d6:c4:50:6e:5f:6d:05:77:0e:f6:df:3f:32:
                    c1:57:d4:1f:2d:7f:69:47:97:d0:d0:03:f9:31:ef:
                    91:d3:23:73:0b:e4:54:63:dc:39:56:4c:60:1c:ad:
                    ba:19:3c:b0:5b:b2:ba:96:04:a4:b3:51:9c:30:e8:
                    33:0c:37:43:cb:d3:10:d5:3a:1e:10:6a:c8:2c:7f:
                    77:90:86:ca:c2:a1:e9:f9:90:14:6e:35:06:96:b0:
                    84:68:f8:65:4e:89:b7:a0:4a:57:f5:c5:f9:7c:33:
                    40:e1:97:b1:7c:4a:53:e6:7b:77:ed:07:db:74:4d:
                    e7:1c:ff:89:df:4d:1b:46:92:ef:76:c5:b5:81:a5:
                    88:f7:db:93:63:f1:ee:da:68:8a:52:d6:4c:d2:23:
                    8c:fb:e0:ee:f5:54:db:e2:d8:4c:84:75:32:c6:b8:
                    98:db:1b:c6:9d:de:c0:2b:bc:15:ac:80:c3:f9:42:
                    c0:d9:df:0d:4c:c8:ef:17:3e:5e:a2:23:e4:24:de:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:18:1C:C7:7C:F7:78:16:1A:15:32:A7:40:0C:5C:56:E9:1E:2E:A8
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137382e302f32332d3233203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:01:ec:af:13:a4:27:ec:3c:7c:3a:c4:ee:2c:9d:6f:33:fb:
         b1:f6:c1:9a:d2:c1:89:31:25:53:9a:ef:17:43:e1:a0:3f:62:
         34:05:e5:c5:5d:26:27:e4:89:f7:0e:af:53:6b:03:3f:dd:c2:
         35:8f:38:21:d6:82:60:05:bd:f6:01:14:b7:6a:53:51:3c:85:
         cd:40:38:b3:26:d4:27:73:0a:48:73:d8:50:ff:98:fa:1d:6a:
         10:8c:d0:3c:da:25:52:37:07:66:8b:9c:b0:58:c7:70:25:8b:
         f7:d3:5e:7b:07:61:d8:f7:71:55:a6:1c:4b:e0:ca:0b:bf:44:
         13:36:63:fe:91:2d:4a:2c:6c:92:e7:e4:e5:f1:23:8a:47:a6:
         9b:bb:0f:93:34:40:f5:d2:8a:2e:65:02:4f:8b:02:c0:be:d5:
         f1:dc:cc:76:21:6e:b1:df:8a:5c:17:c9:16:5c:84:34:fa:02:
         a4:7d:38:a8:be:ef:88:b4:30:f4:b3:c6:16:99:4c:6d:4e:b8:
         60:39:e2:48:77:4d:51:f1:57:1e:0e:88:56:8e:40:08:01:a1:
         0a:a1:e3:3a:4d:61:ac:8b:f9:7e:64:0b:f1:cb:3f:d2:40:cc:
         d1:da:69:7e:eb:be:ab:0e:d4:37:05:e5:1a:f0:6b:1e:34:20:
         88:36:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:37 2024 by rpki-client on console-fra.rpki-client.org