Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa (raw, json)
Hash identifier:          M40p74FlCtJhkSWMWrOd8h1Le+baNHJgzYctPqDevtE=
Subject key identifier:   6B:44:B0:BA:67:67:8B:37:35:39:CE:81:81:87:BA:96:37:2D:E7:43
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       2D292562E9EE4E726AE8ACA36F891D7C21FDF4A4
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa
Signing time:             Thu 04 Apr 2024 01:08:40 +0000
ROA not before:           Thu 04 Apr 2024 01:03:40 +0000
ROA not after:            Thu 03 Apr 2025 01:08:40 +0000
asID:                     263101
IP address blocks:        186.225.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:25:62:e9:ee:4e:72:6a:e8:ac:a3:6f:89:1d:7c:21:fd:f4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Apr  4 01:03:40 2024 GMT
            Not After : Apr  3 01:08:40 2025 GMT
        Subject: CN=6B44B0BA67678B373539CE818187BA96372DE743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:bf:08:f8:33:06:6f:a8:bc:e2:a2:1b:23:
                    71:14:8e:d7:2b:8c:c7:01:17:6c:3a:b5:04:37:66:
                    26:28:ab:76:7e:1f:fb:8a:ee:71:c7:7e:ba:37:b4:
                    0c:f1:35:16:ab:49:01:f5:1d:51:68:83:5d:76:38:
                    b7:fb:be:d8:65:46:cc:8e:d8:72:69:d6:e2:52:84:
                    5c:00:63:2c:32:4a:14:20:4f:e4:20:36:8d:f2:80:
                    3a:47:31:ab:42:84:17:8d:16:c7:90:3a:3a:fb:2c:
                    3a:9b:d2:4b:a2:25:98:94:e7:1e:6c:a8:73:e2:90:
                    66:93:f2:82:f0:fd:2d:e6:af:5d:13:e4:ff:c2:1b:
                    fc:a6:bc:2b:b2:e2:60:35:5e:4a:08:1f:ab:63:16:
                    a9:25:a9:2f:8e:6b:55:f0:78:50:37:79:29:ba:a4:
                    e7:38:15:e3:91:de:a2:59:9c:68:50:1d:e6:95:e4:
                    9e:8d:df:e3:d2:99:2b:e7:1e:75:3d:c6:00:3d:81:
                    cf:b4:45:51:0b:54:0d:23:73:b7:a2:93:7d:b6:d1:
                    19:87:d9:f8:87:04:4c:c0:58:02:4c:be:11:6b:c5:
                    ee:77:41:42:34:66:0b:6a:be:72:48:59:50:cb:d4:
                    a6:d6:71:d9:70:a8:7a:f2:0e:be:77:9d:9a:47:21:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:44:B0:BA:67:67:8B:37:35:39:CE:81:81:87:BA:96:37:2D:E7:43
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32332d3233203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:d3:78:9f:94:3b:5c:19:92:e7:6e:6f:60:69:fb:99:35:
         47:e6:a9:a7:72:3a:27:cc:8e:15:fb:e4:36:3b:f0:2a:09:b4:
         9b:e3:26:97:e3:6d:12:b4:4c:4a:13:bc:2d:3c:a4:77:b9:60:
         91:00:65:4b:71:d8:58:5c:25:13:81:d4:e5:94:72:7b:53:b7:
         12:c1:dd:a1:e2:bf:47:a1:31:4b:de:ad:22:9f:1f:2b:e6:f8:
         e4:b6:42:5b:6e:d0:d6:8a:8d:24:e1:d9:98:66:3e:63:9d:d4:
         c9:29:69:d7:d3:7d:1a:a5:51:62:41:84:44:75:34:a4:b4:95:
         0c:b0:07:f0:3b:6a:af:d1:73:6f:60:1e:fd:99:80:5c:0b:c1:
         a8:67:23:dd:80:42:30:e6:1e:07:dc:a5:79:f4:7b:1e:11:b7:
         22:6f:44:42:b5:8a:d4:10:19:23:f8:78:02:57:64:2b:b5:7c:
         56:2f:d5:2c:ea:b8:e9:35:e3:ee:75:d2:6a:d8:7c:78:67:85:
         54:12:f0:f3:ba:a8:ba:04:4f:ac:17:a2:9f:cb:25:1d:f8:29:
         26:fb:92:c0:ee:ed:69:72:09:36:ca:74:4c:0e:00:4b:2e:8c:
         67:2b:db:68:90:75:01:97:86:a3:5c:ae:97:f6:a5:3e:99:19:
         5e:2e:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org