Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa
File:                     3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa (raw, json)
Hash identifier:          //31swbQJQ3iiW0GcV/XWK8SZ8SzArtp8KCsq6pKh3o=
Subject key identifier:   2F:CD:20:42:64:2D:A2:54:2C:DB:61:5A:FE:9F:4A:FD:02:A7:D2:B5
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       62F53063BCEDA6A67897F0B4D220D0E7C0536505
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa
Signing time:             Thu 04 Apr 2024 01:08:40 +0000
ROA not before:           Thu 04 Apr 2024 01:03:40 +0000
ROA not after:            Thu 03 Apr 2025 01:08:40 +0000
asID:                     263101
IP address blocks:        186.225.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f5:30:63:bc:ed:a6:a6:78:97:f0:b4:d2:20:d0:e7:c0:53:65:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Apr  4 01:03:40 2024 GMT
            Not After : Apr  3 01:08:40 2025 GMT
        Subject: CN=2FCD2042642DA2542CDB615AFE9F4AFD02A7D2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:3b:d9:16:14:e0:93:cb:dc:d3:a8:ef:56:
                    e2:08:6b:ad:4b:b4:df:7d:2c:ca:b8:7e:c4:87:97:
                    19:ca:77:6c:34:94:50:67:b3:ac:62:9c:6c:7d:32:
                    50:f5:87:9a:5b:d5:8c:32:c4:c5:12:fd:d2:5b:bd:
                    de:5e:d6:d3:4b:f8:9e:f8:db:fb:18:61:5c:8e:b6:
                    97:9f:d1:27:cf:a8:9a:61:df:47:ae:43:d0:cb:2e:
                    82:c2:c0:6e:ed:7d:f4:04:22:fc:71:85:ca:c9:97:
                    50:a3:6e:1f:87:28:fc:db:c9:52:92:1d:45:96:d1:
                    ad:39:41:68:19:04:bf:df:84:52:1b:d2:be:18:04:
                    3f:f6:2f:1f:c6:b2:a8:f2:34:e0:9b:93:52:12:2f:
                    dd:06:aa:ae:a8:94:31:f0:b1:b3:96:36:97:02:9e:
                    dc:0b:6c:29:99:2f:92:f2:b3:ec:1b:44:7f:27:1e:
                    85:c2:dc:35:e8:96:4a:37:a2:40:34:d9:51:c6:df:
                    b0:ca:20:3a:3e:0f:ad:41:15:9f:c9:ae:68:6b:d7:
                    06:f6:b7:b5:f2:da:c1:32:76:27:e5:45:a7:fc:fa:
                    f9:62:bc:85:dc:01:0e:70:1a:47:79:2d:67:00:f5:
                    c8:17:8b:4e:88:e6:15:ec:02:20:7c:5b:05:da:06:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CD:20:42:64:2D:A2:54:2C:DB:61:5A:FE:9F:4A:FD:02:A7:D2:B5
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:a0:cd:60:98:75:d2:fd:2f:01:86:8b:8b:b7:7f:79:a9:
         1c:e5:09:f4:93:e8:46:db:d5:b3:56:b0:6f:b2:1e:cf:85:67:
         d9:8a:05:b5:61:bf:b5:0e:cf:f4:38:29:49:f5:d3:e0:2b:a0:
         28:1b:c9:22:85:b2:98:49:0c:9c:4f:56:64:d8:8c:0d:33:57:
         b4:cc:f6:31:97:6f:a0:0d:0b:58:93:ae:12:71:29:d9:68:4b:
         77:f1:08:a0:20:d4:72:13:fb:aa:f7:b7:a6:aa:9b:ef:95:bd:
         cf:dc:83:d5:76:2c:4f:60:14:3c:fe:6c:29:86:01:22:88:e0:
         6e:47:4d:59:4f:eb:58:19:5c:f9:03:ac:0d:53:b3:4a:58:d5:
         e4:10:e6:70:3e:8c:70:48:c3:53:cf:84:a9:5f:88:90:fb:ca:
         c9:46:f4:b9:2d:c0:78:23:53:4e:8b:07:c5:25:9c:df:85:e0:
         81:d0:18:8a:0f:c6:93:72:44:80:70:25:80:5c:64:48:dd:8d:
         05:ab:6f:41:5b:8b:23:1f:dc:9b:58:f0:20:cf:f5:5b:65:ec:
         26:81:54:9e:db:ff:45:b5:20:52:ed:b6:87:fd:c2:7d:c4:98:
         78:d2:85:a0:7f:e6:07:be:52:c4:c5:f2:5b:2e:14:ec:3f:1c:
         6e:e3:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org