Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32332d3233203d3e20323633313031.roa
File:                     3138362e3232352e3231342e302f32332d3233203d3e20323633313031.roa (raw, json)
Hash identifier:          6lhNyLk8HLGgiZW2GFtfGoxKjpHN8eoz8ehBNNXJ6Do=
Subject key identifier:   60:F0:6E:9F:F8:02:C4:C9:F6:C6:1C:3C:60:DF:50:27:7D:4E:09:38
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       4EE64C73A0617332F648BF12A476805EF93C4CA2
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32332d3233203d3e20323633313031.roa
Signing time:             Thu 04 Apr 2024 01:08:41 +0000
ROA not before:           Thu 04 Apr 2024 01:03:41 +0000
ROA not after:            Thu 03 Apr 2025 01:08:41 +0000
asID:                     263101
IP address blocks:        186.225.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:4c:73:a0:61:73:32:f6:48:bf:12:a4:76:80:5e:f9:3c:4c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Apr  4 01:03:41 2024 GMT
            Not After : Apr  3 01:08:41 2025 GMT
        Subject: CN=60F06E9FF802C4C9F6C61C3C60DF50277D4E0938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:c0:72:51:e5:4f:99:5f:1d:83:2c:99:82:
                    e9:ff:ed:70:89:eb:d9:94:c8:f2:9d:c3:5d:9b:a8:
                    bd:55:02:b9:11:ec:40:20:e3:d9:a8:54:12:42:cd:
                    5c:a8:7d:81:e2:74:a6:cc:19:0e:09:e2:be:ca:64:
                    69:b3:a5:de:9f:1e:c5:41:19:fc:51:0f:2d:ed:90:
                    c5:5a:98:3b:be:79:67:fb:36:cc:8c:0d:4b:e2:ba:
                    f2:6e:83:76:29:fe:c2:72:36:e9:c9:c1:f2:40:b0:
                    2c:bd:47:e0:f2:f0:01:33:2a:c6:87:32:14:b8:a5:
                    59:1e:0f:19:b6:15:58:8b:19:d9:e7:ce:c7:2f:e7:
                    5f:f9:60:cb:95:6b:f0:a1:49:e6:e2:b7:55:ea:d0:
                    a2:9c:40:88:f9:8a:27:8a:ec:57:6a:54:40:32:81:
                    b2:ff:19:bc:e8:67:54:7a:79:61:01:f4:eb:c0:8b:
                    e7:25:1a:38:9d:9a:bc:92:b0:bc:79:a0:5f:b5:f3:
                    d3:c6:07:36:cd:d2:3f:2d:a0:ea:7a:47:33:98:f6:
                    bf:36:bb:c2:ca:f7:43:14:5b:cf:8b:13:05:58:35:
                    3d:48:0f:95:04:a3:68:c4:49:65:f9:70:39:85:9a:
                    d9:3d:8d:77:13:28:d6:2c:ba:b0:42:ff:71:48:71:
                    bb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:6E:9F:F8:02:C4:C9:F6:C6:1C:3C:60:DF:50:27:7D:4E:09:38
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32332d3233203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:1e:09:d5:ab:b6:f3:a4:bd:ae:82:bd:0a:28:17:84:55:
         df:3b:43:ba:31:a1:2b:80:a3:57:09:91:33:62:4d:af:78:0b:
         3c:b4:93:50:a8:0d:bd:16:6a:60:a4:42:4a:fd:63:c6:20:59:
         20:5b:28:72:53:ec:fa:dd:ec:e5:3f:1a:2a:0a:e4:9b:f7:97:
         cc:7c:3c:26:b1:85:eb:a3:53:71:07:ff:8c:a4:97:10:d2:85:
         fa:f9:8f:2a:3f:f8:c3:b5:19:91:c7:10:10:a5:c3:84:ad:06:
         3e:fc:46:c9:37:9c:19:ef:eb:81:2f:5f:b3:db:7f:1e:e2:c3:
         bc:e0:f3:d2:4b:2d:e3:e6:8c:00:ef:ed:06:a4:93:40:21:b9:
         3b:f6:02:af:c2:79:59:33:c7:5a:30:00:5f:ee:f2:89:08:44:
         2a:d9:11:92:57:2d:2f:53:b0:9b:f2:ce:2b:40:a1:06:76:81:
         84:28:56:c4:f0:13:92:38:52:99:f1:fb:f8:bc:e4:0e:8c:72:
         3f:44:a8:62:70:06:bd:82:e9:8d:62:12:51:f8:e2:82:68:cf:
         69:f8:da:30:1f:9e:d8:e6:a2:ce:2e:a2:b2:53:fd:3c:83:87:
         45:f7:fc:ea:44:1b:4a:32:7d:b0:4b:1f:30:86:2f:73:bf:26:
         0a:58:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org