Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139372e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3139372e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          +0/sTpUpdBcbUW1lNQGiW+b08qq5M8xn7UcGPvrl+BA=
Subject key identifier:   00:8A:1A:4F:F8:70:A3:0E:B0:A4:D0:A5:08:E7:B4:32:FB:DC:F5:04
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       0226D5B903208B0E7C57AA32C5DC34E7614E85F2
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139372e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:48 +0000
ROA not before:           Wed 03 Apr 2024 22:07:48 +0000
ROA not after:            Wed 02 Apr 2025 22:12:48 +0000
asID:                     52973
IP address blocks:        186.216.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:26:d5:b9:03:20:8b:0e:7c:57:aa:32:c5:dc:34:e7:61:4e:85:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:48 2024 GMT
            Not After : Apr  2 22:12:48 2025 GMT
        Subject: CN=008A1A4FF870A30EB0A4D0A508E7B432FBDCF504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:49:52:29:15:7d:0b:64:cf:4c:35:22:ea:
                    c8:8e:79:af:70:06:c6:1a:52:ac:eb:5d:65:41:70:
                    16:1f:5e:bf:27:d4:bf:cb:ae:d5:d6:45:14:e7:61:
                    62:91:0c:28:81:ce:96:35:01:ec:c0:a1:e2:55:00:
                    54:81:77:c3:36:1a:b6:15:db:c3:2c:a5:37:bc:4f:
                    54:a6:e6:3a:cd:30:34:fa:4a:67:29:3d:39:04:97:
                    a6:f0:79:3c:4f:0e:c6:87:27:f5:88:0d:94:08:2d:
                    1d:2e:c1:f5:15:95:07:9d:4a:1a:89:a4:d3:54:f5:
                    19:8b:30:6e:81:48:a9:96:f8:04:71:60:e2:e7:9c:
                    b0:e2:c6:bc:02:c8:b3:89:ef:72:df:a1:fb:8f:1a:
                    bd:60:ab:f0:63:ac:ff:6c:5a:5c:b0:34:27:54:4c:
                    ea:c2:fe:48:2e:fa:4e:f3:06:6c:31:94:a2:30:51:
                    dd:6d:69:87:0e:8d:39:37:14:d4:cb:90:32:1b:d1:
                    aa:1a:37:88:a0:42:21:c6:05:37:f1:85:ca:68:0f:
                    68:75:35:f1:fd:4b:87:65:ed:60:08:6d:49:af:bf:
                    34:48:ac:55:d6:32:84:fd:e0:04:25:db:c7:23:bf:
                    59:1c:c8:0f:fd:06:ab:c3:4b:21:be:ca:8d:22:2c:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:1A:4F:F8:70:A3:0E:B0:A4:D0:A5:08:E7:B4:32:FB:DC:F5:04
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139372e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b2:8d:b9:b7:30:28:13:22:8d:85:be:28:05:dd:64:b7:15:
         8d:15:d7:e2:63:0d:8b:1c:43:4d:f6:7e:fe:80:6b:c8:2b:9f:
         81:a8:dd:b8:3c:66:af:ae:bf:98:82:a9:49:43:62:6e:79:e5:
         45:5d:91:6a:ab:fd:34:b4:28:7b:9f:5d:33:73:ee:bb:2f:48:
         f4:21:d3:73:54:58:49:fb:18:85:69:aa:9a:a8:fc:cd:94:52:
         7d:17:36:07:58:f7:45:fb:1e:ad:55:75:4c:49:a5:0f:55:e2:
         e9:dd:d3:cc:8d:3a:2c:67:de:a9:1d:8c:59:06:13:57:8b:68:
         c0:52:ab:7e:84:84:b3:d3:57:88:30:d6:c8:01:5b:70:1d:e1:
         39:51:27:99:0c:76:28:42:b9:40:92:f5:ea:98:d4:b5:0d:81:
         73:77:4e:b8:1b:00:b7:15:a0:f4:ff:e8:c7:2b:6a:a0:91:4c:
         f9:65:8c:8b:e6:4e:49:30:31:e4:d4:d7:0c:51:68:71:e0:65:
         52:92:0f:24:d5:4a:5c:a2:6e:b0:64:b2:11:cd:c9:12:8a:91:
         01:19:e2:ae:5d:9e:aa:d2:27:d6:d3:a0:b7:fc:06:e5:2a:2d:
         ed:c1:46:35:f3:14:39:4f:c7:e4:30:14:c1:35:f3:6f:64:e8:
         b5:55:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:59 2024 by rpki-client on console-fra.rpki-client.org