Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          +f9RHLbchHDTC1P9mvxi5eNvkoePX6uVSunhtBHaOsQ=
Subject key identifier:   18:A6:D1:BE:98:78:56:18:6B:77:40:CA:0B:3B:29:70:D9:D9:7B:01
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       7448B847993D846D7413B8B50234B21006BD53B9
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:51:58 +0000
ROA not before:           Fri 18 Oct 2024 11:46:58 +0000
ROA not after:            Fri 17 Oct 2025 11:51:58 +0000
asID:                     263338
IP address blocks:        191.36.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:48:b8:47:99:3d:84:6d:74:13:b8:b5:02:34:b2:10:06:bd:53:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:46:58 2024 GMT
            Not After : Oct 17 11:51:58 2025 GMT
        Subject: CN=18A6D1BE987856186B7740CA0B3B2970D9D97B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:6a:72:fb:5f:db:90:13:6b:dd:8d:58:34:
                    7a:4c:0e:a6:7f:0f:ff:66:24:0f:1b:ea:5f:c6:02:
                    4a:30:db:c4:11:8e:a4:6e:37:13:18:fb:eb:8b:b8:
                    46:26:b5:75:43:a2:59:06:df:36:a2:c9:34:6b:f1:
                    20:ce:f4:27:9d:8d:77:4e:00:6f:51:e4:db:7d:0e:
                    57:7f:01:c4:ec:ea:02:55:41:f3:2d:cf:f4:c7:17:
                    2b:06:5d:0b:60:76:fa:09:d0:90:7c:f1:5f:11:6a:
                    88:31:5e:10:34:56:a2:e5:ab:b7:b4:6e:41:c8:97:
                    2b:b8:e4:87:34:8e:88:13:18:7e:a0:22:ca:6a:eb:
                    b6:81:a6:e0:0a:12:74:81:46:6d:c9:8f:c5:66:dc:
                    ed:0f:32:95:27:ec:64:8f:4d:86:65:54:a9:bb:af:
                    85:80:3b:c9:bd:e2:28:0e:83:a0:1f:81:c3:e0:47:
                    f8:06:41:8a:e4:2d:6a:fe:54:f8:92:22:b4:66:34:
                    e5:f3:56:1c:8f:22:bb:6d:43:93:86:73:0d:63:94:
                    c2:8f:2a:92:ba:47:3d:39:30:2c:fc:f7:90:89:1e:
                    22:ee:77:a6:93:5b:be:11:d3:e0:e0:47:2f:de:2d:
                    d7:38:f1:f9:74:3f:7b:69:b8:37:ca:af:3b:64:df:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A6:D1:BE:98:78:56:18:6B:77:40:CA:0B:3B:29:70:D9:D9:7B:01
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138382e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:86:fa:3c:1a:ea:79:43:99:b9:3d:a5:db:c5:15:41:b6:57:
         ad:32:3e:59:c5:60:ae:65:a6:7a:52:cf:6b:f9:97:36:d8:64:
         2a:0a:db:de:1a:02:81:4a:46:8a:71:72:b2:c4:0a:d8:41:0d:
         30:11:1e:5e:3e:3d:c4:d1:af:71:03:21:e3:c2:8e:65:fe:c2:
         9c:05:39:b1:64:97:d4:4c:3a:2c:99:f6:b6:a4:e3:dd:00:4f:
         45:fb:c7:ff:42:0b:59:3c:c3:ea:df:3c:84:22:37:6d:0b:c2:
         25:7c:a0:94:a1:df:db:c3:33:d4:ce:b0:bb:54:56:2d:bb:b3:
         6a:11:71:6a:cf:c1:92:4b:ac:0d:24:30:5d:09:62:80:b7:01:
         a8:2b:6d:d0:cc:d0:38:21:45:c2:76:e6:1b:0c:b0:c0:bd:dd:
         5a:ac:6a:09:24:47:01:16:ab:53:53:9e:be:ff:98:78:a2:9d:
         c8:33:12:9e:07:97:c3:42:3f:55:8b:5b:7f:f4:1a:3c:46:f7:
         8e:c7:00:8b:3d:fe:2f:62:5b:36:a9:05:42:92:47:d9:ff:30:
         0c:73:af:77:34:b2:ec:84:d1:73:8b:f5:69:1d:cb:20:35:ad:
         97:3b:da:78:90:63:bc:f2:a7:9c:04:f3:e2:89:c1:18:f6:f2:
         b8:b8:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org