Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233322e302f32342d3234203d3e20323634313030.roa
File:                     3138372e3132312e3233322e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          mvPlnbIehjzmx5SwxnySNMSnf58JZcbgkiArOijuMTI=
Subject key identifier:   CD:5E:2A:14:CA:FC:4E:28:37:96:6C:A9:9A:D3:72:4F:D3:89:29:E5
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       6FB295F1D87A4D908D257121CC4CD5869B4FDE24
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233322e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 18 Nov 2024 13:24:48 +0000
ROA not before:           Mon 18 Nov 2024 13:19:48 +0000
ROA not after:            Mon 17 Nov 2025 13:24:48 +0000
asID:                     264100
IP address blocks:        187.121.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b2:95:f1:d8:7a:4d:90:8d:25:71:21:cc:4c:d5:86:9b:4f:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Nov 18 13:19:48 2024 GMT
            Not After : Nov 17 13:24:48 2025 GMT
        Subject: CN=CD5E2A14CAFC4E2837966CA99AD3724FD38929E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:de:70:67:bc:43:8b:7f:3e:cd:a3:99:a8:
                    b3:1a:04:8d:9a:c8:cc:fc:a9:71:71:06:2f:c6:8c:
                    a8:55:df:80:8c:d6:3d:e9:7f:25:c3:cd:15:18:f3:
                    10:10:8c:3f:14:72:66:00:5d:7f:06:03:35:fa:a6:
                    dd:b9:06:f9:54:63:e9:0d:d8:43:e6:02:75:bc:3d:
                    22:ce:07:a9:3c:a1:70:d4:bc:e7:e0:11:76:c4:58:
                    bf:e4:5c:63:f7:f3:3e:a4:73:26:a9:74:56:f8:96:
                    4c:73:b3:19:e9:db:0f:08:28:b6:da:bd:ee:5f:de:
                    ec:38:bb:ca:6f:c4:d4:6b:45:18:ff:02:6f:f1:15:
                    80:fb:58:88:b5:08:d7:19:bd:ee:df:d8:47:78:2c:
                    8a:8f:18:97:b6:59:a7:28:c4:a9:e1:7a:e6:de:66:
                    d1:8c:12:98:5e:74:28:e3:0d:fd:e6:ba:3c:2e:4c:
                    52:2a:1c:11:44:4d:51:09:6b:20:2a:5f:50:62:56:
                    d3:8f:f7:f6:28:9c:ad:63:2d:02:3d:97:b6:37:98:
                    86:08:ac:3f:b7:cd:fd:e7:cb:0b:a9:05:76:3d:2d:
                    41:92:1c:36:5b:4c:ef:e4:e2:1e:8f:3e:f5:fe:af:
                    c5:07:e3:0f:b8:c8:04:a2:79:41:02:f6:ed:63:89:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5E:2A:14:CA:FC:4E:28:37:96:6C:A9:9A:D3:72:4F:D3:89:29:E5
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233322e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8c:75:cd:5a:32:48:33:71:3f:e6:40:d9:18:0c:94:6b:70:
         ca:e9:6e:c7:4d:c3:5f:d4:14:4d:d1:65:89:65:88:be:20:88:
         9f:77:bd:c9:02:31:9f:9b:96:a6:92:f7:df:d6:ee:81:f8:1a:
         b3:c7:ae:b9:ea:ff:7e:f9:d1:b5:99:90:4e:eb:e8:70:9a:09:
         c6:b4:c5:58:94:b3:40:69:ea:93:e8:a6:28:c4:15:6b:ce:65:
         1c:1c:c6:76:8f:b5:36:44:a8:95:22:96:3a:9a:5c:a4:b1:2e:
         82:22:d5:24:99:a1:b9:93:1c:95:8b:a1:b8:97:05:bc:2c:6c:
         1f:a9:b9:61:c6:79:b3:6a:ac:c4:7d:b1:c7:0e:c2:8b:02:e7:
         4e:68:8c:80:ba:d4:44:18:1a:c1:4c:e7:52:95:36:7d:7b:b4:
         68:ca:5a:f4:af:87:5e:7e:32:02:dd:38:53:cc:de:d3:de:8e:
         d4:9e:77:fe:ed:e8:69:ba:0b:9e:14:57:b6:51:e9:22:bd:bb:
         0f:3d:af:37:e3:b3:67:26:24:11:d6:ea:1b:be:66:66:84:6d:
         26:8b:6e:17:f4:20:4d:b9:01:28:5e:23:d2:fb:2b:f6:02:0c:
         14:82:74:74:95:15:b8:05:73:6b:de:d9:01:a3:3b:a9:7d:39:
         40:05:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:37:21 2024 by rpki-client on console-ams.rpki-client.org