Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231322e302f32342d3234203d3e20323634313030.roa
File:                     3138392e33362e3231322e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          tK7a6WqkS6BuR7Pe7k+eMR+fK5vIQCEjiz5qzMJ4rF4=
Subject key identifier:   30:1F:62:E0:A8:E6:97:F2:12:E5:B8:2B:3C:A9:3A:05:04:32:75:84
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       5BF8F34526DDFA3EDDACEA931830BF0845E579C1
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231322e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 18 Nov 2024 13:24:59 +0000
ROA not before:           Mon 18 Nov 2024 13:19:59 +0000
ROA not after:            Mon 17 Nov 2025 13:24:59 +0000
asID:                     264100
IP address blocks:        189.36.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f8:f3:45:26:dd:fa:3e:dd:ac:ea:93:18:30:bf:08:45:e5:79:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Nov 18 13:19:59 2024 GMT
            Not After : Nov 17 13:24:59 2025 GMT
        Subject: CN=301F62E0A8E697F212E5B82B3CA93A0504327584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:f4:05:fa:2c:79:b3:2b:cf:c2:ee:a1:ba:
                    7c:b1:2c:0e:7e:12:ff:60:fe:50:81:c1:e2:9c:cf:
                    91:14:88:40:43:ab:55:06:90:c0:e6:3a:e0:cf:79:
                    f5:52:b0:fe:4a:61:c6:9d:f9:a6:5f:a5:5e:88:b4:
                    25:fa:8b:a3:3d:43:86:68:17:8d:ed:60:a4:fa:22:
                    36:09:32:72:1e:2c:73:04:0b:e4:c1:63:38:cb:eb:
                    b8:94:44:16:25:3d:a6:a6:1a:25:ed:3f:27:00:89:
                    90:19:ee:38:1d:32:e0:be:0b:a9:f8:e9:16:a1:13:
                    b0:a2:03:48:1e:cb:41:cd:7e:3d:59:43:e3:23:a0:
                    3f:4d:44:92:01:f8:39:dd:e5:e1:0b:c2:66:65:49:
                    80:47:0a:ab:f4:a1:ee:b6:ee:4e:e7:43:d9:39:a0:
                    9c:a3:4b:6d:47:b0:6d:a4:1e:21:c4:02:d9:58:3a:
                    35:38:44:91:c2:d6:97:68:01:ed:00:58:76:34:5f:
                    6f:51:42:de:29:d7:ab:5d:96:0e:85:9e:c8:d9:e0:
                    76:09:7b:ae:8f:10:ae:6f:18:56:e9:b3:21:e2:ce:
                    26:17:3a:5e:f0:74:dc:47:11:b3:fd:77:67:3a:39:
                    8d:d1:6e:22:ce:cf:38:f5:0b:c9:9b:a0:8e:67:d0:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:62:E0:A8:E6:97:F2:12:E5:B8:2B:3C:A9:3A:05:04:32:75:84
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231322e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:48:be:3d:a5:09:47:aa:81:cc:46:82:30:2c:12:46:5a:
         19:cf:1d:1d:c9:8a:c5:29:c3:22:48:29:e3:fe:7a:dd:e6:67:
         a4:b7:b9:6e:38:a1:77:06:4f:d2:00:9a:9b:ed:b1:14:45:dc:
         73:ce:13:8d:c8:95:dc:31:25:83:ee:c6:ec:79:d4:83:5c:51:
         db:9f:e8:ae:97:d8:a6:aa:30:2f:a2:f1:b8:e5:6a:a4:12:95:
         e6:38:59:16:48:7c:1a:57:82:d7:af:04:03:ec:6d:bb:67:dd:
         2e:07:e7:21:57:ca:73:00:06:11:22:24:75:44:cd:f9:05:2f:
         fb:b0:87:dd:59:9f:fb:cd:28:db:2b:61:57:86:60:84:61:d3:
         3f:fd:24:63:fa:c9:ad:86:44:80:f1:68:e1:a0:50:00:05:9c:
         29:1f:37:0c:9a:dd:fd:f1:cd:aa:aa:3e:37:31:10:af:91:97:
         37:5c:55:4e:0f:fc:81:1b:53:e7:4a:2c:99:a4:a2:75:52:10:
         d9:1e:2e:66:dd:5c:e1:f0:30:3b:06:53:de:7f:8d:4e:18:c1:
         ca:59:70:1f:9e:08:e1:94:03:4f:01:83:67:ea:a7:0c:55:44:
         96:15:d2:79:4e:ec:23:93:79:47:1a:ed:c8:ac:46:1d:f4:7f:
         d0:3e:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:37:21 2024 by rpki-client on console-ams.rpki-client.org