Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231342e302f32342d3234203d3e20323634313030.roa
File:                     3138392e33362e3231342e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          NW7j/alkIsn9/dN6YnhROoaW13CCyvAdkZz7TR/M6VE=
Subject key identifier:   AA:D4:99:FF:46:37:BE:2D:D0:D5:FC:08:4F:FC:5F:1D:19:99:78:84
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       44321673F3D3FCCAF3691FC3BA9ED87C1C0301BE
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231342e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 18 Nov 2024 13:25:03 +0000
ROA not before:           Mon 18 Nov 2024 13:20:03 +0000
ROA not after:            Mon 17 Nov 2025 13:25:03 +0000
asID:                     264100
IP address blocks:        189.36.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:16:73:f3:d3:fc:ca:f3:69:1f:c3:ba:9e:d8:7c:1c:03:01:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Nov 18 13:20:03 2024 GMT
            Not After : Nov 17 13:25:03 2025 GMT
        Subject: CN=AAD499FF4637BE2DD0D5FC084FFC5F1D19997884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:a3:93:7a:33:39:09:fd:57:8d:33:8a:fd:
                    3f:b2:0a:b5:b6:b7:e2:8d:b6:08:98:63:5a:a5:1f:
                    49:57:a6:6b:61:51:fc:a1:0d:ed:b3:5e:2b:cc:d4:
                    e8:cd:02:5a:4e:66:bb:57:3d:a9:c7:39:f1:fb:48:
                    16:4c:b7:6a:9d:d7:08:64:22:e4:55:87:19:22:ef:
                    43:e6:7e:0a:17:df:7c:b9:b5:aa:b6:ab:2e:6a:74:
                    18:4b:37:13:3d:16:05:77:a3:05:8a:60:e5:ca:88:
                    9f:cc:2b:b9:5e:7f:a6:bb:8c:e4:9a:48:80:32:17:
                    04:58:08:5c:34:49:fe:cb:13:93:37:78:ab:9c:c4:
                    35:d8:59:27:0b:6f:20:b5:d1:24:35:49:46:a7:fc:
                    30:96:f3:d2:77:73:f6:5d:53:04:2b:15:2b:57:e3:
                    e6:ac:88:17:d8:ab:84:49:8f:fc:66:a6:75:5c:dd:
                    33:99:68:49:13:ac:5d:fd:90:d9:eb:5e:cb:d2:5a:
                    10:a3:1e:6e:a0:f7:55:f8:a2:b5:6d:b4:90:6b:12:
                    52:52:a5:97:bf:8f:04:68:15:c4:e5:28:f3:f0:7b:
                    e7:93:dc:ba:f5:b5:14:56:97:1d:8a:c3:55:c7:b3:
                    8c:0d:f5:fa:ea:7b:08:0c:14:a6:a1:fc:aa:5a:dd:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:99:FF:46:37:BE:2D:D0:D5:FC:08:4F:FC:5F:1D:19:99:78:84
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231342e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:71:93:55:04:75:28:aa:75:c9:1d:0a:52:2f:42:bf:d4:
         97:76:ee:31:69:a6:db:da:eb:42:41:ae:e2:7a:22:c9:88:75:
         a0:0b:8a:41:04:85:51:bf:31:61:ba:ed:3e:ab:a6:a3:b0:46:
         46:f3:98:03:52:bf:4c:bc:89:9f:f7:3e:e6:28:ab:11:cd:ec:
         9a:69:74:e6:f1:7b:8f:d6:e3:de:ac:f0:58:be:93:b4:ff:45:
         71:fd:ba:d0:0e:6e:9b:d8:24:73:78:ee:fe:49:91:78:24:11:
         48:20:0f:7c:39:98:42:93:30:55:1d:1e:3d:3c:cd:50:16:4a:
         ef:fe:fb:36:37:56:75:8e:fa:0e:9a:cc:c2:b8:06:66:0d:41:
         23:75:ba:e7:23:19:1b:c5:2d:65:4c:60:67:a7:21:3b:8d:9b:
         31:f1:08:5a:53:c7:25:b3:05:09:6a:43:26:7a:44:44:ca:46:
         36:2f:d3:9d:da:12:7b:36:d9:d4:e7:c3:46:c3:a0:97:b8:d3:
         d0:64:3c:ab:28:c3:45:7e:1e:8d:0f:45:5b:df:b6:f5:cb:34:
         fe:6a:6e:2b:6e:29:bd:58:ff:33:a9:d1:80:41:62:bb:9a:33:
         d1:3d:ae:0a:8d:a1:ab:1f:53:63:5e:bd:83:9b:90:15:b7:91:
         f0:e2:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:37:21 2024 by rpki-client on console-ams.rpki-client.org