Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3138362e3232362e34382e302f32312d3234203d3e20323632393739.roa
File:                     3138362e3232362e34382e302f32312d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          4Mm73mvEmOipnMdSQi+o2Z7SRuyIxztH26yntx554iM=
Subject key identifier:   AF:BC:B2:80:F0:5A:A4:64:E7:5D:35:09:90:3F:C7:0D:F3:5D:0E:19
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       595F40D18DDF5170E189638116FA24B03DA52A
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3138362e3232362e34382e302f32312d3234203d3e20323632393739.roa
Signing time:             Thu 04 Apr 2024 05:47:51 +0000
ROA not before:           Thu 04 Apr 2024 05:42:51 +0000
ROA not after:            Thu 03 Apr 2025 05:47:51 +0000
asID:                     262979
IP address blocks:        186.226.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5f:40:d1:8d:df:51:70:e1:89:63:81:16:fa:24:b0:3d:a5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Apr  4 05:42:51 2024 GMT
            Not After : Apr  3 05:47:51 2025 GMT
        Subject: CN=AFBCB280F05AA464E75D3509903FC70DF35D0E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:f1:6e:93:56:9f:4e:e6:91:9e:f3:7d:4d:
                    9c:d4:13:ed:77:09:f4:81:d6:aa:23:f5:b3:2a:06:
                    57:fe:d0:c4:4a:51:9f:80:06:ff:3b:ab:c6:57:3a:
                    16:fa:c6:c9:b5:09:87:d8:57:bd:a4:41:65:a6:a9:
                    c6:ef:ed:a9:04:7e:76:f7:a3:56:4c:40:9f:37:ff:
                    c3:ce:3c:f4:43:c6:5d:39:8b:9c:34:f4:02:a9:25:
                    1d:e1:ea:7f:e1:b3:b8:c6:81:ba:19:73:ed:6d:35:
                    6b:95:81:f3:bb:db:4e:e2:0b:a1:57:43:63:b7:da:
                    e4:c2:d2:27:2c:52:d3:c3:d4:d8:85:bb:46:9f:af:
                    dc:a2:6f:60:f2:30:b8:5c:6f:b4:18:15:d7:99:70:
                    92:11:af:fd:c7:a1:5c:1e:bb:97:79:be:2d:40:19:
                    57:16:f6:a5:1b:a4:8d:6d:b5:af:80:87:e3:98:28:
                    60:fc:1a:fc:32:51:8e:d9:e1:3a:2e:a7:a4:f3:02:
                    33:da:8e:80:58:44:51:bd:33:95:51:2e:25:d1:8c:
                    78:a4:d9:e3:4c:33:60:e1:7a:02:a2:1b:f3:ef:1e:
                    f4:cc:6b:1e:88:a6:19:af:bc:ff:d4:63:cd:c0:11:
                    bb:d8:a0:f9:49:36:38:e5:6b:36:ce:cc:af:3a:e0:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:B2:80:F0:5A:A4:64:E7:5D:35:09:90:3F:C7:0D:F3:5D:0E:19
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3138362e3232362e34382e302f32312d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:9b:a0:81:1f:ec:b0:a9:07:d5:64:b1:23:fb:87:ac:e4:
         75:70:d8:e2:38:32:1c:4b:7f:e2:21:97:55:d4:68:67:81:e8:
         da:7d:c5:46:5d:b8:db:84:fb:f1:46:3b:00:95:98:2d:ed:8a:
         f1:b8:6b:de:7d:49:85:38:08:4d:80:c5:68:4a:af:e1:64:be:
         b7:97:7a:17:0d:f3:7a:b7:04:f9:7e:27:a4:10:1e:6b:36:b3:
         67:9a:59:d6:c9:03:ad:4c:59:ec:14:80:1b:8d:f5:84:f3:7a:
         3b:6e:de:b1:cb:53:ea:e4:6a:4e:53:78:36:3f:d6:b9:61:77:
         26:97:39:24:2a:4c:98:7c:19:91:9c:4d:d7:71:5e:7c:ea:68:
         f3:8b:d2:c7:64:ff:50:d4:f1:54:cd:0d:19:a9:4b:35:69:51:
         c2:39:0f:29:54:94:39:8f:66:44:11:be:52:1f:57:e0:0a:50:
         37:d8:86:a6:08:9f:32:d0:62:a7:d6:d1:50:b5:be:02:eb:1b:
         69:2a:0c:ae:a8:9b:c4:e6:81:4a:14:79:f1:ee:3e:24:24:0f:
         08:58:83:23:65:e7:2f:92:f2:29:21:ee:9f:68:0d:e8:00:88:
         6a:87:8d:34:2e:a1:67:8b:02:28:b4:27:ae:73:1e:18:4c:a4:
         28:91:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org