Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/3138362e3235302e3137362e302f32312d3234203d3e203533323136.roa
File:                     3138362e3235302e3137362e302f32312d3234203d3e203533323136.roa (raw, json)
Hash identifier:          86/zdE/z6fsp10jdDAUpS/e9dgCCF+fR3nifnh2tl94=
Subject key identifier:   D4:70:7F:83:ED:D6:8A:D2:71:BB:C1:AF:6A:1A:1D:8E:DD:84:FD:BD
Certificate issuer:       /CN=7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48
Certificate serial:       628393C8B5F7DB5EDC41D0C026A32DE9EA28E8F3
Authority key identifier: 7D:FA:A3:AB:FD:1E:0B:1C:08:34:3F:A3:A7:55:FE:24:54:A5:1A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/3138362e3235302e3137362e302f32312d3234203d3e203533323136.roa
Signing time:             Tue 19 Nov 2024 18:19:09 +0000
ROA not before:           Tue 19 Nov 2024 18:14:09 +0000
ROA not after:            Tue 18 Nov 2025 18:19:09 +0000
asID:                     53216
IP address blocks:        186.250.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.crl
                          rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:83:93:c8:b5:f7:db:5e:dc:41:d0:c0:26:a3:2d:e9:ea:28:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48
        Validity
            Not Before: Nov 19 18:14:09 2024 GMT
            Not After : Nov 18 18:19:09 2025 GMT
        Subject: CN=D4707F83EDD68AD271BBC1AF6A1A1D8EDD84FDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:f6:eb:77:20:eb:a0:96:d7:ed:9b:9a:c8:
                    6c:35:c8:d0:c5:60:56:db:77:b4:be:0d:94:89:03:
                    28:44:f0:14:e2:ef:51:12:fa:b3:ff:26:34:e9:fe:
                    e5:b1:56:6a:26:7d:57:b6:a3:73:39:e8:ee:9f:cf:
                    4b:8a:ed:19:68:4c:b3:a6:22:d1:3d:bd:09:92:8c:
                    14:8e:05:32:19:04:0f:c8:c3:ad:2a:6c:3a:af:20:
                    5e:98:aa:ab:50:b4:65:20:66:53:5d:02:a4:86:ca:
                    92:8d:03:30:4e:b5:3a:f6:8d:d2:a8:6e:6e:30:e4:
                    39:e2:6a:89:9a:61:8a:2b:37:e1:d7:9b:4a:0a:7b:
                    19:bc:60:a4:6f:6f:6b:d2:92:91:46:de:55:73:03:
                    0a:73:d2:af:fe:38:63:9f:31:92:e6:16:e8:cb:13:
                    2d:c2:74:60:9c:fb:28:c7:a1:4b:3d:9b:c5:f9:d0:
                    eb:aa:49:6f:ff:76:7e:b5:07:2a:26:b9:57:0e:a5:
                    e9:3d:00:0d:01:35:6a:2a:87:20:66:44:25:77:25:
                    21:a2:df:d6:c8:db:dc:f3:aa:b2:42:6b:48:0c:2e:
                    34:d6:85:c0:a8:6f:4b:d1:14:c4:3b:62:52:49:05:
                    37:f4:c1:e9:44:10:07:39:0a:b5:47:f9:25:88:a3:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:7F:83:ED:D6:8A:D2:71:BB:C1:AF:6A:1A:1D:8E:DD:84:FD:BD
            X509v3 Authority Key Identifier:
                keyid:7D:FA:A3:AB:FD:1E:0B:1C:08:34:3F:A3:A7:55:FE:24:54:A5:1A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/3138362e3235302e3137362e302f32312d3234203d3e203533323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:25:08:7f:7c:ac:83:30:4b:c8:79:3d:a5:ae:eb:5a:d0:
         94:74:50:dd:41:73:f5:85:13:34:b8:3d:7d:2b:8c:60:3d:ba:
         99:9d:87:5f:8d:0b:9e:76:f9:82:46:6d:73:00:af:56:66:9c:
         33:53:28:26:5a:64:93:d4:4e:b7:70:6c:e2:cb:a6:15:da:f7:
         88:31:4f:f2:2e:a8:df:97:a8:d5:84:60:02:41:25:a5:e4:5f:
         7c:be:f3:e5:54:77:4a:a9:73:e7:2b:33:72:6b:b2:b7:30:45:
         ab:5f:01:18:1d:96:91:3c:2c:c4:a8:11:a1:95:f0:85:ab:93:
         55:9f:de:bc:2d:ca:c3:c8:cb:c7:85:bb:2d:f4:ba:ef:ab:00:
         e2:76:2d:30:3c:07:46:3a:c8:79:51:41:e3:3b:76:42:0e:a1:
         d7:2b:46:3c:78:86:a8:c8:75:f2:48:b1:65:e3:bc:40:87:73:
         6b:d8:a1:1d:dc:47:03:63:c3:7b:c1:c6:46:70:4e:42:d8:c3:
         8e:63:28:7e:38:a0:a9:f5:3f:8a:f2:84:1f:d5:cf:c0:d5:eb:
         3b:9c:09:b0:a5:3d:d2:58:5f:e3:7e:96:3a:45:0f:be:32:5f:
         e1:f5:b3:ec:17:0e:3f:c5:1d:7e:4d:15:6b:b5:02:fe:39:c3:
         98:25:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:35 2024 by rpki-client on console-ams.rpki-client.org