Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          j+9X2Ld3Zy+zdqtYqIYEnd1wrPBVKtP8Yxeuw4y7azc=
Subject key identifier:   F0:73:C3:49:07:2A:0B:B9:04:9F:82:D5:9D:D1:E0:7A:EE:B4:78:52
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       15F06B7B2A2F95B32926EFF2B72B35C202B11031
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:49 +0000
ROA not before:           Thu 04 Apr 2024 18:03:49 +0000
ROA not after:            Thu 03 Apr 2025 18:08:49 +0000
asID:                     267513
IP address blocks:        186.227.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f0:6b:7b:2a:2f:95:b3:29:26:ef:f2:b7:2b:35:c2:02:b1:10:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:49 2024 GMT
            Not After : Apr  3 18:08:49 2025 GMT
        Subject: CN=F073C349072A0BB9049F82D59DD1E07AEEB47852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:c9:4a:4f:03:56:f6:3c:03:8f:85:af:4b:
                    2b:c5:ec:e3:db:b2:89:5a:e8:9f:6d:01:75:7a:9a:
                    b4:2e:b2:57:76:89:fe:9a:fd:fd:67:32:05:19:a5:
                    e2:7c:f1:bc:8e:a5:c5:43:3f:1d:0e:2c:33:eb:b8:
                    1d:cc:fc:54:85:e9:14:77:3d:6e:c4:42:5e:09:82:
                    bb:8e:08:7a:3f:52:57:ba:5d:a5:fd:87:10:0f:21:
                    16:3f:fb:7f:c8:06:ba:31:fb:e4:0a:67:73:bb:64:
                    a0:71:fd:c3:74:84:c7:18:a4:e6:29:d3:07:f8:54:
                    3f:2a:83:17:6e:ae:36:1a:76:33:c5:4d:e8:48:7d:
                    c4:e0:a5:8f:0c:e2:09:80:75:52:a8:a9:6b:5b:e1:
                    cc:72:ce:4f:8b:f0:fc:08:ca:df:64:e5:29:65:5d:
                    55:b7:48:ec:13:6a:3a:fd:66:1c:62:ba:5b:32:65:
                    80:9c:aa:41:93:87:e1:7a:3d:41:b8:b4:92:f5:bf:
                    34:af:ab:0c:77:d9:0b:2a:43:56:e9:d7:fc:da:f1:
                    d9:14:a7:21:ae:6c:2d:ce:58:87:54:09:8b:7f:65:
                    30:46:39:b6:db:ef:98:58:47:a5:5b:c6:09:15:f7:
                    28:53:b8:74:09:65:f1:26:08:4d:45:28:98:3c:b5:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:C3:49:07:2A:0B:B9:04:9F:82:D5:9D:D1:E0:7A:EE:B4:78:52
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:71:b0:d3:d3:8d:b1:23:ba:94:60:83:38:53:ba:d0:26:a9:
         a2:e5:62:d2:18:92:cd:3c:e1:77:d9:de:db:e3:3b:e9:53:44:
         22:00:ee:b6:a3:74:0c:c8:1d:8d:58:4d:3e:e1:63:04:6c:59:
         30:fc:5e:42:24:4d:03:19:8c:7c:2e:31:b7:73:f2:cf:d2:00:
         66:d9:9f:53:23:1c:f3:b4:c5:f2:91:cb:70:68:07:2c:22:61:
         a0:ca:fe:bc:e7:7b:0e:88:45:ba:76:6d:53:bb:71:8a:9a:5d:
         d3:48:e3:da:7c:7d:6a:c1:c7:2e:ba:d0:9c:ad:e8:5e:71:7a:
         a1:9e:de:8a:1c:a8:dd:09:74:2a:b8:9b:25:ca:2e:97:c7:6a:
         69:5e:83:21:36:ba:e1:ea:df:5c:4c:bb:8a:53:66:05:c8:ef:
         29:f6:cd:35:dd:e8:1c:78:8d:48:d9:1a:a4:1c:a6:17:e4:29:
         8a:25:0a:3e:dc:d2:87:bd:23:f8:93:97:4e:01:87:da:a0:33:
         6e:e4:13:cc:58:5f:56:0d:03:fb:73:5c:fc:c8:11:a6:22:fc:
         8e:4f:b4:b6:b2:b8:03:36:7f:3d:2f:d7:1f:4f:0f:de:b5:4c:
         e1:50:f4:00:22:a0:fd:08:81:82:b7:d3:b6:fd:ac:fb:58:97:
         da:f8:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org