Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          S6cpj8zKePllt8fPef0T4otwPqW/rWVXWwZARngMHfg=
Subject key identifier:   E3:84:8B:1F:FD:33:4B:FD:96:12:E9:25:CC:8F:D7:5B:C3:B7:04:18
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       066D89C854F31D44ABBAB9EB00599B49A87380F3
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:48 +0000
ROA not before:           Thu 04 Apr 2024 18:03:48 +0000
ROA not after:            Thu 03 Apr 2025 18:08:48 +0000
asID:                     267513
IP address blocks:        186.227.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6d:89:c8:54:f3:1d:44:ab:ba:b9:eb:00:59:9b:49:a8:73:80:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:48 2024 GMT
            Not After : Apr  3 18:08:48 2025 GMT
        Subject: CN=E3848B1FFD334BFD9612E925CC8FD75BC3B70418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:7c:bf:72:80:1b:83:f4:3a:5a:ba:c7:69:
                    e9:5d:46:4b:b0:81:b4:90:cd:f6:79:f7:55:0b:d7:
                    00:68:0a:0d:fd:57:96:28:3e:83:41:7d:4c:85:6b:
                    a0:66:fc:41:4d:e8:be:ed:42:43:79:c1:4e:1d:da:
                    63:81:62:cf:1c:7d:02:45:81:37:c0:d4:ba:d4:c2:
                    48:6c:78:16:99:09:c1:c3:df:ca:cd:be:77:40:f4:
                    ae:91:4d:05:be:7b:52:3c:0a:b8:89:44:9f:c0:89:
                    f4:73:d5:2b:04:9b:1e:33:5e:e4:6c:c0:33:13:23:
                    20:32:e6:ef:1e:5e:ff:ce:43:a7:bf:e1:60:e9:df:
                    17:ed:88:48:3d:f5:2d:ea:68:c6:6e:a9:a3:d6:18:
                    39:d4:e3:99:2d:06:2a:e7:08:dd:a3:39:98:9b:f7:
                    e0:d2:07:bc:f4:37:b7:df:9d:7e:51:1c:57:85:ef:
                    e6:11:c7:b8:d3:a9:47:de:34:3f:4a:80:5b:1b:f1:
                    98:62:2b:be:ed:92:7f:88:f2:d8:b6:f5:b6:c5:0d:
                    04:1f:d8:7a:d2:d9:c9:e8:34:b7:a9:ef:48:22:f1:
                    bf:11:8c:b1:4a:f8:ce:30:1b:19:c0:c6:04:d0:65:
                    d3:5b:e6:60:58:6a:46:d1:10:ae:44:f1:72:06:cf:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:84:8B:1F:FD:33:4B:FD:96:12:E9:25:CC:8F:D7:5B:C3:B7:04:18
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:0e:30:7b:40:26:5e:2e:c5:bf:3d:8d:c9:96:f9:d0:58:
         09:b9:f8:8b:95:7c:ff:6a:fd:e3:3d:ac:ca:a4:22:b1:7a:7e:
         31:a5:3b:7b:93:fa:52:b1:f9:c6:76:86:bf:c6:9d:47:bd:7a:
         f5:53:30:43:33:bd:ab:03:a7:b2:b3:71:56:d9:62:b3:28:f5:
         14:27:84:20:79:91:2f:86:10:83:11:02:24:06:33:38:da:21:
         4a:58:c8:6a:a8:ae:9d:a8:0b:62:29:2e:bb:79:f3:aa:74:97:
         90:3c:bf:9c:8f:41:e3:3f:81:84:49:26:ed:07:7a:6e:7f:05:
         ee:cf:48:7c:37:3d:1c:c1:d1:d1:fe:08:bf:52:52:c8:10:be:
         01:e9:84:5e:48:6c:eb:46:0b:2a:80:b1:d4:69:4d:3f:77:2d:
         2a:7e:5e:81:d0:9b:a6:10:0c:c7:dc:de:ce:23:0b:1b:6b:e0:
         10:82:14:76:0f:48:a3:46:75:0f:fd:46:be:40:cb:ae:07:fe:
         17:4f:26:e8:85:e3:d1:e1:a8:64:35:02:91:0a:8f:e6:20:21:
         78:11:fe:46:8e:af:2a:fb:84:8c:f5:8f:0a:3a:7e:e1:29:be:
         62:bf:b9:42:86:74:d9:7d:39:75:07:84:3e:7e:65:3e:1a:1f:
         60:ec:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org