Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234382e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3234382e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          J2JJR9YFSW4u+lkRLcbBMcl5EW+GSUYNSqqu40XmSb0=
Subject key identifier:   1D:1A:1D:CD:66:4C:52:CF:D5:AB:61:89:0F:87:47:B5:48:F6:78:91
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       0C690DEE5BCEF293662462D975494C1349A8D29C
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234382e302f32342d3234203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:46 +0000
ROA not before:           Thu 04 Apr 2024 18:03:46 +0000
ROA not after:            Thu 03 Apr 2025 18:08:46 +0000
asID:                     267513
IP address blocks:        186.251.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:0d:ee:5b:ce:f2:93:66:24:62:d9:75:49:4c:13:49:a8:d2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:46 2024 GMT
            Not After : Apr  3 18:08:46 2025 GMT
        Subject: CN=1D1A1DCD664C52CFD5AB61890F8747B548F67891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:ed:07:9b:1c:f4:83:36:c1:1b:59:12:dd:
                    a8:d3:99:e9:29:db:89:d0:fc:e8:bd:3f:56:87:35:
                    85:35:82:36:43:f3:42:7a:4e:7d:e1:ac:ff:67:0d:
                    52:c8:18:0c:c5:27:af:71:4c:87:fd:dd:18:13:fb:
                    cd:57:96:0f:c7:20:2e:1f:58:22:c8:43:d9:b3:fd:
                    05:98:94:ba:a0:fa:46:2e:3d:1f:5d:f4:9c:b4:79:
                    b2:b6:cc:f5:06:60:df:d0:d9:d2:81:60:34:9f:7b:
                    e5:e3:93:f7:91:d6:da:e9:6e:a8:5a:61:a1:00:79:
                    d2:e7:65:c9:5d:02:53:46:92:f0:00:5f:8c:40:be:
                    73:5d:a1:38:5f:74:c9:13:54:77:65:36:67:89:b7:
                    71:7e:0b:ce:83:5c:20:55:b1:2d:b8:07:3c:0b:fc:
                    a6:44:88:e0:6b:47:b0:db:7b:bb:0b:c9:78:92:8d:
                    4a:15:a4:da:71:23:30:28:f0:06:a4:ea:01:1f:53:
                    ac:94:fc:41:7d:be:b6:7d:13:5b:42:0a:ae:55:7a:
                    4a:19:5f:7c:5d:28:dc:09:70:04:fb:a5:3c:f9:2b:
                    a2:32:60:11:3d:86:c3:be:16:f6:bb:c2:a1:46:ae:
                    3d:36:1e:b9:a9:0c:64:15:2b:98:b4:b1:6a:98:f0:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1A:1D:CD:66:4C:52:CF:D5:AB:61:89:0F:87:47:B5:48:F6:78:91
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3234382e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:68:af:37:29:a5:60:32:61:0e:13:5b:83:fd:d9:c7:16:
         fb:06:81:8c:ec:af:bb:a6:32:17:40:8e:ea:71:70:eb:c4:e8:
         ef:78:ff:a4:21:4f:40:a7:35:a5:f2:cb:70:c9:30:27:c4:1a:
         37:32:a2:19:15:74:51:c2:36:fb:fd:ae:17:29:4e:89:7f:65:
         18:4f:9f:de:65:5b:00:09:55:fc:7d:d9:74:35:cf:89:a8:98:
         3a:4c:1c:a0:05:06:5c:9a:71:e5:f4:ec:e0:77:72:de:9a:38:
         c6:15:39:bf:e2:e7:06:95:30:54:81:ae:7e:59:6d:0f:82:49:
         3d:37:94:e2:ab:93:b3:1a:86:0e:1e:a2:2d:8e:79:e8:94:3b:
         e4:dc:9c:6a:be:f8:b7:16:53:67:9c:95:49:56:57:0e:ab:0b:
         82:be:f8:a6:33:c5:ff:25:ef:a2:43:7b:48:e9:91:14:34:9d:
         3d:a5:47:8a:a0:f4:62:7e:d7:32:e7:d6:27:be:1b:1c:19:31:
         08:33:dc:6d:29:6a:d5:66:e3:20:82:03:48:c4:71:c2:17:de:
         3b:37:06:8b:4f:88:89:42:d1:a6:9e:ab:cb:2e:88:39:60:ec:
         b1:ff:ed:69:59:ab:a4:1a:8e:61:b6:bf:c1:21:6c:f0:f6:be:
         e1:bd:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org