Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          vazl/xkoKDc//bv6nefFAfmVcSgB2aJZYpBFQzI+hyQ=
Subject key identifier:   5D:6C:4D:B1:D9:A3:54:41:4C:E6:32:FF:E8:72:95:60:CB:2A:E9:14
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       3B8B7ED1973F9F340ED5EE3C0B33DA211615238D
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:48 +0000
ROA not before:           Thu 04 Apr 2024 18:03:48 +0000
ROA not after:            Thu 03 Apr 2025 18:08:48 +0000
asID:                     267513
IP address blocks:        186.251.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:7e:d1:97:3f:9f:34:0e:d5:ee:3c:0b:33:da:21:16:15:23:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:48 2024 GMT
            Not After : Apr  3 18:08:48 2025 GMT
        Subject: CN=5D6C4DB1D9A354414CE632FFE8729560CB2AE914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:56:86:19:43:ab:c4:94:e4:56:22:50:ac:
                    3d:9a:ec:d9:5c:6e:00:cf:3b:4b:bb:f2:46:5d:3f:
                    e3:78:a3:2b:d1:e3:f1:1f:71:84:22:40:4b:e2:e1:
                    84:95:99:03:2f:f0:ed:6d:b5:78:a7:fe:49:32:93:
                    af:51:9f:a4:ef:30:63:cd:02:b0:d3:37:e0:79:f6:
                    41:5a:18:56:6e:8e:e9:74:1c:75:97:7b:ae:13:82:
                    d3:a2:cb:f8:10:60:30:80:1f:fe:e5:2d:d0:4e:51:
                    64:47:2f:cb:1c:d8:c7:e0:c5:91:ff:0c:24:00:b5:
                    61:2e:65:b3:9d:d1:7d:51:2e:f0:18:c1:a1:39:77:
                    bf:e1:6e:a1:2a:5b:af:04:e8:45:03:80:da:71:bb:
                    81:02:3f:c5:9a:f9:13:04:c0:19:c5:c3:c8:a3:b2:
                    a6:1f:c0:35:cc:df:f7:06:9b:5e:5f:8e:2b:30:e7:
                    8c:d7:37:77:fc:0e:dc:c4:e0:93:16:43:24:c1:36:
                    d8:c0:ea:0b:28:3a:df:da:ce:eb:dd:64:f4:7a:39:
                    94:24:4b:1a:d9:bf:a8:91:2d:54:ed:ec:2e:59:24:
                    77:11:f2:36:74:22:1e:86:44:73:55:8f:dd:c1:30:
                    af:42:53:1b:84:fd:18:c7:49:50:46:f5:87:f6:ce:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:4D:B1:D9:A3:54:41:4C:E6:32:FF:E8:72:95:60:CB:2A:E9:14
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:0d:6d:8e:17:72:dc:90:d1:5b:13:10:25:ec:40:15:5b:
         e9:05:02:b9:f0:9e:fa:43:95:81:33:2e:c7:60:4b:d9:e8:da:
         b8:c7:fc:ba:1a:49:19:2a:b1:dd:20:20:22:e4:87:ef:0a:bd:
         d2:86:5d:6b:07:ec:7e:ca:ee:8a:c5:7a:4e:fe:13:da:ce:e3:
         55:c5:b9:a6:e8:47:82:41:c2:b8:bf:95:61:7c:c5:8f:16:6d:
         80:e9:a5:f1:cf:95:9c:23:ec:5a:99:48:be:82:c0:ec:6b:de:
         2f:30:ef:6c:22:c9:8b:a6:3e:98:a6:33:b1:ca:fc:6a:55:b1:
         66:23:32:66:76:ff:ca:aa:cf:6e:0b:8b:7b:90:ec:00:38:b5:
         0e:be:ea:ae:bd:d3:0c:ad:97:1b:77:96:95:62:ee:3c:89:da:
         5e:0f:61:ba:85:8c:62:a8:8d:e6:57:a8:c4:41:b7:c9:1a:af:
         32:53:8a:d6:5e:8f:fb:0c:94:3f:13:ac:de:ce:0a:3c:4a:4f:
         5c:c8:3b:f0:68:af:4a:62:20:40:2c:6f:91:a1:6f:86:04:80:
         0c:6e:76:51:5d:0f:35:f6:46:c6:ab:d2:33:00:79:88:00:0c:
         78:83:09:97:6d:f2:c3:be:ec:f8:4c:07:59:92:b1:69:07:06:
         51:91:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org