Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          Vz/CdnKhwbomuwR3ykKaGPTcNtOFGP8W7WPudFHeIiE=
Subject key identifier:   CB:41:34:1B:EE:4D:70:98:15:3C:83:C3:C2:43:33:13:0D:C0:AF:70
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       24E2E290195A86C2C87EF23F908189430536A57B
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:46 +0000
ROA not before:           Thu 04 Apr 2024 18:03:46 +0000
ROA not after:            Thu 03 Apr 2025 18:08:46 +0000
asID:                     267513
IP address blocks:        186.251.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e2:e2:90:19:5a:86:c2:c8:7e:f2:3f:90:81:89:43:05:36:a5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:46 2024 GMT
            Not After : Apr  3 18:08:46 2025 GMT
        Subject: CN=CB41341BEE4D7098153C83C3C24333130DC0AF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:54:19:67:09:c7:6a:5a:65:f1:10:fa:8d:
                    5e:f3:59:a0:b0:24:dd:7b:a4:2a:bc:b2:8b:0a:09:
                    7f:3d:e8:8a:cb:c9:2f:e7:71:44:b4:67:7d:73:29:
                    30:f1:7b:68:32:10:2d:0e:39:ad:8a:ab:4d:e9:ab:
                    a7:74:5f:21:1e:fa:80:e2:47:d0:9a:3c:09:d6:a4:
                    e0:b9:e2:9b:0c:45:5a:09:5b:38:4b:4c:13:b9:cf:
                    5e:d8:b6:ae:10:3f:dc:22:fd:dc:4c:9b:af:5c:6f:
                    9b:20:af:b2:a6:40:03:5a:73:6e:7d:99:0c:7b:3b:
                    0e:da:85:bb:a2:c5:b2:b0:c2:db:e9:ab:90:90:ec:
                    12:c0:90:75:da:8b:a6:62:a9:15:5e:29:c7:ec:f5:
                    c3:8b:1a:be:be:63:1e:d5:7c:4a:ca:07:3c:17:19:
                    fc:87:f0:65:d9:65:bf:82:6c:d2:1d:a9:b5:98:41:
                    1c:15:14:80:13:76:81:b6:c9:eb:89:11:69:3d:3d:
                    c5:d3:84:5d:6d:67:95:4e:2d:50:c4:90:77:f3:2c:
                    a0:7b:4f:ea:09:ee:e1:36:85:5c:23:78:6e:24:94:
                    5c:7a:6c:69:b7:29:13:55:02:a8:1b:ae:62:93:18:
                    21:fb:8f:54:c7:56:26:fa:4b:e6:3b:67:22:03:26:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:34:1B:EE:4D:70:98:15:3C:83:C3:C2:43:33:13:0D:C0:AF:70
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:38:42:60:3f:7d:98:6e:30:ff:87:9f:c1:7b:9f:8b:60:c9:
         3d:f0:da:6a:3c:86:1b:7a:92:69:e1:55:65:69:27:b0:22:6c:
         bb:70:1e:b5:e0:d9:9d:39:2a:31:75:d2:ce:95:f7:c8:43:4f:
         4f:e9:01:53:db:49:9d:ad:59:8d:12:a2:a6:b2:58:58:d5:61:
         65:87:2f:45:a6:26:59:c8:20:f5:3f:b7:6f:5c:6b:2b:a6:69:
         c6:aa:7c:e5:3c:60:7c:90:08:de:0c:86:bc:47:95:65:34:39:
         47:90:20:37:75:8c:bf:9a:6d:4b:a6:da:1a:ea:b3:9f:ee:9f:
         6d:fa:0e:fa:e1:7f:17:20:f1:ee:e5:d5:87:d4:cf:40:8f:f3:
         ed:40:d5:04:67:14:46:6a:d7:e1:99:ec:31:9c:69:08:43:13:
         36:11:67:0b:22:10:6a:c8:7c:ae:68:1e:f2:7a:0e:d0:38:c9:
         9a:81:05:b9:c3:07:02:9c:c9:2c:8c:f0:12:03:7e:04:5c:8a:
         80:1f:24:e0:af:0c:88:a8:a7:1e:72:99:52:bf:54:cf:af:06:
         cc:3e:b9:75:17:df:a4:a2:00:97:1b:b1:24:e0:3c:7e:01:a5:
         64:c8:e0:61:b3:92:f4:5c:c7:48:2c:eb:91:d0:32:1c:ad:ce:
         6a:ae:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org