Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e38362e3139322e302f32332d3234203d3e20323639303733.roa
File:                     3138372e38362e3139322e302f32332d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          X/Aq0LUop1jNyLyfkr5kwLo0HfKw0ehYPHMF39jKpWc=
Subject key identifier:   41:4C:09:9F:83:CE:91:7D:F8:AE:C6:F0:D9:C4:78:9F:C7:BB:56:F9
Certificate issuer:       /CN=7C85DCA145843B801E0DE7F701B0084B2991189D
Certificate serial:       68858936220D9DB4BE29702ABCAD88DD376DB026
Authority key identifier: 7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e38362e3139322e302f32332d3234203d3e20323639303733.roa
Signing time:             Fri 19 Apr 2024 20:19:21 +0000
ROA not before:           Fri 19 Apr 2024 20:14:21 +0000
ROA not after:            Fri 18 Apr 2025 20:19:21 +0000
asID:                     269073
IP address blocks:        187.86.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Jun 2024 10:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:85:89:36:22:0d:9d:b4:be:29:70:2a:bc:ad:88:dd:37:6d:b0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Validity
            Not Before: Apr 19 20:14:21 2024 GMT
            Not After : Apr 18 20:19:21 2025 GMT
        Subject: CN=414C099F83CE917DF8AEC6F0D9C4789FC7BB56F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:9e:f6:39:45:a7:1b:96:14:33:3f:d7:9b:
                    8a:74:af:5d:00:3a:bf:09:6e:7d:b5:f4:ca:aa:a6:
                    63:2f:e6:ce:81:14:58:93:66:83:b2:7c:76:09:52:
                    43:38:ce:a2:00:1a:d0:95:60:72:70:d6:23:45:97:
                    9b:2f:fe:79:2f:9d:d4:6b:59:ed:0d:94:34:76:c9:
                    c8:71:d5:8f:2c:f4:0f:1b:76:ce:8e:ab:96:96:44:
                    c7:ac:2b:14:41:76:89:dd:3b:63:47:14:b9:ba:48:
                    cd:9b:03:86:8b:90:80:b0:9e:19:71:96:01:c0:e7:
                    35:43:b2:d3:ab:a2:94:f4:a4:98:61:6b:19:0b:12:
                    54:1f:73:e8:a0:30:56:16:c3:f2:79:57:f8:48:c9:
                    b7:0e:f6:54:0e:c9:09:b7:6f:d3:eb:ec:ce:78:17:
                    03:39:aa:e5:a6:a9:fb:bb:f8:d1:8c:7e:f1:d1:20:
                    7e:ee:3b:81:88:3a:27:d1:00:47:ed:5e:7f:d8:5f:
                    c6:20:27:b0:4f:24:36:b7:22:80:a2:51:ba:99:28:
                    c8:5b:d0:45:87:23:46:45:10:99:b0:49:ec:0b:57:
                    22:31:65:30:e1:ab:7b:b0:85:7e:7c:bd:56:a7:06:
                    06:55:89:6b:35:2d:20:cd:9e:48:74:10:ff:d1:3d:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4C:09:9F:83:CE:91:7D:F8:AE:C6:F0:D9:C4:78:9F:C7:BB:56:F9
            X509v3 Authority Key Identifier:
                keyid:7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e38362e3139322e302f32332d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:b4:15:f0:ab:f5:b0:6b:46:00:b9:4c:f1:fe:3a:a5:d7:
         2e:1a:ed:98:ac:dc:01:22:39:86:e5:78:40:ec:23:8b:00:bc:
         cf:c1:1f:ae:7f:23:f4:73:05:41:a6:ce:cb:c5:49:33:79:9e:
         9e:8d:f1:68:9f:5f:30:05:57:47:17:fc:28:59:89:aa:00:5f:
         72:8b:62:a3:8e:ee:c0:57:41:03:ac:26:9a:8f:1b:a1:cf:05:
         66:fd:0d:a9:df:c7:1f:98:96:c8:16:2f:68:dd:9e:25:ce:51:
         29:b7:72:c8:80:fd:b7:5f:ba:2d:d4:12:5c:2f:6a:09:de:0a:
         42:1a:52:36:ed:28:0f:9d:b7:fc:e5:7e:f7:6a:74:7b:a4:4d:
         7b:14:31:65:d3:f8:8d:6f:ed:be:7d:81:ec:08:e6:f2:6c:f3:
         49:f5:0d:00:7f:d0:30:12:47:33:c7:eb:d6:4b:a8:85:69:8a:
         f4:d8:f8:fb:67:8a:a2:f4:5c:23:de:24:da:68:af:c8:0d:3e:
         2e:b2:5e:83:f4:aa:2e:c3:6d:7e:e4:a2:d1:87:13:21:05:87:
         a5:00:27:34:fb:ea:42:51:ea:4d:c5:65:6b:e7:63:01:2c:3a:
         62:00:20:74:67:4b:37:d5:0f:b9:fd:59:17:88:06:84:84:5d:
         7b:e5:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 11:46:58 2024 by rpki-client on console-fra.rpki-client.org