Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/3138362e3233372e302e302f32302d3234203d3e20323632373937.roa
File:                     3138362e3233372e302e302f32302d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          mgRYtOOOm3+fawzXENVOfv3gA9t4tZtlm6Qf+162gRI=
Subject key identifier:   C1:0D:66:12:6E:43:BC:AE:0E:EC:31:B5:EB:58:AE:24:49:F1:FE:0B
Certificate issuer:       /CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
Certificate serial:       5230D8938C7350627B1FE49A2E5D4FF55F857A02
Authority key identifier: 67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/3138362e3233372e302e302f32302d3234203d3e20323632373937.roa
Signing time:             Thu 04 Apr 2024 18:30:11 +0000
ROA not before:           Thu 04 Apr 2024 18:25:11 +0000
ROA not after:            Thu 03 Apr 2025 18:30:11 +0000
asID:                     262797
IP address blocks:        186.237.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:30:d8:93:8c:73:50:62:7b:1f:e4:9a:2e:5d:4f:f5:5f:85:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
        Validity
            Not Before: Apr  4 18:25:11 2024 GMT
            Not After : Apr  3 18:30:11 2025 GMT
        Subject: CN=C10D66126E43BCAE0EEC31B5EB58AE2449F1FE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:99:13:d6:bf:e4:e2:a9:ca:49:2a:e1:81:cd:
                    17:fa:3f:fd:8f:f6:5f:c1:cd:73:7b:c9:e0:2b:39:
                    57:9d:c7:c0:25:6f:59:ac:56:27:2f:c5:83:0f:c8:
                    b7:8b:9f:d5:ec:a2:fd:c5:0b:87:59:18:d0:b7:c5:
                    3f:6b:ff:73:e7:0e:c1:db:28:3b:69:f6:83:2a:ae:
                    87:06:27:3a:62:23:68:e2:0e:2e:65:ee:bf:4f:30:
                    af:e1:ba:61:5f:38:5f:1d:87:ac:1e:4f:ff:05:97:
                    d8:7c:c8:f3:85:b0:29:97:98:b3:83:64:67:df:45:
                    32:96:72:e6:88:68:01:db:0f:b7:2a:a5:3d:2f:76:
                    d2:ce:bd:38:46:0d:ab:63:bb:2b:06:f5:3f:88:a1:
                    4c:ec:01:b9:f2:53:2d:3d:2d:a9:59:45:b1:83:31:
                    d2:da:c5:10:d6:21:9b:ad:51:4f:68:b1:2f:bb:e7:
                    ee:c8:9c:a2:25:de:ed:07:a2:c2:f9:82:4d:a3:3d:
                    91:3c:71:33:9a:ff:d5:10:c0:f0:f6:d2:85:20:b4:
                    45:77:b2:9b:21:1f:52:5b:09:cc:a5:3b:c8:cc:90:
                    de:af:52:55:55:7f:81:55:38:4f:4d:ca:ce:e2:0a:
                    22:eb:75:c5:3b:78:08:00:fd:7c:e4:a1:cd:91:1e:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:66:12:6E:43:BC:AE:0E:EC:31:B5:EB:58:AE:24:49:F1:FE:0B
            X509v3 Authority Key Identifier:
                keyid:67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/3138362e3233372e302e302f32302d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:5d:7c:4d:69:d4:0c:e7:d3:8c:2a:33:80:b1:5f:91:e7:
         f6:04:19:26:9a:33:04:2b:9b:de:12:97:76:80:3d:6d:dd:72:
         88:5b:04:ac:5d:b9:f2:02:45:a9:a4:11:1b:df:8f:26:1e:28:
         f4:fd:be:20:f2:bb:02:c1:8b:6d:d2:e6:0c:64:f7:f6:80:99:
         64:5f:08:6d:5f:78:3e:6e:11:f5:d6:4e:77:18:c7:32:e2:0b:
         b1:f3:7e:89:3e:b9:c6:22:1a:c6:c5:e4:76:20:6b:22:35:b4:
         84:a7:2e:08:9c:8c:d7:ea:44:03:ad:85:8f:e2:3b:00:42:49:
         01:ba:e3:c0:76:32:f4:31:d8:77:69:71:17:78:c0:ff:03:c5:
         4b:ed:e0:50:d8:aa:85:1c:21:3c:01:02:3b:9a:49:e3:b5:14:
         89:a0:bb:86:2d:b7:ea:45:9f:14:54:a2:b2:57:5d:74:12:ea:
         14:ac:7b:95:f3:ca:28:ab:de:5e:66:a1:61:22:dc:27:c5:90:
         5d:b3:2b:9b:a0:73:92:2d:0a:5a:0f:80:56:4e:cf:0f:2d:94:
         38:cd:e5:62:8b:e9:cc:17:e0:09:5e:0f:ea:2e:27:80:c6:0c:
         0f:b8:48:ae:b6:ca:28:25:f4:07:e2:a0:85:ef:0b:79:18:f6:
         0b:02:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:17 2024 by rpki-client on console-ams.rpki-client.org