Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa
File:                     3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          EPdNW27MCF2ZQL2sqZ6LndTmISRz6zuzuHYQRZchMNY=
Subject key identifier:   BD:0E:D3:7D:D9:63:3F:9C:AD:2F:DE:4D:A5:01:A5:20:05:3C:98:88
Certificate issuer:       /CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
Certificate serial:       66965D8782E2DD2A30C9388A3503362BB5D88394
Authority key identifier: FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa
Signing time:             Thu 04 Apr 2024 18:42:28 +0000
ROA not before:           Thu 04 Apr 2024 18:37:28 +0000
ROA not after:            Thu 03 Apr 2025 18:42:28 +0000
asID:                     262998
IP address blocks:        186.224.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:96:5d:87:82:e2:dd:2a:30:c9:38:8a:35:03:36:2b:b5:d8:83:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
        Validity
            Not Before: Apr  4 18:37:28 2024 GMT
            Not After : Apr  3 18:42:28 2025 GMT
        Subject: CN=BD0ED37DD9633F9CAD2FDE4DA501A520053C9888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:bb:d5:71:8c:22:ab:6a:b1:3e:7c:1b:8d:
                    f9:8e:70:7f:cc:03:63:00:51:94:0d:13:dc:72:d9:
                    29:66:bb:7b:8b:f8:69:40:69:7b:76:d9:8d:b3:b5:
                    33:91:13:37:92:2b:67:6f:df:08:26:d4:81:5a:52:
                    60:6c:87:72:8b:de:ee:63:8d:a7:3d:4c:27:cf:4d:
                    e6:9d:bb:48:cc:c0:65:27:d8:6c:bb:d2:8a:91:6a:
                    76:86:4e:92:45:bb:4c:20:fd:db:5c:10:dd:10:9f:
                    2f:5d:57:ec:e3:f4:bf:5c:42:50:0e:b4:5a:b6:7c:
                    da:2b:38:8e:40:3f:a0:4b:ea:a4:07:09:d8:17:2d:
                    0d:6b:11:3a:d4:10:79:3c:6f:0b:50:a5:b0:3f:94:
                    11:f4:6d:bd:95:ce:f5:21:ae:13:03:3e:c5:e3:f6:
                    c9:13:3f:bb:fd:20:40:24:e8:37:e2:33:88:07:bb:
                    4b:cf:7b:08:4e:fa:90:d3:2d:94:b0:64:0b:5e:ef:
                    c5:a3:cb:24:a5:11:a0:10:ec:63:fe:b1:ab:e2:bf:
                    f1:5e:c3:4d:9a:85:12:7e:fa:77:b6:92:e4:52:2a:
                    04:dd:f1:45:92:42:89:10:a0:96:61:e3:ba:cc:ef:
                    8c:a7:39:cc:1c:b6:6f:81:b6:99:0e:2a:02:ca:0d:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:D3:7D:D9:63:3F:9C:AD:2F:DE:4D:A5:01:A5:20:05:3C:98:88
            X509v3 Authority Key Identifier:
                keyid:FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:c2:9d:81:5f:79:91:9d:12:1a:88:35:a2:4b:6f:ce:1e:
         bd:ab:72:7e:03:ce:8f:6f:65:74:0f:fa:51:53:91:36:96:5c:
         4e:b6:bc:7e:6d:6e:18:a4:4e:4e:35:62:c2:ac:af:0d:86:23:
         e5:1b:52:34:db:87:76:f9:40:b9:58:40:86:e5:9d:79:a3:05:
         dc:43:da:d9:a1:85:23:e9:3d:5a:f2:c5:fc:04:70:64:db:ec:
         a5:ea:04:51:9b:7d:3e:a5:f6:5f:13:e9:01:b9:2b:b0:22:03:
         15:9a:09:6b:99:ba:3a:b4:ab:02:5a:66:30:d6:06:64:aa:b8:
         f4:cf:0b:40:fd:fe:72:66:cc:ed:5a:76:c9:3c:cd:e2:1b:92:
         0e:f6:45:ed:44:c6:6b:6c:79:b6:2a:35:01:8d:92:f7:eb:20:
         bb:fe:0b:75:10:ff:42:2a:1b:36:9a:3e:b9:17:60:3f:cc:da:
         36:ac:c4:01:d9:c6:61:40:5e:24:ed:af:4d:e3:87:8c:33:8c:
         e7:a4:fd:0c:29:8e:07:84:fd:66:15:30:b6:c4:26:5d:38:43:
         b5:2f:d5:1f:1a:c9:58:2c:a3:bf:ec:c1:c5:1f:fb:99:a6:07:
         95:49:d3:69:2e:87:3b:2c:44:0a:bc:9d:a9:97:af:67:4f:50:
         92:4e:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org