Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa
File:                     3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (raw, json)
Hash identifier:          1xhrqNXSOPbYHcd+18owfZbGBTjkp0Z/OyZTvPQOFDw=
Subject key identifier:   BC:5F:0C:B0:E3:C5:9B:45:2D:55:88:11:CE:2C:A8:A8:1C:05:24:10
Certificate issuer:       /CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
Certificate serial:       5DDE88D3416E94CC148BE0FF92B02BABEE29F6
Authority key identifier: FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa
Signing time:             Thu 04 Apr 2024 18:42:28 +0000
ROA not before:           Thu 04 Apr 2024 18:37:28 +0000
ROA not after:            Thu 03 Apr 2025 18:42:28 +0000
asID:                     262998
IP address blocks:        186.224.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl
                          rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:de:88:d3:41:6e:94:cc:14:8b:e0:ff:92:b0:2b:ab:ee:29:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1C6DAB0E396716D86B15F9BF079B81BFAF1578
        Validity
            Not Before: Apr  4 18:37:28 2024 GMT
            Not After : Apr  3 18:42:28 2025 GMT
        Subject: CN=BC5F0CB0E3C59B452D558811CE2CA8A81C052410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:3d:cf:eb:56:8d:58:dc:f6:13:35:3b:65:
                    5c:6b:40:07:ce:0e:6f:0f:e4:03:ef:0a:c7:58:4f:
                    08:13:40:a0:8d:c9:25:22:d9:7d:19:41:d9:83:50:
                    fb:8c:25:b0:45:11:6f:53:fb:94:75:dc:9c:44:c5:
                    3e:b7:6b:03:12:92:d9:f4:29:5f:4c:14:cd:88:5c:
                    5c:7d:19:eb:b5:7e:10:28:a1:41:f1:42:3c:6d:3a:
                    9c:27:c0:db:2f:64:26:8f:15:5b:b3:aa:d1:56:3a:
                    21:57:b7:e6:6e:7d:5e:4a:d2:53:fe:f8:48:e8:90:
                    d4:35:fb:9b:7c:f6:63:9e:cb:9f:05:63:bb:06:c6:
                    d2:76:4c:29:17:71:98:3c:e1:f7:6d:db:ff:59:cc:
                    64:3f:f9:ed:97:a3:84:63:09:c3:c2:b8:54:dd:09:
                    84:56:e8:b6:dd:2d:bf:db:ab:52:e0:18:75:25:24:
                    a8:d5:b6:a0:d0:89:a1:e1:1d:8b:70:fa:bc:da:72:
                    92:9c:cc:38:4f:81:6e:7a:f3:84:45:de:7c:0a:4b:
                    db:55:47:bd:fa:9f:67:4f:3e:a6:0a:46:dc:be:26:
                    cf:c1:57:9b:3b:b7:7f:da:47:19:45:b3:66:d4:5b:
                    15:f1:da:26:72:c7:06:4a:6a:c8:dc:ea:38:99:af:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:0C:B0:E3:C5:9B:45:2D:55:88:11:CE:2C:A8:A8:1C:05:24:10
            X509v3 Authority Key Identifier:
                keyid:FC:1C:6D:AB:0E:39:67:16:D8:6B:15:F9:BF:07:9B:81:BF:AF:15:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC1C6DAB0E396716D86B15F9BF079B81BFAF1578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/1/3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:04:38:cc:75:2a:a7:f4:98:22:c9:64:4b:22:80:5e:29:
         88:c7:f2:d1:d0:a1:17:19:9f:9c:3e:89:58:60:2a:30:17:8c:
         59:b7:0b:9e:9b:f7:7e:6b:36:a6:b9:de:cf:9a:c0:db:e7:ec:
         2d:01:ea:d1:8a:ac:2f:bb:94:ae:fb:d8:ab:54:76:fc:d7:55:
         0c:cd:86:68:fa:ae:54:a1:98:b5:09:0f:43:8b:81:c2:24:ea:
         25:34:5e:d6:be:c4:8c:84:01:2e:75:da:0c:06:30:2a:b7:72:
         27:5e:1b:f1:9e:c3:25:af:94:4e:4e:61:a2:43:39:b9:7e:99:
         8d:1c:b6:1c:e4:59:96:00:7c:50:c8:55:3d:a4:aa:64:09:8b:
         8c:b2:f3:37:54:ef:cc:e1:7a:90:f5:f8:66:77:59:d1:45:fb:
         63:1f:5c:ae:d6:62:76:af:b3:98:49:fd:2b:65:2d:3a:7e:f4:
         ee:3d:fc:2c:52:72:0d:c2:f2:4b:e7:17:21:69:ec:79:f1:78:
         01:c7:20:81:96:7a:5a:62:a4:d2:db:5e:d7:15:19:1c:2a:bf:
         23:9d:ea:6b:c0:a0:28:8b:ba:ab:f5:29:ed:d6:56:d4:67:d4:
         4b:80:01:c7:63:8f:aa:ab:c2:72:0c:5f:a5:a0:a2:f5:9d:21:
         ac:53:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:08 2024 by rpki-client on console-ams.rpki-client.org