Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3138362e3235302e3235322e302f32322d3234203d3e20323633353537.roa
File:                     3138362e3235302e3235322e302f32322d3234203d3e20323633353537.roa (raw, json)
Hash identifier:          rIPy8WBpcoBeaFehEfokG2eLYRJmThpl8FPKNpfeKOg=
Subject key identifier:   34:8D:6F:C7:12:EB:8C:A9:F1:34:D5:8F:7F:22:92:43:A9:FC:EE:6C
Certificate issuer:       /CN=82849DD2443C1465238F4BD65D50B28F03615F5C
Certificate serial:       7E0D197CDD592EEB16C3413397FAE843AC6CA3D3
Authority key identifier: 82:84:9D:D2:44:3C:14:65:23:8F:4B:D6:5D:50:B2:8F:03:61:5F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3138362e3235302e3235322e302f32322d3234203d3e20323633353537.roa
Signing time:             Thu 04 Apr 2024 03:56:10 +0000
ROA not before:           Thu 04 Apr 2024 03:51:10 +0000
ROA not after:            Thu 03 Apr 2025 03:56:10 +0000
asID:                     263557
IP address blocks:        186.250.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.crl
                          rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0d:19:7c:dd:59:2e:eb:16:c3:41:33:97:fa:e8:43:ac:6c:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82849DD2443C1465238F4BD65D50B28F03615F5C
        Validity
            Not Before: Apr  4 03:51:10 2024 GMT
            Not After : Apr  3 03:56:10 2025 GMT
        Subject: CN=348D6FC712EB8CA9F134D58F7F229243A9FCEE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:81:df:c4:97:cb:26:a8:51:3e:7f:ab:31:
                    27:ff:50:ac:fa:ea:4c:04:1c:09:0b:d2:89:be:57:
                    60:2c:cd:66:56:5e:2a:75:be:c2:ab:7d:7a:6b:57:
                    60:5b:70:5c:f6:a3:a0:b8:68:39:0d:f8:1f:1e:46:
                    ea:e1:6a:66:f8:ea:38:33:fd:ae:f4:c7:4a:72:7a:
                    9c:83:82:09:b4:0e:a9:05:02:bd:a0:d0:21:e3:96:
                    41:81:77:43:94:03:4f:0c:31:50:a4:8c:a6:0b:6a:
                    62:e6:7a:41:84:19:c5:e4:f6:f9:e8:59:f6:d8:ee:
                    21:72:3a:a1:42:77:30:41:77:cb:de:85:99:b5:79:
                    84:d2:46:ae:7a:88:94:61:0c:4e:da:0a:67:4b:6d:
                    ec:cf:ca:37:7e:c5:ef:5f:db:8c:c1:c4:93:42:bb:
                    b9:5c:c2:f7:93:86:15:b6:fd:fd:00:52:64:ee:35:
                    00:c9:95:08:a4:62:c5:37:9a:20:75:7a:c8:26:d1:
                    36:bb:b5:64:4f:e7:6c:55:c0:4b:82:9f:b4:2b:69:
                    83:4e:aa:84:c8:64:b1:2b:74:45:79:4e:12:d2:2e:
                    e1:d4:02:5c:b7:2d:72:cc:48:65:45:ef:8a:40:cb:
                    8e:55:f1:13:2b:aa:b5:27:7d:ae:1a:11:40:cd:92:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8D:6F:C7:12:EB:8C:A9:F1:34:D5:8F:7F:22:92:43:A9:FC:EE:6C
            X509v3 Authority Key Identifier:
                keyid:82:84:9D:D2:44:3C:14:65:23:8F:4B:D6:5D:50:B2:8F:03:61:5F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3138362e3235302e3235322e302f32322d3234203d3e20323633353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:72:a9:6b:00:75:b1:31:86:94:a7:f5:b1:54:ee:82:56:
         f7:91:86:a0:9a:1d:51:a0:7e:dd:dd:ea:e7:14:fd:88:64:fa:
         b5:94:1e:f9:c5:ee:58:26:d4:d3:bc:df:04:8d:b7:06:33:b0:
         9b:89:9f:95:f8:85:a8:5a:a0:65:66:9a:a9:93:d0:ed:62:49:
         08:42:82:b3:14:6e:04:4a:a8:99:33:28:4c:4d:ac:46:9e:12:
         5f:4a:35:3b:eb:e5:c7:e8:a3:17:dd:72:cf:7a:3b:74:0e:b2:
         9f:9f:41:f2:da:ca:64:12:56:36:5f:67:12:2d:b8:92:b8:44:
         4d:25:bd:7b:1c:4d:af:34:5d:22:8c:a7:0c:6c:34:9a:8d:11:
         68:f8:fc:a6:26:c9:a5:63:e5:5e:26:4b:a6:13:e2:9d:92:24:
         48:89:40:f7:7a:7b:bc:dc:d5:65:0e:8b:2b:d1:3b:20:2e:e1:
         37:c0:01:04:21:18:21:10:7b:d4:c0:c1:23:89:eb:aa:66:49:
         76:52:50:41:4c:eb:1b:cc:d1:5c:a5:8a:af:18:6f:be:c6:a4:
         88:ff:39:d2:53:40:66:5d:90:cd:12:bf:f4:d2:78:46:e7:ce:
         20:8f:70:cb:f6:ee:58:7a:cd:d0:91:34:4a:2f:cd:aa:d1:54:
         11:33:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:20 2024 by rpki-client on console-fra.rpki-client.org