Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32302d3230203d3e20323632373239.roa
File:                     3138362e3139332e3132382e302f32302d3230203d3e20323632373239.roa (raw, json)
Hash identifier:          kVUE/A0TiJa86q0j5uZkO76pCUaU23qu8IClCcpzmWo=
Subject key identifier:   71:66:26:64:A6:3E:E5:2F:46:1D:52:BB:56:73:7D:F1:76:39:65:D9
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       0561E7B72F91163DEB6F5D1DB5E44AB4A4BFBDB4
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32302d3230203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        186.193.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:61:e7:b7:2f:91:16:3d:eb:6f:5d:1d:b5:e4:4a:b4:a4:bf:bd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=71662664A63EE52F461D52BB56737DF1763965D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:f0:c8:8b:95:fb:3c:34:82:2a:df:db:68:
                    a9:14:9e:f9:10:d8:c7:44:dc:9c:9f:58:4a:dd:0b:
                    48:be:b1:97:42:23:f2:de:6c:d2:7e:33:8c:46:59:
                    83:94:0f:89:40:33:1a:65:de:2e:2a:56:0a:4d:3c:
                    2c:26:ec:a2:9c:32:93:b6:b9:d9:f0:74:9e:61:8d:
                    5b:2a:04:8d:d2:2e:8e:6f:d8:e9:cc:16:8f:08:8c:
                    02:0b:31:1a:17:03:c3:11:0c:af:38:fe:a2:12:84:
                    60:7e:28:4a:c0:8d:0a:4b:8d:d7:c5:9c:9e:09:d1:
                    69:70:4e:0d:36:9f:ce:9c:02:d1:f9:0a:07:a4:9e:
                    5d:81:00:99:78:1b:38:da:bf:9f:62:40:e5:ab:8d:
                    42:e3:55:01:f9:0c:85:d9:3b:da:98:da:83:c8:05:
                    1e:47:ed:ad:d4:5f:db:07:18:e7:f0:8a:b7:a2:7d:
                    1d:8a:4d:cf:71:26:43:e3:2e:d1:31:fe:48:c3:0c:
                    13:72:8d:3d:a3:aa:7f:90:86:67:bf:1b:af:ae:30:
                    43:18:f3:72:da:57:28:67:fb:91:65:db:51:e3:d2:
                    b8:0c:61:62:7a:16:a6:f7:10:18:90:8f:ed:3e:1b:
                    fa:d7:3d:52:a5:68:ac:7c:8a:57:3d:9e:5b:96:04:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:66:26:64:A6:3E:E5:2F:46:1D:52:BB:56:73:7D:F1:76:39:65:D9
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32302d3230203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:79:0d:ea:b8:6e:c6:91:76:44:9d:e0:da:75:2b:b0:51:
         b8:03:0c:9d:07:7a:9a:65:7e:7b:fe:c9:d6:4d:02:bd:ee:a5:
         f6:e4:d1:2c:c1:ba:ca:20:c6:0e:22:9c:13:77:95:f2:bb:bb:
         5e:85:1b:c6:6c:16:fb:08:01:42:e2:88:87:de:33:cf:de:42:
         48:f2:1b:e1:74:0d:cb:d9:07:a1:cf:75:f8:99:32:cf:54:96:
         3d:e5:b0:ca:87:ae:fd:0d:75:05:75:cd:ed:b1:44:79:44:ae:
         68:75:ed:f5:ac:89:83:f2:17:ce:3e:99:73:7b:53:ba:17:ef:
         11:c4:9a:fd:16:92:94:22:70:15:62:27:03:54:9b:bd:2d:26:
         64:a0:58:51:c8:d6:5c:5e:de:c0:30:e9:31:06:ca:a0:6b:f5:
         9c:32:05:e1:22:d8:dc:35:cd:e6:fe:1b:12:5e:e2:5d:a4:f1:
         45:b2:56:e9:89:aa:2a:76:ca:0a:cb:23:97:a1:6a:c0:da:b9:
         57:ce:27:cb:3f:cd:f9:c7:fc:58:94:48:1b:16:24:69:32:1d:
         9f:61:81:b3:0a:de:20:7c:58:03:97:82:cb:a6:54:0f:5a:da:
         83:bd:01:2e:30:37:f5:c6:54:5d:0c:4e:d8:88:28:b7:f7:e2:
         4c:c1:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org