Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          5L4u2S7lXwE9GYiTT0Lv0XRlCB2tyI5PbQlch14fs8U=
Subject key identifier:   1A:86:E5:67:AC:A1:81:D3:E7:10:54:DB:93:A3:5F:62:8F:1A:9D:00
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       15B2907B603CB96EA71B017DF17080034472D682
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:27 +0000
ROA not before:           Mon 15 Jul 2024 13:37:27 +0000
ROA not after:            Mon 14 Jul 2025 13:42:27 +0000
asID:                     262729
IP address blocks:        186.193.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b2:90:7b:60:3c:b9:6e:a7:1b:01:7d:f1:70:80:03:44:72:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:27 2024 GMT
            Not After : Jul 14 13:42:27 2025 GMT
        Subject: CN=1A86E567ACA181D3E71054DB93A35F628F1A9D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:0d:e6:ae:0f:c7:90:eb:9f:19:3d:26:75:
                    3d:89:d8:bf:d7:88:9b:66:7a:f3:12:a3:a9:06:3a:
                    5b:68:ec:8e:47:1c:d1:0e:d3:73:dc:7c:32:11:0f:
                    1a:4f:30:a9:68:60:cf:9a:c6:61:94:c5:fd:34:ac:
                    9d:3c:e9:95:50:78:43:38:a6:e6:8b:aa:79:7e:a6:
                    96:65:5c:6f:dc:ab:a0:dc:c9:8f:96:7e:b4:53:ac:
                    3a:8d:6f:44:b1:01:75:fc:25:c8:6e:8d:34:31:6a:
                    3b:47:79:da:2e:21:dc:d7:52:7f:33:40:70:fc:48:
                    6a:f5:7c:e2:9a:8d:23:02:2d:8b:c1:ed:a5:19:92:
                    28:45:a7:7f:7d:6a:5b:42:9a:5f:6c:04:7a:96:98:
                    09:7a:f7:97:a5:96:34:a3:af:91:ab:a9:3f:6b:f3:
                    3d:2a:f2:a5:b8:77:1c:fe:01:3e:37:4b:cb:a8:03:
                    2e:3e:99:a1:76:0b:58:c4:9e:f4:96:69:1c:ef:0f:
                    06:72:14:1a:27:dc:a7:5f:56:02:5c:de:d3:b9:83:
                    3a:21:59:3e:84:c2:40:da:8a:d0:92:92:61:9d:4d:
                    02:43:63:72:08:0c:d3:24:1a:cf:8b:cc:09:e3:3c:
                    c9:0e:a5:67:c8:03:d4:a3:e8:ba:e0:33:cd:a5:bf:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:E5:67:AC:A1:81:D3:E7:10:54:DB:93:A3:5F:62:8F:1A:9D:00
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:29:79:07:e0:e9:42:af:10:e0:c9:55:3e:b0:d9:75:8e:6b:
         16:00:b1:ab:9d:9b:f5:76:90:36:ef:9b:e6:3d:d0:09:b0:5c:
         a1:e2:2d:48:bd:21:80:26:b7:6f:ae:28:f1:46:c8:cc:74:f2:
         a4:36:08:e0:c8:36:56:ac:4f:0e:b8:e1:85:ab:d2:a9:4e:eb:
         1b:21:05:5f:09:98:b2:26:ee:17:81:f5:cf:c1:96:50:97:9b:
         e2:ce:0b:66:72:00:1a:cd:13:9b:56:0d:1c:04:6d:40:45:2a:
         93:2f:ab:4f:c5:2b:62:20:9f:e8:d2:3b:3c:8a:f1:2b:19:28:
         67:be:6e:f3:dd:4e:76:12:bf:27:17:98:f8:d9:33:f8:e1:cf:
         53:7b:b9:81:02:ff:c6:09:95:d1:fd:db:84:9a:27:8a:90:32:
         17:78:e0:c5:0c:fa:af:64:ad:5f:3c:5f:b8:e1:61:9b:e6:ae:
         08:c4:df:f9:3b:4e:20:2a:64:b1:78:8e:94:ee:b3:7d:01:93:
         7d:dc:2e:f2:9a:25:e7:b7:fe:ea:1d:d2:23:ba:6e:1a:7a:21:
         12:47:2d:81:9e:05:5a:38:14:28:ae:d3:7c:74:17:11:5c:c2:
         db:71:5d:43:13:8a:92:75:af:b2:a7:3e:60:f9:01:99:96:93:
         f7:ce:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:39 2024 by rpki-client on console-ams.rpki-client.org