Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133322e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133322e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          Hr1Wsilm+9c5GHLkYqoMwz8p3hUP6SyQrXPwdTUDIzk=
Subject key identifier:   57:31:53:9A:96:A9:36:FF:DC:BD:7F:B7:8D:6C:AC:CB:FE:35:FE:55
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1320A5F5F172CE748AFE689D770081448D09BB5E
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133322e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        186.193.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:20:a5:f5:f1:72:ce:74:8a:fe:68:9d:77:00:81:44:8d:09:bb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=5731539A96A936FFDCBD7FB78D6CACCBFE35FE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:56:57:60:f7:40:01:d4:e6:19:13:e5:c6:
                    09:a4:1d:fe:5c:c7:20:68:75:d0:45:8d:2c:de:20:
                    97:7a:e8:b1:04:23:5a:00:4f:9b:6c:c8:a1:69:92:
                    60:4a:f2:27:ac:1d:46:6a:e0:34:29:f4:7a:a7:77:
                    c6:7e:07:60:a8:16:bb:23:bb:2c:34:cd:d8:e7:2a:
                    3e:1b:4a:f1:9e:6a:bd:01:53:db:72:f8:73:be:7e:
                    5b:7e:91:ec:38:33:b0:e1:c8:d7:26:f7:4b:c2:c4:
                    47:8c:7a:38:6a:f9:6e:14:28:85:c4:76:24:f6:26:
                    84:32:0d:6d:ab:29:63:61:bc:b2:20:41:f9:e5:e9:
                    c6:20:b1:d9:0e:83:46:5b:a8:be:6b:2b:7c:04:ce:
                    7c:1d:ff:e5:b6:23:11:8f:21:62:7b:cd:4f:bc:50:
                    93:cd:3c:af:77:67:67:25:a8:db:54:d7:7a:ca:3b:
                    3f:50:bb:ac:8d:da:51:29:25:82:e5:bc:a9:e0:25:
                    a7:f1:4c:ae:69:ec:7c:1c:a0:45:c0:f9:38:9c:c4:
                    b6:0b:9d:cc:eb:c7:5c:86:1f:ef:47:25:1c:0f:f5:
                    27:4d:87:11:1c:00:86:51:8e:8e:eb:a3:9e:5c:6c:
                    44:3a:34:05:dc:3f:65:3b:e2:44:ef:f8:e2:bc:29:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:31:53:9A:96:A9:36:FF:DC:BD:7F:B7:8D:6C:AC:CB:FE:35:FE:55
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133322e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:64:55:0d:51:6d:bf:74:77:6e:15:4f:98:53:25:49:a6:0b:
         a1:8d:c0:c5:eb:cb:c9:db:ee:d7:05:ac:a8:3f:99:62:0c:39:
         dc:74:7f:16:5e:24:5f:37:d4:7d:1d:ea:ed:42:d5:a4:78:19:
         ee:b0:99:56:8e:e7:ef:3c:c6:8f:f8:d0:e3:db:cc:bf:38:f0:
         5e:fc:21:fb:7c:fc:fa:7d:4e:6e:a1:ba:e5:19:b1:cf:5a:b4:
         2c:44:52:2a:12:92:f9:5d:53:3f:3f:52:1c:f4:41:9e:6c:67:
         4c:4e:e2:b1:12:5b:71:53:27:17:06:a6:db:39:9a:4c:46:7c:
         d1:58:0b:7f:ff:cd:be:e6:f2:4e:97:52:e2:1f:47:4f:1c:7d:
         65:f6:a7:43:5f:8c:30:92:44:e0:3a:7f:1d:d7:04:92:91:51:
         e6:0b:83:8c:2a:05:52:97:90:2f:98:67:d0:3c:4d:8d:26:f5:
         1f:b1:4c:3b:3e:55:d2:2c:cc:55:0b:30:0d:96:14:b0:5d:c6:
         5a:17:e1:72:ed:9f:cd:b6:8b:c9:50:a4:2d:e6:ab:cd:ce:4e:
         f6:66:fe:db:42:ae:ce:1f:3b:d3:7f:a5:4c:b0:b4:24:c1:d5:
         f5:3e:cc:dc:ca:0e:6e:e2:24:0d:dd:d1:92:90:80:d9:6a:fd:
         b3:dc:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:39 2024 by rpki-client on console-ams.rpki-client.org