Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133352e302f32342d3234203d3e20323632373239.roa
File:                     3138362e3139332e3133352e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          miDBByqxiXAZUDvRC5lj/619V+DJQh82Hb3+p02qSgk=
Subject key identifier:   1F:7A:01:47:E5:B2:CD:5A:49:4A:6A:57:34:91:2F:2C:15:45:D1:56
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       479E2747275A05A7517A57196B590057D2763592
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133352e302f32342d3234203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:23 +0000
ROA not before:           Mon 15 Jul 2024 13:37:23 +0000
ROA not after:            Mon 14 Jul 2025 13:42:23 +0000
asID:                     262729
IP address blocks:        186.193.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9e:27:47:27:5a:05:a7:51:7a:57:19:6b:59:00:57:d2:76:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:23 2024 GMT
            Not After : Jul 14 13:42:23 2025 GMT
        Subject: CN=1F7A0147E5B2CD5A494A6A5734912F2C1545D156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:99:6d:ab:b9:75:75:a7:a7:6e:51:43:cd:
                    b3:88:54:c6:dc:2f:e9:83:c4:76:60:d1:4e:23:bb:
                    21:4f:df:9e:16:0a:03:7a:9d:98:9f:18:42:7a:d4:
                    19:cf:d9:97:8f:c1:7f:96:97:b6:87:85:89:39:84:
                    59:8f:ea:da:66:94:4b:3c:15:83:5b:0e:29:da:82:
                    12:90:73:1e:18:57:f1:0d:64:4b:28:65:e6:d0:1d:
                    48:05:80:3e:90:76:03:a4:a7:2c:c7:84:e0:cf:05:
                    a5:ea:7e:f6:38:1d:3e:92:77:53:2a:f0:e4:56:77:
                    29:dc:dd:68:cf:d0:f4:51:d5:a5:93:b4:74:13:36:
                    50:0f:c7:aa:a3:5a:e5:ec:b4:52:e3:ff:79:cf:79:
                    34:0c:8b:3b:1e:eb:56:53:79:22:50:23:e7:a8:bd:
                    3f:f2:2d:f5:d3:83:0b:4e:5a:28:b8:88:0d:e2:ea:
                    27:9c:6c:f6:d6:21:3a:a5:8b:2a:e9:9b:e6:30:e0:
                    fa:a0:de:d8:07:23:49:6c:8c:fd:82:3e:c1:4b:cc:
                    21:42:e4:4b:1c:03:c6:ce:39:28:99:6f:24:31:89:
                    eb:06:4b:0c:b5:f8:60:fc:ab:f5:76:c4:f2:72:f9:
                    1a:fa:ed:f4:71:d5:19:29:92:e3:50:0c:e3:f6:ba:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7A:01:47:E5:B2:CD:5A:49:4A:6A:57:34:91:2F:2C:15:45:D1:56
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133352e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:42:1f:f8:a0:fe:85:29:d8:dc:35:04:7d:0c:23:d5:fc:
         59:e8:b6:c4:21:88:76:af:37:23:64:c3:74:35:1a:91:8e:dc:
         09:ca:c6:4e:ec:d5:7d:91:65:60:f7:51:f2:bc:aa:56:7b:27:
         a8:45:41:78:5c:ca:18:94:99:e3:ed:3e:e5:fc:e7:20:dd:66:
         92:7e:f7:cf:03:1d:3e:6b:9e:d6:dd:0e:48:60:19:aa:3b:ea:
         33:5f:43:27:40:0a:7d:c2:4c:1e:b0:b0:01:7a:23:3b:2a:c7:
         59:2e:99:8b:e9:18:39:dc:f6:89:b6:e5:f5:65:f1:f3:71:91:
         63:b4:26:58:aa:bf:0e:5f:25:3d:f7:37:45:4e:0d:42:db:c3:
         04:f5:b2:47:bf:d4:b3:76:c2:1e:a2:53:85:b0:8f:64:54:4a:
         df:da:b7:6f:f7:a0:5a:d5:13:08:c4:34:43:3a:6e:3c:c8:6b:
         7c:67:04:1b:bc:41:da:88:21:48:2e:d7:e0:79:d3:0b:16:db:
         56:9d:4f:95:25:63:22:94:93:36:f4:57:05:43:43:69:7e:73:
         5a:40:20:45:a6:0b:4c:7c:7a:34:de:93:b3:2c:e3:70:df:07:
         31:55:f9:c7:56:ca:10:03:fc:b5:52:ab:21:ac:d9:55:df:45:
         97:62:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org