Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134322e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3134322e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          YW6diOqSdC/EekPL5Oz7YaSRUTC3G8ZaoJ+r1B+PHS8=
Subject key identifier:   FB:ED:D5:A1:2D:2F:B2:3D:D9:C7:3B:01:CC:02:0C:BD:0B:03:FF:CE
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       3342F155D209A5E3531EFE9D4DFC25ACFFE00480
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134322e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        186.193.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:42:f1:55:d2:09:a5:e3:53:1e:fe:9d:4d:fc:25:ac:ff:e0:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=FBEDD5A12D2FB23DD9C73B01CC020CBD0B03FFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:ed:74:e3:9c:e7:fd:14:94:73:2b:bf:92:
                    96:96:d9:c9:3b:ac:39:d3:79:91:f0:b8:21:4f:36:
                    92:66:2f:b0:02:e1:fc:50:d8:dd:b8:c6:cb:c0:8d:
                    1e:11:f7:1d:72:5f:bc:54:81:e1:b7:04:1f:69:87:
                    9a:8a:da:0b:d6:c6:22:c4:0a:3c:ce:0e:fb:23:03:
                    26:f5:66:10:03:aa:49:83:fd:db:94:9f:c0:e1:a3:
                    b9:ee:fb:a5:25:86:85:a5:32:36:fc:a4:a2:3a:5e:
                    33:6c:f9:a1:25:33:6d:31:fb:42:e4:d8:17:8a:0f:
                    3b:a2:16:81:5f:84:5e:a4:18:cf:76:68:79:e5:33:
                    73:fc:7c:07:ab:71:76:c5:23:6a:b5:24:a0:f1:53:
                    07:0d:02:e5:d0:66:7e:86:ae:95:41:34:15:09:f1:
                    93:de:d8:df:dc:d0:fc:19:d5:b0:c7:a6:2f:01:53:
                    d4:7e:67:0b:65:fb:c4:a1:bb:7f:64:e5:5f:c8:c2:
                    4b:4d:f1:40:f0:1e:42:62:03:8b:d3:cd:2f:49:8a:
                    a3:0f:d0:66:e6:9c:ac:ce:d3:22:12:28:bd:0a:1f:
                    5c:60:c5:93:8c:79:12:8f:b0:20:dd:6a:94:1d:c1:
                    63:e5:84:c5:7e:c5:3d:66:88:20:39:2e:e3:9b:6d:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:D5:A1:2D:2F:B2:3D:D9:C7:3B:01:CC:02:0C:BD:0B:03:FF:CE
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134322e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:21:06:12:e0:fb:95:17:cc:96:d3:71:fc:e5:ff:a9:7a:62:
         ed:7c:da:ae:b5:de:98:b4:60:fc:1e:9e:21:41:61:64:7f:6c:
         82:79:21:c7:b3:1b:e9:f9:73:37:32:b7:90:de:1c:6d:33:76:
         88:76:b7:6e:d2:29:e0:6c:35:38:03:4f:92:71:4c:6a:fe:45:
         f1:c8:b1:08:c4:79:6f:04:ff:2a:b5:d7:8d:4d:62:cc:dd:1a:
         6a:2d:42:c5:25:ac:1a:66:22:b8:e3:f6:61:37:46:a0:71:98:
         dd:4f:46:3d:10:e6:da:2a:29:95:61:3c:a3:6f:e3:10:39:dd:
         45:26:12:2d:a9:28:30:af:97:a5:27:e1:78:1b:3b:12:61:0c:
         b9:7e:22:ef:78:f1:ad:f9:8d:f7:f7:49:2d:1b:49:e8:eb:0a:
         77:62:a5:4e:2e:9c:9e:28:8a:29:a4:e4:a7:e3:24:4d:c5:43:
         21:4d:b5:6d:a7:08:87:0a:60:ba:2a:92:1a:7b:f0:49:7e:74:
         de:78:f8:91:d1:eb:79:dd:6a:77:8c:e2:38:bd:96:48:30:86:
         fc:ee:45:0b:49:38:66:8e:b3:e5:08:aa:8b:7f:ca:c0:cb:b6:
         d1:37:3c:ab:83:00:99:25:f3:39:de:76:52:7b:c1:b1:4f:d0:
         72:7b:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org