Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134382e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3134382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          SDaeDqYB5WChaSZ5oEHR5BWPH6XChru72vQKemTrZOM=
Subject key identifier:   FF:CB:64:67:55:80:89:6F:1D:EF:91:31:E9:B1:2D:8B:A0:59:DF:67
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1E7340F47012F071C0795607541024C18CCA0A62
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:23 +0000
ROA not before:           Mon 15 Jul 2024 13:37:23 +0000
ROA not after:            Mon 14 Jul 2025 13:42:23 +0000
asID:                     262729
IP address blocks:        186.193.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:73:40:f4:70:12:f0:71:c0:79:56:07:54:10:24:c1:8c:ca:0a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:23 2024 GMT
            Not After : Jul 14 13:42:23 2025 GMT
        Subject: CN=FFCB64675580896F1DEF9131E9B12D8BA059DF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:76:e1:e7:c9:f9:d2:58:a1:4e:57:0e:32:
                    0b:31:7b:05:bc:42:cd:2a:44:a0:87:b0:36:2e:6f:
                    4f:29:cd:f1:63:9c:1e:97:34:59:22:90:d2:c3:14:
                    9a:9b:8e:7f:a8:f2:a4:7a:49:8b:3c:d5:c2:2b:b9:
                    e5:56:8a:24:00:67:8e:ac:76:dd:4e:9f:f4:4d:3e:
                    eb:64:2d:02:21:af:31:80:cb:31:6e:2a:ee:7d:8b:
                    0a:43:ff:4b:bf:88:d3:bd:29:5a:3c:21:34:83:c1:
                    4d:0c:7c:05:0d:85:1b:aa:58:36:4d:a5:f9:b9:19:
                    9e:92:06:2f:6c:35:f8:8f:fc:f2:c1:64:23:21:3f:
                    78:36:76:68:e3:61:66:57:3e:ee:92:c4:76:95:de:
                    4e:70:67:e4:16:1b:95:e8:dd:c8:43:82:79:98:86:
                    eb:6b:42:45:79:fe:02:86:69:01:25:8c:95:c1:f7:
                    b0:81:ee:d1:7a:9a:83:df:94:de:ea:4f:14:09:b8:
                    36:c7:2f:09:a8:4e:85:3d:38:26:08:ea:df:0c:4b:
                    c3:34:e1:a1:37:3e:fa:1c:16:ce:81:b1:fc:5c:da:
                    b5:13:b7:52:7b:9f:06:e1:63:e2:d2:96:07:b9:ce:
                    3c:11:ad:1d:96:9e:5f:1c:99:ab:ad:e2:35:7e:4b:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CB:64:67:55:80:89:6F:1D:EF:91:31:E9:B1:2D:8B:A0:59:DF:67
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:26:80:3a:cd:60:b6:7c:fa:c8:5b:c7:bc:e3:e1:c8:95:71:
         c0:a9:6a:22:d1:a0:a9:bf:ee:23:cb:cf:e1:a7:1c:1b:76:30:
         fe:9e:16:1d:9b:12:41:53:d8:d1:d6:9c:d7:dd:a2:89:cc:82:
         a7:18:c1:16:ba:56:ec:c4:c5:ad:35:8a:ad:77:bd:24:2f:7e:
         5b:f3:3b:c1:5e:d4:20:ef:d9:31:04:36:68:60:bc:da:b9:e1:
         77:8a:9b:36:13:a2:f5:e8:bb:33:a5:a2:50:cd:d6:0e:2b:17:
         59:9f:e0:39:16:29:67:42:9c:7c:e4:77:60:c9:ce:11:96:d9:
         b1:52:ee:7a:95:c1:26:81:86:87:23:09:23:8c:f7:df:fb:ce:
         f3:d2:2d:ed:21:a5:54:8d:ce:23:22:e3:c8:9c:24:55:89:bc:
         33:6c:54:af:7f:e5:bb:25:ed:eb:bd:7a:5b:62:3a:5b:cc:19:
         5b:03:51:68:fe:96:4c:02:fb:97:6d:5c:21:4c:b7:f0:fa:f6:
         38:55:b2:8e:cc:42:2b:b4:d9:25:1b:d0:b4:f9:6f:09:2c:b7:
         e8:9e:63:ca:38:c2:e4:84:b5:45:66:70:c4:f4:c0:42:84:66:
         b4:32:36:87:39:70:75:66:9f:11:90:77:02:19:a7:8f:38:1d:
         dd:81:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org