Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          UOj+YkNN07ktv27hhddbxlIyVUpaih+8V7jXQ7ZIzbg=
Subject key identifier:   BA:12:EF:A2:2A:2B:6D:CB:7D:D6:4D:61:8E:23:6B:2D:67:EA:27:A5
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       579651B3D2DF3439EF92BF6C6C96395BA1F244B0
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:24 +0000
ROA not before:           Mon 15 Jul 2024 13:37:24 +0000
ROA not after:            Mon 14 Jul 2025 13:42:24 +0000
asID:                     262729
IP address blocks:        186.193.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:96:51:b3:d2:df:34:39:ef:92:bf:6c:6c:96:39:5b:a1:f2:44:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:24 2024 GMT
            Not After : Jul 14 13:42:24 2025 GMT
        Subject: CN=BA12EFA22A2B6DCB7DD64D618E236B2D67EA27A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:78:3e:66:9c:33:57:db:bc:d7:c4:3a:7a:
                    70:5a:d6:7c:69:70:03:cd:22:ab:c8:42:92:af:fe:
                    5b:76:b2:db:d1:6b:cf:22:85:f0:b8:05:56:e1:3c:
                    00:a3:14:68:a1:4f:7d:fd:b9:1c:e0:38:e3:31:d7:
                    bf:71:d2:d0:cb:c7:c6:81:30:94:28:80:db:a9:12:
                    50:28:44:1b:0e:1e:83:d5:04:f7:e4:10:0c:5e:ef:
                    47:a3:b0:39:4a:8e:b6:99:a5:f8:70:a9:99:2a:30:
                    0d:7e:f9:be:c8:3e:71:6b:f0:b1:55:63:b7:e8:0c:
                    d2:ed:d8:3a:54:d8:0c:68:2b:81:04:48:b9:b7:71:
                    0a:ba:d8:0f:ef:9e:ff:dc:5c:5b:45:89:ef:d5:33:
                    56:99:d9:97:14:f6:b8:23:2e:bc:dd:0d:f5:14:03:
                    e2:37:69:2f:11:e2:00:23:4b:43:b1:57:32:80:48:
                    2a:f6:ad:00:fa:13:7d:33:3f:96:bf:4d:84:7b:78:
                    ef:e4:ec:05:fa:28:a0:3e:a0:ca:a5:fb:60:73:9f:
                    ef:8d:bb:c2:22:6d:02:66:64:59:aa:f0:28:48:06:
                    19:06:a2:52:49:fe:fd:52:76:b3:79:a7:d6:4b:8b:
                    f9:33:b9:87:8c:37:e2:e7:90:d8:f9:ed:c7:16:8e:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:EF:A2:2A:2B:6D:CB:7D:D6:4D:61:8E:23:6B:2D:67:EA:27:A5
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135302e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:f8:74:72:da:28:7f:4f:93:1e:6c:ad:36:5e:a1:8f:00:ba:
         3f:6c:17:41:be:fb:21:ed:c6:0d:5d:00:3f:8a:72:f4:fa:2e:
         e1:2e:ab:18:1f:01:18:5f:e4:d7:64:d6:30:aa:4a:3d:c4:f2:
         6e:61:94:c6:bf:07:6d:09:71:de:90:21:81:a7:c6:82:17:2d:
         19:73:43:ef:a0:9a:e0:80:0f:39:9e:dc:69:b6:71:73:00:9c:
         17:5f:cc:79:8b:bc:a5:19:4d:3b:86:b2:6a:11:2f:b4:45:ad:
         70:78:48:03:b1:65:08:60:e6:95:11:f5:1a:f3:b5:69:14:db:
         e8:d0:3c:e5:e1:57:86:39:4c:a7:72:be:d7:78:2d:8d:e1:60:
         a2:1f:e1:03:96:3e:90:a0:72:1a:59:35:7d:8a:d8:bf:40:3c:
         4f:7a:50:46:48:06:7b:72:16:8e:dc:64:9f:cb:39:10:c3:77:
         9e:7f:b7:5a:ed:56:78:f0:4e:89:e4:ca:b7:c6:13:c6:a4:a4:
         42:c0:14:bc:6a:42:ad:f4:db:d1:c1:6b:cc:29:ff:fd:ba:ab:
         8a:77:e1:9d:a1:e3:81:d9:82:e5:1b:73:09:d5:e3:48:30:46:
         74:9b:53:57:77:05:a1:3d:33:6a:2c:13:16:21:1a:5a:c3:e7:
         57:a0:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:40 2024 by rpki-client on console-ams.rpki-client.org