Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135322e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135322e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          UjVMLGpwffiOTJQqPK62cTiWLrYwEp6fdndXmdtUOE4=
Subject key identifier:   A6:31:74:C1:A5:DE:F8:12:A4:5F:8E:CA:7F:9B:B1:4D:A6:08:32:41
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1298F50A3B71D86A15F0D7BBB57281EA2AB687F5
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135322e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:27 +0000
ROA not before:           Mon 15 Jul 2024 13:37:27 +0000
ROA not after:            Mon 14 Jul 2025 13:42:27 +0000
asID:                     262729
IP address blocks:        186.193.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:98:f5:0a:3b:71:d8:6a:15:f0:d7:bb:b5:72:81:ea:2a:b6:87:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:27 2024 GMT
            Not After : Jul 14 13:42:27 2025 GMT
        Subject: CN=A63174C1A5DEF812A45F8ECA7F9BB14DA6083241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:c0:7c:59:3c:3b:a9:2f:1b:8b:84:db:c1:
                    5a:5e:6c:1c:1d:9d:5b:e6:95:f1:80:96:60:8b:07:
                    25:b2:5b:e1:f5:77:1a:f2:73:01:45:8c:8d:65:69:
                    a2:19:44:0a:71:8e:78:f6:a7:05:f5:55:cd:23:88:
                    b4:87:90:1b:be:f7:f6:00:b8:96:48:e3:9a:87:e2:
                    c8:45:54:ca:fb:5e:d7:3e:22:85:e3:bb:b3:ec:47:
                    12:3f:67:6e:6c:c9:9d:22:67:85:46:e5:61:84:13:
                    81:92:17:67:56:65:8f:14:d7:09:e9:89:15:43:13:
                    2d:50:69:76:36:7f:bd:f8:42:6c:e1:36:c8:5c:8f:
                    c4:ce:cc:36:a4:90:15:82:b8:1c:37:a6:9b:7f:4d:
                    f3:38:38:23:f5:fb:86:7c:f2:50:04:05:11:cf:4e:
                    08:92:d1:eb:13:36:e9:c1:9c:d6:76:c6:30:cf:a4:
                    74:15:63:90:fb:57:6c:e5:a8:01:b2:de:fb:d7:c6:
                    4b:51:48:59:ab:2d:bd:5b:cd:04:be:85:ca:3d:30:
                    55:a3:20:95:39:ee:51:d2:32:12:1c:0c:5b:7c:b5:
                    f7:fd:7c:28:d5:6c:6c:cc:c3:9e:5c:10:e8:ce:3d:
                    1a:d2:42:52:ed:6e:78:05:d4:02:08:c9:af:3a:14:
                    4c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:31:74:C1:A5:DE:F8:12:A4:5F:8E:CA:7F:9B:B1:4D:A6:08:32:41
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135322e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:45:a2:e9:56:ab:a9:09:2c:78:4d:6b:cb:e0:80:71:f4:
         4b:d9:03:ea:c7:78:c6:ce:3c:f5:fc:81:7b:2e:c2:1e:5d:dd:
         e3:cd:42:d4:71:2f:75:f2:6c:28:eb:40:be:8c:f3:f5:8c:4c:
         ce:a9:98:29:aa:e7:a4:79:e4:11:b1:03:c0:d9:63:da:bd:b4:
         31:ed:cc:2b:f5:9b:29:ea:fd:88:36:91:4d:f6:33:eb:56:13:
         21:3f:90:09:24:5c:e4:25:01:17:66:f1:45:fd:a5:6b:be:a4:
         cf:ab:a5:65:91:4d:13:95:d4:1d:ca:7d:14:f0:27:20:26:89:
         f9:9f:2b:11:89:f0:ff:c8:7b:af:b6:cb:43:4c:b9:74:79:c7:
         7d:5c:4f:75:b4:fa:0f:f2:a8:f1:92:d9:66:ba:cf:c3:3e:63:
         b3:6e:2e:7e:42:a3:0a:fa:08:77:7a:aa:eb:39:b4:60:22:e3:
         50:76:a1:8e:b1:cf:83:d1:3f:49:f7:8d:20:a2:df:b2:26:87:
         a6:6f:59:a2:8f:6c:00:e5:ef:0a:3f:a3:be:7e:21:0f:04:2b:
         80:b5:7a:be:9f:20:fc:71:a5:24:e6:f7:9d:f8:f1:cf:c3:39:
         b6:86:e2:13:c3:29:15:7c:aa:b9:77:57:6f:5d:79:81:39:00:
         70:6d:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org