Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231382e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3231382e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          +YU0juaFrS09Cs6Xx1F4kdSNDu/S+JpK1LHAsQKzozw=
Subject key identifier:   B7:95:9B:A2:A1:55:C8:1F:87:5C:CB:AC:78:95:39:0F:CD:E5:3E:B9
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       5BA2E9144B4352A4B1D8822E737F7AEC60DB00D4
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231382e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263558
IP address blocks:        186.237.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a2:e9:14:4b:43:52:a4:b1:d8:82:2e:73:7f:7a:ec:60:db:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=B7959BA2A155C81F875CCBAC7895390FCDE53EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:17:f1:ee:4e:e4:c7:cc:b5:14:c7:2b:6f:
                    bb:a1:05:ba:28:4a:26:24:1a:52:89:35:27:1e:2f:
                    10:af:84:63:1a:94:88:b5:82:5c:ce:93:f0:e8:44:
                    40:5d:aa:49:3d:89:94:e7:e3:d6:2c:4d:a7:1c:54:
                    b0:12:8e:a3:8f:e3:7a:a9:0c:18:85:b3:fe:77:42:
                    3c:cb:14:fa:2c:00:24:36:99:94:ab:d1:c4:24:1a:
                    91:e7:c0:b5:49:2d:b6:76:6c:26:c8:b6:ed:ca:9a:
                    a2:7f:0a:6a:2f:c1:99:99:e0:42:7d:0e:86:8d:28:
                    4e:37:e7:46:15:46:c8:a2:6a:03:d2:32:89:87:94:
                    07:ba:11:ae:30:ee:a1:62:b8:95:b4:f2:94:ff:0a:
                    63:0a:f7:80:6c:91:e6:01:b4:25:79:94:bb:30:1a:
                    6d:db:d5:e0:30:cc:33:67:75:be:bb:04:33:f0:01:
                    89:9f:d5:92:7b:82:30:52:dc:8c:2e:4c:32:3f:0e:
                    5a:09:16:f9:cd:b5:93:64:ac:0f:65:e3:d7:b5:77:
                    d6:4d:fd:10:98:63:1a:30:38:e6:fb:2c:29:25:63:
                    ca:8c:67:3e:fa:c6:0a:f7:47:aa:74:d6:f4:b4:9b:
                    ed:d0:2f:f3:6c:47:e1:d4:f1:39:b7:3c:71:33:a1:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:95:9B:A2:A1:55:C8:1F:87:5C:CB:AC:78:95:39:0F:CD:E5:3E:B9
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3231382e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:3c:40:05:02:bb:d0:c6:b3:37:37:d4:dc:ea:22:8e:6e:a6:
         f6:f2:32:9d:89:05:b5:e1:47:5a:a4:d5:1f:8f:6a:ad:75:a3:
         80:ab:db:d8:25:62:53:ff:21:19:4f:ce:e9:84:6d:2a:73:a3:
         05:e2:a9:d7:35:29:b1:e6:65:76:fe:37:2a:c9:26:2a:f8:8b:
         05:bc:b9:71:b6:a8:6a:e0:cb:80:64:d3:81:bc:3d:a1:b8:ac:
         38:04:6d:65:76:bf:f0:07:b1:aa:ec:7c:6a:a8:a2:7c:c5:69:
         99:2a:b4:4d:5c:62:be:d8:e1:c5:dc:a8:67:3d:c0:d8:fe:7f:
         4d:81:5e:ca:96:3a:43:4a:94:43:1e:cd:04:58:4e:3d:ab:2e:
         e8:6b:39:9a:e6:01:6d:d2:1f:9d:2f:d9:12:59:72:f5:69:62:
         43:7f:90:4c:91:be:6e:36:ad:48:be:cc:aa:92:94:d1:d3:f5:
         a3:89:02:18:9a:8d:c8:5b:e6:16:c3:1c:9e:ac:ca:f5:cd:e1:
         d5:88:7f:7c:9e:27:a5:a7:09:55:9a:01:71:13:fa:90:65:a8:
         9f:a7:80:ac:f7:6e:2d:59:00:c9:1a:82:66:6a:d9:4e:52:12:
         1a:c1:ed:38:7d:79:83:23:15:38:af:d8:e1:d2:09:a5:9e:59:
         97:bb:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:32 2024 by rpki-client on console-fra.rpki-client.org