Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232302e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3232302e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          O5DFSfX8dI6EKHjEnICveVePtZjA3GAGCHBtKdq2oeE=
Subject key identifier:   63:CB:75:89:E2:C5:BB:D8:7D:12:76:F8:79:2C:ED:FE:8B:1F:49:A2
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       2906212A271EBCBCE80B30AEFDD1AF1DB98E268C
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232302e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:24 +0000
ROA not before:           Thu 04 Apr 2024 07:55:24 +0000
ROA not after:            Thu 03 Apr 2025 08:00:24 +0000
asID:                     263558
IP address blocks:        186.237.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:06:21:2a:27:1e:bc:bc:e8:0b:30:ae:fd:d1:af:1d:b9:8e:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:24 2024 GMT
            Not After : Apr  3 08:00:24 2025 GMT
        Subject: CN=63CB7589E2C5BBD87D1276F8792CEDFE8B1F49A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:19:f0:04:ce:b2:52:3b:61:04:1f:48:4f:
                    b7:57:4c:18:30:6c:7e:60:10:17:47:cf:f1:d7:0a:
                    a5:a3:63:67:6e:4f:ac:4a:9a:af:3c:6c:ce:0b:77:
                    f1:6e:36:43:ff:65:f0:c9:af:21:d2:86:0a:9c:d0:
                    c6:d5:ad:8a:1d:d6:d7:60:ba:ca:3f:56:d0:27:1d:
                    ce:4c:e7:31:53:27:d7:83:68:ee:b6:68:26:85:bf:
                    80:49:6c:74:1f:b9:5e:a0:3d:78:65:45:87:5f:b2:
                    0e:46:d5:cb:56:5c:cc:7f:36:a0:39:31:f3:c9:16:
                    3e:db:53:0d:3d:c6:8a:10:97:e8:68:65:59:13:e3:
                    2f:f0:90:1b:97:f5:d6:45:64:6d:24:32:99:3c:9d:
                    63:b3:e2:17:ce:ea:0e:26:5f:48:3e:5b:9f:39:b0:
                    6e:5f:a2:52:9c:83:ac:16:56:43:23:66:09:88:c4:
                    87:9d:50:f6:57:13:3f:d9:77:21:fa:a6:b7:c9:36:
                    c0:b1:b2:19:e9:e3:12:14:b2:27:99:d0:3e:86:bb:
                    cb:a9:a0:55:46:bb:c4:d9:3f:dc:fd:73:d8:c9:34:
                    4b:f7:ff:c8:be:f2:4b:2c:2d:4d:11:4c:27:12:96:
                    1c:42:58:ba:c7:fe:b4:13:9d:f6:fa:18:77:07:f4:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:75:89:E2:C5:BB:D8:7D:12:76:F8:79:2C:ED:FE:8B:1F:49:A2
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232302e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:32:a3:a8:e9:2c:a8:67:dd:b0:8a:1d:24:3f:0d:0d:f2:
         c1:65:81:43:98:28:1c:37:37:8e:ec:1b:f6:84:98:f3:bf:d0:
         87:a3:42:92:d3:f5:dd:06:49:21:20:3f:69:e4:79:64:3f:65:
         fa:68:6b:5a:d8:fc:2a:c3:2c:9f:0b:60:1e:33:23:3a:39:12:
         d3:6f:59:cf:b2:81:e6:20:4d:f2:76:c4:d9:9f:d9:a9:cd:69:
         bb:1f:38:82:84:32:8d:a7:32:2d:02:76:ad:7c:31:90:24:1e:
         b7:e4:1f:b0:c3:da:0e:73:b2:1f:88:99:af:99:07:4b:02:fb:
         3f:e4:0e:a7:44:4a:95:10:56:d7:2e:7f:20:5f:c4:55:85:f6:
         4b:ee:7d:4f:b2:4e:85:0b:32:fd:4b:a9:e6:b3:b1:a7:ff:db:
         d5:36:a1:9b:97:6b:8f:f0:1b:0f:8f:92:db:67:1c:94:03:cc:
         61:70:f6:d4:84:58:51:7d:98:f2:2e:97:00:c0:1b:93:cc:3a:
         b2:a4:51:8f:e9:53:42:9c:8a:e8:29:f0:87:9a:5e:d6:91:88:
         5e:50:33:a2:6e:d8:b7:c6:87:07:7e:b8:b8:13:a5:6f:11:dc:
         3e:69:d2:ed:51:95:53:ec:e7:2b:63:aa:05:ac:eb:62:3c:2b:
         f4:b5:21:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:25 2024 by rpki-client on console-fra.rpki-client.org