Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa
File:                     3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa (raw, json)
Hash identifier:          Zjtpdxnly2A7K4io8UWpPjn+aVEWO5iACI2Thi8Y1f0=
Subject key identifier:   F0:72:4E:82:9A:19:8E:0B:D7:02:6D:1E:34:24:7A:88:54:70:D9:FB
Certificate issuer:       /CN=B87E403FD04360E1BA519D841853FF5C9E675A23
Certificate serial:       01603972BCC794EF604866023C5E42760DC1458A
Authority key identifier: B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa
Signing time:             Wed 03 Apr 2024 18:30:22 +0000
ROA not before:           Wed 03 Apr 2024 18:25:22 +0000
ROA not after:            Wed 02 Apr 2025 18:30:22 +0000
asID:                     53175
IP address blocks:        186.225.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl
                          rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:60:39:72:bc:c7:94:ef:60:48:66:02:3c:5e:42:76:0d:c1:45:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87E403FD04360E1BA519D841853FF5C9E675A23
        Validity
            Not Before: Apr  3 18:25:22 2024 GMT
            Not After : Apr  2 18:30:22 2025 GMT
        Subject: CN=F0724E829A198E0BD7026D1E34247A885470D9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:ed:f4:c7:1a:f3:fe:cc:95:94:d1:87:d3:
                    65:6f:94:76:b5:f6:3f:88:0d:61:7e:7a:a1:ed:da:
                    d8:d3:62:3d:02:36:a1:5a:d0:04:53:a8:04:02:0b:
                    f9:d4:e8:e4:2f:fb:02:c4:17:0e:d7:af:4e:8e:58:
                    f3:25:f3:27:e0:45:3a:37:3f:11:e5:eb:d0:aa:75:
                    dd:c3:d9:eb:a0:46:52:d5:26:91:84:49:5f:df:3a:
                    06:31:e5:4f:e0:e4:48:a6:db:6f:11:53:f0:52:7f:
                    a1:90:bd:18:61:e1:b1:f5:5f:95:6b:b9:58:3f:68:
                    41:1f:3a:2f:92:39:01:e3:25:f1:af:8b:17:d3:12:
                    10:39:33:e5:a2:6b:58:f9:a1:ec:4c:b5:a4:b8:75:
                    4e:da:29:54:36:e6:5c:a5:56:96:a3:58:e8:bc:65:
                    f6:b5:b6:52:72:30:ca:36:eb:3b:bc:f7:ef:5e:26:
                    7a:e5:1f:76:6f:58:b5:f2:14:ab:f0:15:22:f4:ca:
                    85:ef:75:03:27:35:65:93:b5:a5:1e:8c:66:a1:01:
                    38:ca:6c:6b:57:27:f3:d1:d9:37:89:6a:32:8d:a4:
                    b8:cb:88:9e:c7:3c:2a:52:38:8e:81:33:5e:a4:6e:
                    98:80:85:ff:b4:9b:3f:aa:ce:4c:68:4a:ff:9f:5d:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:72:4E:82:9A:19:8E:0B:D7:02:6D:1E:34:24:7A:88:54:70:D9:FB
            X509v3 Authority Key Identifier:
                keyid:B8:7E:40:3F:D0:43:60:E1:BA:51:9D:84:18:53:FF:5C:9E:67:5A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/B87E403FD04360E1BA519D841853FF5C9E675A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B87E403FD04360E1BA519D841853FF5C9E675A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGQsGVrGfg2kqT4kk57HoJF3ZRZY8kpTbxannzgTuCVw/1/3138362e3232352e3232342e302f32302d3234203d3e203533313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:5e:e8:80:fe:89:60:e6:92:17:34:a0:66:71:9d:ce:b7:cc:
         3a:74:36:3f:29:95:81:aa:95:c4:08:d4:87:a7:64:f6:55:12:
         b8:8b:b0:d6:ec:0f:35:7d:27:83:28:1c:98:b9:99:49:00:5d:
         9e:1e:c9:53:bf:4f:65:c8:7e:fa:eb:21:ec:35:c9:0d:7f:57:
         25:54:36:7f:ec:65:14:53:53:53:aa:c2:12:d6:b6:d0:e2:56:
         6a:a1:e1:1d:46:ce:9e:8d:07:73:6d:eb:fd:c4:2f:8b:ca:fd:
         f2:a7:7f:54:5a:ed:a1:72:5d:4b:df:26:82:8f:d3:9a:b9:ae:
         ed:a2:ca:a3:a0:38:7c:c2:52:b3:25:c5:24:83:4e:f3:e3:f6:
         81:2d:71:5a:9c:1f:4f:cf:68:61:48:59:10:78:b2:b7:3f:6f:
         5a:d2:7d:e5:8f:ab:1d:3a:9c:ec:cc:25:9e:c8:57:f6:5a:18:
         2b:e9:61:d2:8d:40:b8:93:e6:90:7d:cd:f9:76:9e:1d:16:ea:
         0c:8c:72:19:da:f3:ed:c2:d3:8e:db:3f:2a:ea:21:c8:cd:39:
         c7:13:2b:8a:ab:98:b9:af:38:ce:cc:9d:80:aa:11:e5:77:f3:
         ec:eb:8a:1a:49:8f:33:1d:11:2c:9c:80:d6:e3:28:43:73:6b:
         c4:3f:2e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org