Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32302d3234203d3e203533313835.roa
File:                     3138362e3232372e38302e302f32302d3234203d3e203533313835.roa (raw, json)
Hash identifier:          /CDruCnuBylS0SzJQ+Qy15Iz3rdGLRoAdpI75GetDhc=
Subject key identifier:   E5:12:EE:94:6A:AC:51:C2:B9:A3:B0:E2:E5:FC:D6:F3:5E:88:55:5A
Certificate issuer:       /CN=FF6BD3054B1935A72736E264B133C39E90D3FB51
Certificate serial:       5484455C56C081558F52F14291C780C59E79409B
Authority key identifier: FF:6B:D3:05:4B:19:35:A7:27:36:E2:64:B1:33:C3:9E:90:D3:FB:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF6BD3054B1935A72736E264B133C39E90D3FB51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32302d3234203d3e203533313835.roa
Signing time:             Wed 17 Jul 2024 00:28:36 +0000
ROA not before:           Wed 17 Jul 2024 00:23:36 +0000
ROA not after:            Wed 16 Jul 2025 00:28:36 +0000
asID:                     53185
IP address blocks:        186.227.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.crl
                          rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF6BD3054B1935A72736E264B133C39E90D3FB51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:45:5c:56:c0:81:55:8f:52:f1:42:91:c7:80:c5:9e:79:40:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF6BD3054B1935A72736E264B133C39E90D3FB51
        Validity
            Not Before: Jul 17 00:23:36 2024 GMT
            Not After : Jul 16 00:28:36 2025 GMT
        Subject: CN=E512EE946AAC51C2B9A3B0E2E5FCD6F35E88555A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:ba:8e:64:9d:fa:b3:49:64:c3:44:e7:64:
                    28:a7:95:f4:b0:0a:35:e2:7c:75:19:8a:2d:a8:1e:
                    c7:36:09:91:81:4a:f9:ea:a3:58:52:04:06:1b:7d:
                    ac:18:58:cc:9e:e3:8b:ce:2a:e2:39:96:38:95:5f:
                    fa:23:79:7a:b8:2d:5f:07:4d:a4:fa:00:cf:0b:64:
                    54:1a:94:05:60:7b:d2:2d:94:73:26:d8:53:72:1e:
                    7b:e4:bd:fc:10:f6:62:d8:f9:c4:14:b5:b7:ed:51:
                    25:06:8d:8f:7c:a1:1a:33:76:ca:0b:f4:e3:8e:62:
                    81:aa:cb:0a:99:15:09:8f:be:68:38:e5:ad:38:b6:
                    d7:40:be:9f:9b:92:b0:97:dc:5f:f1:d4:14:a2:8b:
                    18:e6:75:55:cc:b1:93:c6:54:f4:a3:e4:86:90:15:
                    bd:5d:b6:27:62:f4:5e:5c:59:25:d3:1d:a7:54:50:
                    3c:94:0f:13:55:3a:dd:9f:c8:04:b0:6d:cc:9f:68:
                    9e:71:46:f4:be:d4:9e:ba:5c:60:e0:51:55:ac:6c:
                    15:aa:c9:60:01:3b:21:d3:70:7c:e8:84:45:8a:80:
                    07:6a:c7:de:84:49:26:e4:ad:cc:63:bf:5e:00:ef:
                    1c:0c:cb:f6:4b:e9:c4:ad:0a:03:9e:87:27:99:0f:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:12:EE:94:6A:AC:51:C2:B9:A3:B0:E2:E5:FC:D6:F3:5E:88:55:5A
            X509v3 Authority Key Identifier:
                keyid:FF:6B:D3:05:4B:19:35:A7:27:36:E2:64:B1:33:C3:9E:90:D3:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF6BD3054B1935A72736E264B133C39E90D3FB51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38302e302f32302d3234203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:b4:23:88:ea:fa:44:11:82:c0:3a:4d:42:05:34:9e:14:
         2a:a3:f8:32:1a:5e:2f:cc:49:d0:c4:70:94:a5:85:a1:f4:3f:
         10:8d:e6:0c:19:9e:61:96:ef:ef:79:6e:69:bb:eb:89:50:ca:
         07:fe:66:a7:86:d0:75:77:90:cc:eb:be:9e:75:77:b0:dd:4a:
         be:02:d8:75:d3:e9:4b:d7:ac:b7:39:3f:79:d0:fd:01:2e:e5:
         e4:31:07:77:51:8f:a4:b1:79:c4:d8:f7:52:a3:df:d0:f4:0e:
         19:d0:05:c5:bb:af:4e:0c:15:6f:0d:94:ff:7b:2f:8c:1b:2c:
         a8:5e:7e:15:da:a2:1c:0a:bc:fd:71:f9:df:b0:6d:5c:78:73:
         10:59:ba:e5:bd:b8:e2:4a:bc:e6:16:b5:21:fa:9a:2b:74:9c:
         3d:ec:d7:66:dd:73:97:82:28:63:6a:9d:c4:44:ce:32:bd:3d:
         81:7d:77:19:8e:b2:00:71:b2:4f:f9:68:f6:9a:10:17:16:0f:
         12:b9:1d:8e:4e:3c:87:96:56:85:e1:fb:cb:f7:be:ed:8b:40:
         b1:58:ee:bb:80:77:36:ad:4c:c0:38:26:cb:48:af:ed:47:f7:
         84:f4:1a:23:0c:e6:91:c5:b6:81:24:03:23:10:1a:4a:cf:f6:
         b5:5f:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org