Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa
File:                     3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa (raw, json)
Hash identifier:          AJsOfr5wHT9YKSPMXmdoewYRPP7AYppI/d0nQRjAylg=
Subject key identifier:   51:1F:A1:D1:6B:CF:FB:28:8C:FD:A6:9B:F4:25:BE:22:06:79:85:CD
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       6DB14B175EE7AB34D22ED616B89BC154CEE8ECD9
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa
Signing time:             Tue 10 Sep 2024 12:10:22 +0000
ROA not before:           Tue 10 Sep 2024 12:05:22 +0000
ROA not after:            Tue 09 Sep 2025 12:10:22 +0000
asID:                     262952
IP address blocks:        186.233.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b1:4b:17:5e:e7:ab:34:d2:2e:d6:16:b8:9b:c1:54:ce:e8:ec:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Sep 10 12:05:22 2024 GMT
            Not After : Sep  9 12:10:22 2025 GMT
        Subject: CN=511FA1D16BCFFB288CFDA69BF425BE22067985CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:2d:bc:80:58:a4:5a:50:61:11:c2:f2:27:
                    9e:84:d9:4b:fb:fa:b5:57:ad:8a:2c:0f:dd:79:4e:
                    5b:be:26:30:07:17:32:a6:d8:ee:8e:dc:95:d0:5c:
                    75:3f:be:64:b1:a5:e8:07:5f:89:84:b7:0b:29:07:
                    03:9e:d4:d3:f8:75:00:52:3e:3f:2e:d1:13:53:bf:
                    09:c6:21:30:d3:c7:83:99:af:b9:50:a4:84:3e:95:
                    9f:90:83:45:9f:43:38:0d:48:e4:a6:d4:69:65:f0:
                    49:5c:d8:b6:57:f0:b4:ae:0d:dd:01:d0:c2:70:1d:
                    6d:36:ea:69:e9:aa:76:87:5d:bb:ef:77:04:99:fc:
                    0b:d1:f2:7c:b6:e0:f2:5f:49:49:8f:45:ca:3e:b3:
                    57:68:c0:d7:c0:05:c0:56:ca:f0:55:03:cc:f4:e0:
                    3e:ac:6f:a1:12:37:bc:e6:95:a1:31:f5:31:8e:16:
                    24:ca:7c:f8:f1:c4:98:25:9b:d2:65:c3:1f:35:28:
                    60:62:a7:5d:70:ff:64:74:9c:49:1e:4f:4b:a7:9f:
                    26:bc:22:1e:75:4f:87:9a:46:33:96:ec:2f:72:a0:
                    c5:6e:c7:a3:73:3a:1d:e8:a0:b7:12:d1:5a:93:a5:
                    87:01:41:3b:14:72:a7:68:b5:90:0e:8a:fb:61:3f:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:A1:D1:6B:CF:FB:28:8C:FD:A6:9B:F4:25:BE:22:06:79:85:CD
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138362e3233332e3137322e302f32322d3332203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:41:8a:5f:9c:bf:64:e9:d1:ee:a7:13:76:5e:c7:a2:5a:eb:
         30:fe:82:c9:04:6c:05:04:e5:23:36:4d:0f:d1:ff:0e:ac:2e:
         23:e0:bf:34:4f:50:51:80:9c:de:c6:fe:ad:90:41:69:cb:72:
         33:30:90:19:d6:1b:54:23:ac:ab:1d:be:53:ea:51:b3:d8:e4:
         cb:07:0d:5f:5f:c5:8a:f7:a2:f8:f6:72:1e:1c:9d:09:b5:e1:
         9b:32:07:e6:d6:19:5b:9c:be:4b:cc:42:6d:ea:c4:c6:2f:79:
         5e:fb:e7:6c:56:7d:e2:f9:96:9e:63:83:6f:2c:3e:e6:71:62:
         59:65:92:50:6e:22:57:b0:2e:b9:df:47:3e:5f:b4:f1:1b:9f:
         cf:bd:e9:5a:9d:a3:b7:1d:e0:4a:06:7e:29:0d:1f:6d:4b:05:
         af:0f:5b:39:1f:af:5a:76:09:9f:93:94:7a:45:92:77:aa:57:
         aa:7c:f3:8b:4f:38:49:e2:53:cb:35:97:fb:3e:61:2a:22:48:
         f0:8b:ab:b8:d1:c5:70:cd:aa:77:03:74:35:89:fe:f2:37:65:
         a9:08:bd:48:37:26:c0:57:9f:35:52:da:5e:81:80:7c:48:7f:
         c9:6a:04:3a:58:10:5e:63:28:e2:cc:ba:95:05:70:fd:12:67:
         86:d0:b8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:57 2024 by rpki-client on console-fra.rpki-client.org