Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231362e302f32322d3232203d3e203238353737.roa
File:                     3138362e3230382e3231362e302f32322d3232203d3e203238353737.roa (raw, json)
Hash identifier:          5cpyihHvbethf7/efyPi6UhQF+aLjbk/+1b0pc0xAiQ=
Subject key identifier:   96:D6:52:2C:47:0C:3B:42:38:73:F7:C9:FE:14:34:B5:F1:9C:D2:ED
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       3AE1A61558FCCDC3F30E258D4F9FC8AB4B68EDA8
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231362e302f32322d3232203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:57:27 +0000
ROA not before:           Tue 30 Jul 2024 18:52:27 +0000
ROA not after:            Tue 29 Jul 2025 18:57:27 +0000
asID:                     28577
IP address blocks:        186.208.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl
                          rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:a6:15:58:fc:cd:c3:f3:0e:25:8d:4f:9f:c8:ab:4b:68:ed:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:52:27 2024 GMT
            Not After : Jul 29 18:57:27 2025 GMT
        Subject: CN=96D6522C470C3B423873F7C9FE1434B5F19CD2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:e0:2f:88:29:d2:98:f2:de:d1:5c:4f:00:
                    bb:b8:de:0b:65:e5:32:d0:73:1c:39:4e:a3:62:68:
                    7a:3a:9c:2b:e7:72:c3:f0:b6:d6:ac:9d:7e:5c:83:
                    a4:08:97:61:4c:fa:6e:2a:64:b4:d9:c7:70:b7:fb:
                    0b:a2:42:c6:12:64:e8:bd:27:df:6b:2a:61:2d:2d:
                    17:d9:35:5c:07:d7:b9:32:72:a6:8b:f6:9c:8f:29:
                    83:0a:19:a4:f4:b0:30:a4:c9:1f:59:cc:87:2f:e6:
                    3a:d6:8c:e9:dd:03:2c:44:f7:4f:b3:76:fc:cb:73:
                    ae:7f:3c:d5:ff:fe:9b:0f:c9:d7:7d:68:8f:67:af:
                    e5:70:e5:cc:61:cc:9d:e9:15:08:b2:d4:65:8d:0b:
                    48:26:69:aa:07:ee:fd:7e:51:23:08:37:c2:8b:be:
                    68:8b:f7:b5:d4:29:ba:09:64:db:7a:09:81:49:b3:
                    85:6a:2e:54:3d:56:ad:32:01:c8:67:b5:6d:c3:63:
                    42:df:08:f4:56:af:e7:bd:3e:6a:5e:67:12:b1:98:
                    d3:7c:8f:ef:83:19:ed:99:25:2f:16:4b:0e:28:3c:
                    2a:02:90:a8:ef:7a:e0:01:79:f4:64:fb:08:69:ab:
                    f2:6b:96:51:0e:28:cd:29:65:45:a8:0d:73:5a:a0:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:52:2C:47:0C:3B:42:38:73:F7:C9:FE:14:34:B5:F1:9C:D2:ED
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231362e302f32322d3232203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:93:78:93:21:1b:19:fc:58:c8:3d:7e:6f:20:1b:23:5f:0a:
         09:1a:45:eb:07:3d:65:85:04:bf:55:5c:28:17:c4:98:74:4c:
         4c:24:5b:ae:d0:f0:49:8d:47:23:ba:98:ab:b2:8a:bb:41:1d:
         f9:8d:cb:40:57:04:d6:df:78:b5:5d:4d:ca:e6:27:af:06:3f:
         5f:ea:5a:63:85:6f:c6:c4:08:11:cc:59:c9:32:09:3b:bc:0d:
         92:cf:52:be:06:64:91:32:73:23:0f:cf:5f:58:3c:d7:57:a5:
         d4:0b:3b:63:01:d7:51:9e:b5:17:6c:c5:e1:d0:07:ba:b7:1c:
         08:ba:20:53:75:1d:af:f1:e3:6f:01:a2:f8:3c:3d:69:4e:f3:
         0b:8d:e4:46:97:d2:ab:80:9f:91:b5:a7:c4:1f:91:b6:61:64:
         6d:93:88:d9:ac:98:ff:7a:3f:03:17:7d:36:78:e3:c0:43:6b:
         60:a2:f0:5b:67:c6:70:60:37:dd:84:d6:a7:19:35:89:fa:dc:
         b1:e5:18:2f:7b:57:31:da:67:9d:b6:f6:b0:a3:74:d0:fa:31:
         3b:4e:8a:a3:22:db:cc:97:f6:0c:85:01:36:7e:38:4a:a3:b6:
         82:94:81:96:08:e5:56:2a:a0:b3:36:a1:fd:24:33:30:5f:de:
         27:30:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:05 2024 by rpki-client on console-ams.rpki-client.org