Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231362e302f32332d3233203d3e203238353737.roa
File:                     3138362e3230382e3231362e302f32332d3233203d3e203238353737.roa (raw, json)
Hash identifier:          7M2386Aa4JMXGgK3xyvEJHkk3HavvLPjJ7yvYA5HTa0=
Subject key identifier:   B8:6C:57:3E:31:51:F3:E6:9F:AE:EF:DD:62:C8:85:E3:02:6A:11:4A
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       759AEC90BCB93AD52D721E48F6E1A6A40A083A9D
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231362e302f32332d3233203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:57:25 +0000
ROA not before:           Tue 30 Jul 2024 18:52:25 +0000
ROA not after:            Tue 29 Jul 2025 18:57:25 +0000
asID:                     28577
IP address blocks:        186.208.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl
                          rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9a:ec:90:bc:b9:3a:d5:2d:72:1e:48:f6:e1:a6:a4:0a:08:3a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:52:25 2024 GMT
            Not After : Jul 29 18:57:25 2025 GMT
        Subject: CN=B86C573E3151F3E69FAEEFDD62C885E3026A114A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:b6:40:c5:c1:13:fd:63:b2:c8:26:f5:6d:
                    e6:33:ec:b2:a9:cf:e2:d8:ca:f0:06:dd:e9:99:d7:
                    1a:56:e2:de:2c:f4:c6:8a:0c:59:04:13:78:25:0b:
                    b2:11:42:04:7d:33:da:7e:40:91:f2:fb:c6:ae:cd:
                    e2:3c:ec:73:60:1d:bb:29:ae:a3:75:0d:30:48:30:
                    03:c0:06:53:25:56:05:1b:23:5c:18:44:50:66:d2:
                    70:2a:13:3a:f6:7d:6c:06:83:3d:ba:22:ea:3e:23:
                    1e:20:d7:a0:d6:08:54:18:30:d0:e2:cc:54:d7:62:
                    8a:f0:c6:ce:20:56:89:22:86:29:62:ff:5a:4d:a8:
                    58:29:28:64:a6:89:8e:38:04:fc:d3:97:08:a1:18:
                    ab:18:97:7e:c5:51:1f:5c:63:c1:65:84:59:33:b1:
                    9c:18:00:39:35:03:2c:ec:d1:58:e4:af:0c:ce:2d:
                    8d:37:35:3e:1f:3f:6a:ed:60:b0:e2:95:b5:23:1c:
                    ef:ca:49:90:4d:76:cb:d2:f9:55:f7:fc:49:2c:af:
                    7e:99:8b:db:97:7a:4d:9d:2d:ae:5e:f7:d6:b8:26:
                    55:1d:f2:32:c8:32:14:76:dd:0d:8b:63:22:f1:84:
                    6e:f4:09:a5:c7:ae:01:61:5b:99:31:80:9b:0f:45:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6C:57:3E:31:51:F3:E6:9F:AE:EF:DD:62:C8:85:E3:02:6A:11:4A
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3231362e302f32332d3233203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:3a:6d:01:8b:e1:bb:20:53:99:03:9b:16:81:cb:4e:64:
         f6:f6:06:f8:70:40:7f:e0:7b:0d:22:3a:1c:61:65:29:43:e5:
         d0:36:52:8b:25:8a:fd:3d:82:f7:8f:c2:b9:f9:ff:5d:8d:07:
         ba:d5:9b:04:ed:fb:b0:c1:18:c8:c7:65:3b:6e:61:1a:38:1f:
         3a:79:d0:e3:d8:9b:9f:2a:fa:7d:37:df:8c:ba:79:80:d9:1f:
         61:e6:a3:bd:3a:ad:bc:68:82:ec:0a:42:b5:3d:4e:7b:35:8e:
         cd:49:4f:cb:a5:d7:72:c2:d3:26:2a:31:bc:17:a6:57:9f:df:
         fd:fe:05:67:09:51:1c:7c:cb:df:12:16:04:e1:36:87:75:98:
         a2:84:e2:d6:62:0d:f1:3d:32:3c:d7:ed:6a:c8:47:d2:a9:25:
         68:c5:8b:d1:65:e4:f0:aa:13:1f:9f:d0:7b:8d:35:4b:da:48:
         d1:73:2f:ad:59:06:d7:4f:cb:d0:d6:45:4b:d0:8f:bc:cd:90:
         06:04:27:5f:a0:7b:fd:aa:96:3a:8a:20:0d:6d:7e:8b:5a:f1:
         db:a6:a9:1a:67:38:1f:a9:ad:a9:78:01:00:bc:91:48:db:c0:
         24:48:8d:b1:05:17:8b:1d:f8:6f:dd:5d:6c:c0:d1:db:41:d6:
         16:8b:91:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:10 2024 by rpki-client on console-fra.rpki-client.org