Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3232302e302f32342d3234203d3e203238353737.roa
File:                     3138362e3230382e3232302e302f32342d3234203d3e203238353737.roa (raw, json)
Hash identifier:          SApOwNQR7B8+Sgh7xFnD0kFrvy0c5GKGEcNi5lNbcDE=
Subject key identifier:   27:38:72:D3:04:1F:A8:48:1F:4A:B2:DE:69:41:B4:3E:5E:80:45:E3
Certificate issuer:       /CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
Certificate serial:       30FDEFD09C66B2D9718CF19AF62DE504D64FE326
Authority key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3232302e302f32342d3234203d3e203238353737.roa
Signing time:             Tue 30 Jul 2024 18:57:17 +0000
ROA not before:           Tue 30 Jul 2024 18:52:17 +0000
ROA not after:            Tue 29 Jul 2025 18:57:17 +0000
asID:                     28577
IP address blocks:        186.208.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl
                          rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fd:ef:d0:9c:66:b2:d9:71:8c:f1:9a:f6:2d:e5:04:d6:4f:e3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191
        Validity
            Not Before: Jul 30 18:52:17 2024 GMT
            Not After : Jul 29 18:57:17 2025 GMT
        Subject: CN=273872D3041FA8481F4AB2DE6941B43E5E8045E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:8f:5a:93:33:51:35:f7:3e:83:f3:48:05:
                    23:7d:18:b2:e2:e5:ae:fc:52:c7:61:77:bc:96:d3:
                    0b:53:a9:49:71:37:27:d9:0e:00:50:f6:6c:d3:b8:
                    67:d0:7c:b2:9e:89:90:99:c2:73:02:2b:f3:f1:7e:
                    a1:6d:8e:ca:0c:81:cf:09:32:36:95:61:4a:14:13:
                    12:42:d2:51:ec:a7:3c:05:96:f0:18:dd:36:0f:7c:
                    56:38:05:62:72:53:76:2d:83:68:e3:80:ad:57:db:
                    85:7b:b8:ca:e2:30:b1:02:f6:73:8e:56:95:fa:49:
                    5f:47:3d:eb:37:08:e8:9d:42:a2:74:cc:90:7b:c9:
                    4f:d7:7f:19:c9:4e:85:e8:aa:61:07:c6:88:19:c8:
                    14:e3:b2:09:41:a5:8c:51:a1:41:27:48:bb:a1:d5:
                    1d:8f:df:0a:c2:c3:da:90:ce:46:23:64:6e:c5:1e:
                    f7:40:0f:4b:04:b0:e2:1a:79:47:74:63:75:b0:74:
                    1e:ea:68:f9:4e:9a:7f:c3:44:a0:8b:d4:32:74:c2:
                    61:ea:b4:4d:13:08:cf:ea:80:db:44:94:39:34:5c:
                    23:cd:a1:95:b7:48:07:45:cf:6a:b6:44:7d:e7:46:
                    9d:1b:f4:62:2a:d6:e8:64:19:8d:6f:8c:e5:96:b4:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:38:72:D3:04:1F:A8:48:1F:4A:B2:DE:69:41:B4:3E:5E:80:45:E3
            X509v3 Authority Key Identifier:
                keyid:8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/3138362e3230382e3232302e302f32342d3234203d3e203238353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:06:1a:58:41:39:cc:75:81:3f:7f:6c:db:2f:c1:f2:09:45:
         31:3b:ae:7f:62:1c:90:97:c2:e3:54:87:d7:c0:ad:1a:a7:10:
         5c:21:03:b9:f6:83:fa:2c:e5:84:30:a4:67:36:2b:20:48:fd:
         dd:0a:89:f9:58:d7:92:ee:6f:49:bf:c6:6d:01:cd:6d:e3:96:
         94:b3:96:76:a3:02:8e:e9:86:b7:b3:0a:91:f4:8d:61:ad:fd:
         5b:6c:84:4f:fa:b4:a6:46:55:c8:fa:74:50:46:4b:b6:28:ff:
         e1:dd:4c:3b:a2:83:ee:22:0b:7c:f8:4a:17:a7:72:35:14:56:
         ea:ac:25:f3:9c:7c:86:35:ea:41:71:0e:82:37:46:41:77:21:
         43:4e:8f:82:ce:24:8f:51:ca:52:c8:df:16:84:41:70:23:8b:
         ab:57:ec:24:93:94:1a:e3:72:cd:cd:b2:92:11:83:c7:02:53:
         f2:b4:77:82:1a:19:d0:7f:85:4c:c7:e0:5d:f8:7d:e2:49:4a:
         cf:02:16:c5:d8:20:e6:20:18:93:08:51:95:16:a9:6c:61:ca:
         f2:72:7b:7e:4a:7f:da:98:4f:2a:c8:b8:d4:38:38:cd:06:d6:
         2c:f3:8f:f1:55:4c:9b:8a:fe:e9:22:4f:ff:90:8a:71:8c:ff:
         ec:28:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:30:18 2024 by rpki-client on console-ams.rpki-client.org