Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32332d3233203d3e20323632383238.roa
File:                     3138362e3235312e3130302e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          Degopt6F20fp/1zd+2dKBuC2EKR4f14IuJqJcZ1DBdE=
Subject key identifier:   B4:4B:F1:BF:7A:A1:FB:86:ED:2B:D4:35:BF:59:BA:3C:7B:71:73:38
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       586D72AEF1CF3C85FE579B1BD6B40086ED62FF50
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:11:13 +0000
ROA not before:           Tue 03 Sep 2024 20:06:13 +0000
ROA not after:            Tue 02 Sep 2025 20:11:13 +0000
asID:                     262828
IP address blocks:        186.251.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6d:72:ae:f1:cf:3c:85:fe:57:9b:1b:d6:b4:00:86:ed:62:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:06:13 2024 GMT
            Not After : Sep  2 20:11:13 2025 GMT
        Subject: CN=B44BF1BF7AA1FB86ED2BD435BF59BA3C7B717338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:91:e3:4f:fd:a4:67:d0:40:9c:41:ac:d8:a6:
                    66:89:c9:56:7f:99:78:1c:a3:6b:6f:c7:79:cd:7f:
                    8d:1f:9b:5a:15:c1:b9:64:a4:88:b9:ea:06:b6:0e:
                    ba:3a:54:9f:e8:4e:06:42:b8:02:10:99:a1:0d:da:
                    ed:7e:d1:5d:3a:ff:54:d8:ae:b5:e2:c2:2d:84:9a:
                    32:91:fc:69:e4:9e:47:84:b4:c5:b0:b7:fc:49:9f:
                    79:aa:8e:d0:5b:2c:fd:d2:8a:ca:55:65:c2:5f:c6:
                    4c:db:58:ed:d8:a7:d7:b4:2a:e1:18:70:b0:f7:02:
                    44:9e:b5:c6:ba:e3:59:80:73:91:1d:c8:84:08:6d:
                    30:b8:3f:05:76:cb:e4:28:bc:47:b2:04:ac:b3:f7:
                    54:3d:f3:cb:6d:ba:13:2a:26:f4:97:9f:97:1e:08:
                    79:88:9f:85:6f:4c:98:82:e6:c4:c4:04:bd:1b:c5:
                    de:49:c3:92:d4:e7:db:33:8e:2b:a2:45:0a:4d:f0:
                    a7:9f:a3:7f:5a:5f:a1:ed:60:8f:d2:05:96:e5:37:
                    7f:b9:35:d2:a0:77:a0:07:10:19:eb:97:52:bd:56:
                    3a:72:09:60:92:c8:f8:a9:8a:03:08:84:ee:0e:2b:
                    06:9a:03:a6:b0:3b:e5:5c:7e:82:31:19:ee:60:07:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:F1:BF:7A:A1:FB:86:ED:2B:D4:35:BF:59:BA:3C:7B:71:73:38
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130302e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:2d:b0:4b:5f:f9:e2:ad:5c:51:78:c2:26:44:81:b1:3d:64:
         b4:67:60:a1:ac:23:5a:d7:95:76:c0:57:9c:11:98:2d:b6:16:
         f0:40:91:57:41:ca:ed:fe:d4:d1:e2:34:ac:73:b9:ff:ed:1b:
         b8:e2:05:62:42:0f:91:19:c6:21:e8:5e:c0:86:6a:e6:0f:8d:
         22:2f:39:5c:9e:d5:fe:6f:80:42:3a:b7:46:2c:3c:b1:f4:4b:
         15:8c:f3:80:47:e7:a3:8c:0e:1b:5f:69:07:26:ad:c9:6f:27:
         d9:81:5a:2d:f0:f6:23:ab:7c:eb:d8:c2:2e:50:f7:da:7f:dc:
         1a:3a:bf:c8:1d:c5:0c:05:7b:5d:bc:84:ac:c8:dd:e4:d6:78:
         0c:9c:a8:d0:31:27:b7:8b:e4:7d:1e:bd:76:c8:b0:d9:51:92:
         19:37:ea:75:c0:e3:ca:2a:e5:d4:60:10:5f:3e:3d:dd:c1:36:
         c5:b1:95:ad:7e:ff:d9:37:ed:35:d6:3b:ec:de:63:01:97:fb:
         40:fc:38:17:41:68:13:04:8d:d3:bb:7d:46:7c:4d:f9:67:42:
         5b:84:58:35:ec:be:ba:82:07:28:26:98:2e:4e:0a:03:1f:12:
         ba:81:8a:a0:73:fb:b5:84:77:28:d2:0a:de:2e:a9:97:d3:2c:
         b0:2b:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org