Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          EE/jGDQkD0IcO1zxZrll+sp0LcYhB5awLth7oqsmJYE=
Subject key identifier:   D5:B8:6B:07:B6:FB:3A:4A:9B:E8:AD:5A:EA:ED:AA:ED:57:C4:31:B9
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       7E5CDB8EDBD461D7EE92949D1D5817808D86E885
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 19:52:02 +0000
ROA not before:           Tue 03 Sep 2024 19:47:02 +0000
ROA not after:            Tue 02 Sep 2025 19:52:02 +0000
asID:                     262828
IP address blocks:        186.251.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5c:db:8e:db:d4:61:d7:ee:92:94:9d:1d:58:17:80:8d:86:e8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 19:47:02 2024 GMT
            Not After : Sep  2 19:52:02 2025 GMT
        Subject: CN=D5B86B07B6FB3A4A9BE8AD5AEAEDAAED57C431B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:39:c6:61:a4:ba:ed:f4:fe:6e:c9:7f:ac:
                    e0:12:ea:a6:40:ff:69:6a:e2:53:4e:55:f2:e5:f4:
                    dd:c0:3c:7d:61:27:44:da:d4:be:d0:69:37:27:4d:
                    9a:6c:49:60:c5:33:4c:14:13:5a:e8:2d:02:c8:32:
                    a7:9a:6f:9c:f9:f8:6b:55:d4:81:21:2f:1c:ce:b5:
                    9e:7d:92:79:85:3c:5f:a1:47:af:25:40:4d:29:8b:
                    5d:02:56:d8:56:9c:e6:07:92:8e:fb:d0:68:ef:3d:
                    ef:95:4a:5b:ec:98:6b:95:68:5f:d4:fa:75:f8:6b:
                    10:e8:33:5d:9e:6b:19:79:fb:66:24:54:a0:f1:5e:
                    00:63:97:b4:d1:68:47:b7:e5:78:8e:4e:01:4e:bd:
                    07:61:05:6e:dd:2f:b1:1e:6d:9b:3e:34:bd:0a:6f:
                    7d:78:13:85:90:b8:1a:22:87:4e:f9:0c:5d:a5:e6:
                    13:61:fc:8b:49:6a:70:bb:72:94:69:d1:8b:a4:05:
                    9d:71:6a:eb:f9:bb:8f:6d:1f:1c:f5:48:c8:58:47:
                    60:5c:f0:6f:3b:c7:f8:b3:d3:60:9f:59:fb:22:27:
                    cb:a1:4c:57:f8:e8:6b:ad:a7:02:e3:d4:fb:32:4f:
                    fd:36:16:b7:ac:c1:aa:b6:e8:47:7f:5d:36:82:d4:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:6B:07:B6:FB:3A:4A:9B:E8:AD:5A:EA:ED:AA:ED:57:C4:31:B9
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130322e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:b6:25:b1:36:79:a0:12:9e:5a:0f:9d:7c:93:7a:86:d1:
         77:91:4b:10:92:d7:92:d7:45:2c:42:ab:43:3a:9c:08:13:1c:
         b1:91:6e:02:65:c2:1b:34:b4:26:3f:3a:84:65:f3:03:cb:96:
         09:2b:1c:e6:42:4c:b5:3a:a2:e6:37:05:26:80:e2:d6:3e:60:
         52:0a:ea:1d:a7:16:8b:93:d5:f1:8b:e5:d4:e8:84:c8:0d:d8:
         8f:30:6f:bf:a4:92:93:3b:2e:43:21:1f:b7:3a:5a:d4:c4:06:
         f9:96:26:1e:d3:1a:e5:17:bd:89:e8:9f:35:ae:1f:0c:f9:f1:
         14:7e:59:7d:98:1a:a3:e7:40:9c:5c:42:9f:79:45:cc:b3:ab:
         1d:80:98:4e:53:3c:67:8d:c3:a1:4a:18:9a:6b:49:c5:dc:01:
         a7:99:a2:1e:40:ec:e7:b2:7e:e9:1e:eb:46:14:c4:3c:54:19:
         a6:73:b9:bf:73:c0:4e:6a:77:d2:32:22:f0:ba:8b:61:25:2b:
         2c:4a:8b:9f:9a:07:eb:f6:59:92:8c:19:a7:b0:da:d0:9c:16:
         6c:b4:76:cd:82:43:45:42:4d:17:67:fe:76:b5:17:08:6d:42:
         d9:54:e9:e3:12:13:ff:83:6b:0a:93:3f:92:38:68:c5:00:09:
         48:6c:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org