Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          nSdTNq0rdT3IcH5GS4CV3Anz22SNXSgjGZ61+lnSoO0=
Subject key identifier:   49:2E:06:85:FC:B2:D3:36:9E:F7:F3:D1:37:4B:9F:1E:35:B5:70:D3
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       5019020CB1C327911B8C097364E23750D776AA8C
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 19:52:23 +0000
ROA not before:           Tue 03 Sep 2024 19:47:23 +0000
ROA not after:            Tue 02 Sep 2025 19:52:23 +0000
asID:                     262828
IP address blocks:        186.251.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:19:02:0c:b1:c3:27:91:1b:8c:09:73:64:e2:37:50:d7:76:aa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 19:47:23 2024 GMT
            Not After : Sep  2 19:52:23 2025 GMT
        Subject: CN=492E0685FCB2D3369EF7F3D1374B9F1E35B570D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:b9:5c:d4:0f:31:7b:01:a3:93:b2:0a:9e:
                    57:a9:29:b6:4d:cb:81:25:38:1f:16:2c:35:27:89:
                    40:f1:fc:32:7d:00:38:56:af:fc:99:8d:fb:67:f6:
                    8f:76:c4:e7:70:c2:77:53:60:10:af:10:a5:23:34:
                    77:24:4a:d4:26:f5:83:75:b6:f7:95:6f:0c:72:0f:
                    69:1a:52:3f:c6:99:61:e6:0e:b7:d1:34:a5:f5:3e:
                    db:51:e9:1e:ba:a9:07:36:46:2d:c3:c5:0f:17:e7:
                    d2:6b:6c:f9:dc:3a:54:e8:a6:d3:85:ac:13:9a:89:
                    ba:f6:74:05:14:76:a2:72:d6:36:e8:76:24:95:4e:
                    4a:7b:7c:fb:00:4d:48:33:dd:eb:bf:d3:4a:31:63:
                    b0:fd:98:91:8d:eb:33:39:9d:59:37:7d:05:b1:79:
                    4a:c8:67:4e:3f:85:b4:0e:f3:b3:87:6a:1b:6c:d7:
                    42:d9:60:50:74:11:10:b9:a8:9e:d8:5c:67:b7:09:
                    24:fc:92:01:bb:f5:be:fa:68:8d:80:d7:5c:e0:be:
                    e0:6c:6f:01:5d:9b:6a:10:d6:5c:83:9f:8b:c5:b3:
                    b8:96:9a:2f:97:e2:90:94:78:4d:c1:f9:4f:4f:a7:
                    c3:2f:7a:50:87:23:03:03:78:94:4c:cc:65:69:b6:
                    fa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:06:85:FC:B2:D3:36:9E:F7:F3:D1:37:4B:9F:1E:35:B5:70:D3
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e3130332e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:8f:d5:09:2b:69:28:3c:2a:f0:43:c5:28:c8:53:42:a5:
         a3:20:28:ac:65:eb:b1:28:4c:2b:c3:2a:ca:22:a9:14:70:41:
         fb:23:7e:d9:4a:72:a9:0a:b1:aa:33:86:ce:05:7b:ab:04:54:
         24:6d:9f:d7:5d:73:d7:75:11:7f:f8:37:56:6c:d8:62:b2:83:
         02:cb:eb:01:3c:37:d0:4b:48:53:16:d1:b5:94:e9:eb:40:49:
         67:8e:1b:1f:18:1b:fb:73:22:e2:43:0a:e0:e0:89:50:4d:24:
         85:6f:8b:71:e6:7b:f4:63:b3:b4:a2:11:8e:d2:de:20:8a:44:
         5a:fd:8a:eb:44:6b:4f:0f:f6:45:dc:bc:66:11:e7:1e:52:f8:
         4c:a1:d5:0e:56:87:dc:35:1e:c1:4f:2c:6c:b5:e0:c9:06:ed:
         7d:f3:46:a8:66:84:d6:ac:04:53:e8:d9:bb:b2:97:03:a4:cd:
         57:8b:14:41:15:c6:68:fe:31:51:a9:ea:4b:1f:b3:9e:a0:c1:
         95:98:df:06:14:06:43:9d:f3:a7:5a:ff:d6:e4:bf:69:3a:c9:
         e0:01:72:ac:aa:02:6c:d4:16:64:71:3e:fe:dd:86:26:43:62:
         25:71:41:00:24:ac:ba:a7:d0:cb:dd:32:74:70:c0:b6:f1:53:
         a2:8a:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org