Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa (raw, json)
Hash identifier:          JTc/+kBt7MCKhVBU5NBaltqetFXmOTc/uMiiCjOTMq4=
Subject key identifier:   AF:F2:B9:3F:40:1C:DE:82:4E:FC:5F:EB:09:8A:5A:31:13:4D:C2:1A
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       7125636D6CAF07A4DCCD9F083D55FBB7E97E0441
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 19:48:31 +0000
ROA not before:           Tue 03 Sep 2024 19:43:31 +0000
ROA not after:            Tue 02 Sep 2025 19:48:31 +0000
asID:                     262828
IP address blocks:        186.251.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:25:63:6d:6c:af:07:a4:dc:cd:9f:08:3d:55:fb:b7:e9:7e:04:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 19:43:31 2024 GMT
            Not After : Sep  2 19:48:31 2025 GMT
        Subject: CN=AFF2B93F401CDE824EFC5FEB098A5A31134DC21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:09:81:e7:04:4e:30:9f:16:5d:89:18:09:
                    4c:f4:51:27:96:c9:b6:02:82:52:70:4a:3d:9d:73:
                    30:3a:ba:61:06:ed:a1:f1:0b:9f:41:0e:d0:2d:e1:
                    ef:f7:10:72:19:28:52:e2:a2:47:7a:0a:df:05:47:
                    7f:cd:96:3a:84:af:4c:86:7c:28:7f:3e:17:2a:f7:
                    68:e4:6d:f3:6b:33:dc:c1:56:b3:6f:be:d4:02:8f:
                    ed:c3:c8:20:bf:0b:64:92:cf:69:10:e8:17:3d:e5:
                    f0:71:29:02:1f:cb:e1:a7:bd:a3:76:f7:3a:e9:2b:
                    24:71:42:66:6b:fb:19:95:cd:0a:3e:ad:d0:b5:29:
                    0e:7f:22:76:b5:bd:5f:68:06:6f:5c:ee:5a:09:cc:
                    08:92:ef:5e:18:a2:fa:db:5f:dd:a4:58:fa:6f:a1:
                    78:e4:52:26:78:74:bc:44:3c:55:18:05:09:8b:fc:
                    c3:c4:a7:ab:21:46:c9:4b:3e:ff:cd:f8:71:d0:a4:
                    62:b3:c3:a7:ae:db:6d:f2:8f:d7:60:9f:15:6e:c5:
                    6d:ca:75:1a:ac:ab:e2:30:b2:76:03:bd:1e:48:9e:
                    80:e0:ed:18:be:1e:ac:04:2f:15:1b:21:7a:c8:ba:
                    7b:e1:9f:84:a6:0a:b5:ea:84:f4:6d:fb:d0:54:db:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F2:B9:3F:40:1C:DE:82:4E:FC:5F:EB:09:8A:5A:31:13:4D:C2:1A
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32312d3231203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:c3:09:2d:26:b8:22:04:46:e6:3a:c7:98:b0:ae:35:27:
         9c:6b:1b:39:45:02:a1:02:a3:2d:34:75:b5:9d:19:09:94:5b:
         ad:52:c0:61:07:41:d0:a0:df:2e:35:58:d9:b2:2d:4a:2a:e5:
         37:1c:cc:6a:3b:a6:c9:5b:f6:ca:17:bc:1b:5b:d5:b8:89:a0:
         e4:b1:e9:7e:78:99:41:d3:d0:fb:24:d9:64:82:69:f5:19:76:
         bc:89:bc:b0:fa:fd:71:d9:80:00:8c:02:f0:39:e7:a9:7d:90:
         66:74:49:b8:6e:f1:11:85:f1:62:a4:a5:8d:97:19:25:36:e2:
         36:a8:38:06:e9:ea:8d:2a:7c:bb:d0:d9:2c:ff:4a:d5:e8:2f:
         e6:8b:e9:7a:3c:5c:f4:bc:61:dc:a1:ea:fd:5e:fb:2d:a2:a3:
         82:39:4d:2a:fd:d7:ab:b8:a2:72:ad:8b:2e:fa:d8:7e:bc:f2:
         a6:ca:9f:8d:84:37:f6:1a:12:52:de:b6:8f:7b:c2:41:93:0d:
         7f:dd:b2:ad:64:26:af:aa:9e:ba:d4:72:23:aa:36:4a:be:80:
         d7:b8:6f:f1:16:89:fd:4e:b0:ec:59:95:50:46:fa:48:d3:fd:
         54:9c:4e:c4:b7:56:a5:2c:a3:b5:71:2b:2a:75:d5:f3:50:17:
         70:35:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org