Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39372e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e39372e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          Qi9DOtt7NbrNT6O17AKvMZIN835QF67K+g6eCncf9wU=
Subject key identifier:   64:48:4F:41:98:3D:1D:FD:F3:2F:26:64:2D:2F:38:9A:49:D7:B4:D6
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       148275A8744C7D81A195E6E10E6344DAE34C2593
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39372e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:12:10 +0000
ROA not before:           Tue 03 Sep 2024 20:07:10 +0000
ROA not after:            Tue 02 Sep 2025 20:12:10 +0000
asID:                     262828
IP address blocks:        186.251.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:75:a8:74:4c:7d:81:a1:95:e6:e1:0e:63:44:da:e3:4c:25:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:07:10 2024 GMT
            Not After : Sep  2 20:12:10 2025 GMT
        Subject: CN=64484F41983D1DFDF32F26642D2F389A49D7B4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:fd:e2:59:f1:42:dd:6e:b1:bc:b6:c0:38:
                    a9:b4:a2:61:34:30:d6:b7:39:c0:96:b8:ff:18:86:
                    9c:20:f3:35:15:99:c3:96:2f:7d:9f:52:9f:7c:b5:
                    67:07:75:4a:e7:4f:a6:fd:0b:d2:ea:33:b4:b7:12:
                    53:1e:5f:4f:8b:5d:f0:ae:96:d2:f5:9a:b6:37:4d:
                    7c:98:17:cb:31:a4:96:84:67:a1:62:af:6e:02:29:
                    76:6f:fe:93:b2:a7:a1:3b:a3:f5:65:83:93:3a:51:
                    4b:5e:4a:24:8c:51:91:9d:e2:53:bd:43:01:b7:f6:
                    df:37:6d:28:56:43:55:57:13:1b:b3:9c:aa:6a:99:
                    14:74:9f:01:29:ee:d2:15:c7:da:43:e2:ff:e6:43:
                    7d:55:f6:2d:af:d6:78:b6:4f:cd:23:db:a6:5f:5b:
                    19:73:da:a6:57:a5:d7:6b:94:dd:b2:61:f9:bc:ce:
                    db:91:23:08:eb:0b:50:5c:c0:63:f2:eb:e2:1f:3b:
                    57:c0:1f:61:67:d5:38:31:6f:52:27:b8:6d:ad:e4:
                    50:62:67:ea:80:a7:87:f3:de:f6:35:a2:93:79:27:
                    56:66:20:ec:67:d0:b2:d2:28:91:b2:f3:b7:b1:9f:
                    5c:ad:84:74:1d:59:4c:fb:5c:dc:75:8b:34:98:f3:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:4F:41:98:3D:1D:FD:F3:2F:26:64:2D:2F:38:9A:49:D7:B4:D6
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39372e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:93:9f:24:2a:41:5a:13:e8:ff:03:14:03:94:d5:eb:6a:80:
         ca:bf:b4:7c:8b:5d:9f:cb:3e:9e:84:e4:4b:c9:b9:3a:32:0a:
         16:3f:22:09:15:19:4c:a2:45:74:55:09:65:43:e6:64:56:9c:
         bf:e8:39:6d:84:16:ee:62:0b:f7:bd:70:bc:87:a3:13:0f:ad:
         8b:ee:40:ae:56:52:25:ae:f5:5a:7d:94:71:79:9c:8c:2f:5f:
         d5:0c:96:c0:90:d2:d6:a0:d1:7a:73:22:d0:58:0e:59:a9:ee:
         15:c5:bc:0b:a4:68:50:c1:d6:0b:fa:f8:7c:bd:69:cc:82:da:
         9a:66:77:b9:65:2a:7f:90:07:cf:a8:2a:ea:76:7a:6b:f0:e3:
         71:67:8e:aa:c5:6a:4a:9f:15:06:c0:e6:ef:15:a1:b4:af:eb:
         6c:02:aa:a6:35:95:07:34:f3:e2:4f:3a:29:65:ae:dd:78:c6:
         af:ce:bd:e2:6d:da:98:d0:e7:d6:e3:a0:ec:68:74:31:11:c0:
         18:2f:6c:d6:6e:ea:47:b7:df:65:e2:15:6c:e9:fc:63:c3:a7:
         1b:13:11:cb:86:90:4c:c1:34:0d:11:fe:29:d0:f6:22:0b:68:
         d1:f0:7a:32:c0:4e:c7:27:08:cd:be:a5:ab:80:18:25:de:d1:
         a2:cb:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org