Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
File:                     3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa (raw, json)
Hash identifier:          EaBefI+Do4T+6NH96URD3nxuVkb5PnfzdWAYE+dEXVk=
Subject key identifier:   53:17:55:DF:DF:23:C0:F4:52:B0:C8:FD:61:57:5E:A3:5F:E4:F2:33
Certificate issuer:       /CN=EAF1B6BE69B930CE4492B01C927F4127684D515A
Certificate serial:       7AF3080A89F2EBA58FF2DD04E5A3C04B87C3B879
Authority key identifier: EA:F1:B6:BE:69:B9:30:CE:44:92:B0:1C:92:7F:41:27:68:4D:51:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAF1B6BE69B930CE4492B01C927F4127684D515A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
Signing time:             Wed 15 May 2024 12:57:02 +0000
ROA not before:           Wed 15 May 2024 12:52:02 +0000
ROA not after:            Wed 14 May 2025 12:57:02 +0000
asID:                     263089
IP address blocks:        186.250.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/EAF1B6BE69B930CE4492B01C927F4127684D515A.crl
                          rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/EAF1B6BE69B930CE4492B01C927F4127684D515A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAF1B6BE69B930CE4492B01C927F4127684D515A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f3:08:0a:89:f2:eb:a5:8f:f2:dd:04:e5:a3:c0:4b:87:c3:b8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAF1B6BE69B930CE4492B01C927F4127684D515A
        Validity
            Not Before: May 15 12:52:02 2024 GMT
            Not After : May 14 12:57:02 2025 GMT
        Subject: CN=531755DFDF23C0F452B0C8FD61575EA35FE4F233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:c1:4e:4c:71:c8:c7:66:96:e7:a0:c0:e3:
                    34:fd:ca:ea:ea:2b:b5:c7:dc:55:37:4e:9d:a1:97:
                    cc:3d:ef:02:71:09:67:31:2e:33:58:27:af:3c:b4:
                    42:9d:5e:b9:5d:3c:23:45:fe:e4:15:cf:c7:e6:35:
                    a7:35:32:21:86:cb:21:ab:ce:dc:84:85:30:3e:7c:
                    4c:f7:97:04:41:87:2d:51:10:7d:5d:9f:19:6f:15:
                    a0:2a:4c:a0:4f:dc:31:e8:e6:97:7e:4b:48:26:2d:
                    60:4c:60:e2:35:b2:90:9c:94:bd:2c:e5:ca:22:0b:
                    77:0f:26:23:46:0a:78:47:bd:d8:46:00:f7:58:92:
                    65:44:dd:20:2a:21:12:41:03:2f:26:d2:60:58:fb:
                    b1:74:42:32:a6:49:9b:65:0e:89:dc:2e:1e:2b:fb:
                    70:3a:8b:3a:60:02:94:15:13:3c:f3:75:c4:c7:d3:
                    76:5b:c6:d7:06:db:d7:50:14:30:b3:7f:99:f2:c4:
                    8e:8b:c4:5f:84:be:42:e3:67:08:58:4a:72:fd:e3:
                    19:35:47:7a:75:3e:1e:1a:93:7e:45:76:67:bc:ff:
                    7b:dc:10:44:e5:dc:9b:0e:23:1e:eb:1b:1f:68:ee:
                    ff:9e:c0:4b:f8:df:9e:71:12:87:1b:91:48:06:05:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:55:DF:DF:23:C0:F4:52:B0:C8:FD:61:57:5E:A3:5F:E4:F2:33
            X509v3 Authority Key Identifier:
                keyid:EA:F1:B6:BE:69:B9:30:CE:44:92:B0:1C:92:7F:41:27:68:4D:51:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/EAF1B6BE69B930CE4492B01C927F4127684D515A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAF1B6BE69B930CE4492B01C927F4127684D515A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:92:49:b8:f2:6e:ca:6f:93:36:61:0a:f6:80:37:ff:b4:74:
         48:32:66:14:c4:96:c1:f8:d0:83:b8:de:72:71:f1:dc:c8:91:
         8b:c2:84:7b:08:a9:03:d5:3b:5d:e3:b8:80:26:14:5b:c5:54:
         50:3c:3f:4d:87:a4:9a:fc:41:f9:c4:c4:4b:17:4e:0f:75:7e:
         f9:18:fa:fb:11:fd:0d:8b:a0:05:8f:9c:48:03:cb:db:5e:61:
         73:df:fd:1e:e4:a7:c4:a1:64:c8:bb:29:a3:1c:b8:03:9b:50:
         65:ce:f3:7f:53:0c:1b:f3:7f:9f:39:8a:62:7a:f8:7e:e3:27:
         14:34:10:2c:38:36:f2:de:60:47:0f:c1:14:a8:0b:ff:15:77:
         d4:18:07:b3:40:a6:a4:80:71:8a:75:6b:4d:62:cf:7b:34:21:
         e4:23:41:a5:e2:03:9c:e5:f4:8a:a7:e3:fe:a5:ed:18:80:40:
         7f:aa:b7:2d:39:a9:1e:0b:d6:25:65:30:f2:78:8c:a9:f1:10:
         14:9b:54:2d:eb:ac:b9:76:ca:c6:40:5d:2e:67:52:94:07:af:
         37:96:d8:fd:23:51:58:a4:2f:09:61:72:6c:e6:d1:5a:ac:d5:
         da:ce:c4:49:e7:f9:07:d1:29:a7:28:bc:ba:a4:99:f5:a0:05:
         b1:03:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:11 2024 by rpki-client on console-fra.rpki-client.org