Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32322d3332203d3e20323730383930.roa
File:                     3138362e3233332e342e302f32322d3332203d3e20323730383930.roa (raw, json)
Hash identifier:          +z3P97D3nqEqpvp/xaMKpJyHAGQayAh9oX5Yy6eiCWQ=
Subject key identifier:   34:26:DD:C6:EE:C2:C6:2A:4E:4F:F6:95:E8:D1:06:14:59:38:1A:71
Certificate issuer:       /CN=8205E780938EDC7818B7F2237C1AB7314EE66C96
Certificate serial:       02A3E385CE9ABA8152E0F88DB588711597B9E614
Authority key identifier: 82:05:E7:80:93:8E:DC:78:18:B7:F2:23:7C:1A:B7:31:4E:E6:6C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8205E780938EDC7818B7F2237C1AB7314EE66C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32322d3332203d3e20323730383930.roa
Signing time:             Wed 13 Nov 2024 14:18:19 +0000
ROA not before:           Wed 13 Nov 2024 14:13:19 +0000
ROA not after:            Wed 12 Nov 2025 14:18:19 +0000
asID:                     270890
IP address blocks:        186.233.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/8205E780938EDC7818B7F2237C1AB7314EE66C96.crl
                          rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/8205E780938EDC7818B7F2237C1AB7314EE66C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8205E780938EDC7818B7F2237C1AB7314EE66C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a3:e3:85:ce:9a:ba:81:52:e0:f8:8d:b5:88:71:15:97:b9:e6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8205E780938EDC7818B7F2237C1AB7314EE66C96
        Validity
            Not Before: Nov 13 14:13:19 2024 GMT
            Not After : Nov 12 14:18:19 2025 GMT
        Subject: CN=3426DDC6EEC2C62A4E4FF695E8D1061459381A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:df:12:17:18:4b:59:65:bc:76:1b:d8:02:
                    de:d5:42:fc:6d:4f:6e:a0:c0:8c:df:80:8d:78:37:
                    da:d3:16:d0:5b:67:f2:94:02:20:d9:9f:05:33:ad:
                    03:88:77:a9:9c:f4:3a:b4:a4:1b:77:92:aa:ed:4d:
                    d6:d8:fd:8f:c9:f6:a3:55:d2:86:e9:6f:af:ba:f9:
                    12:d1:fc:70:44:f9:c8:be:77:e3:fd:fc:71:d8:4a:
                    8a:0e:10:fd:c1:06:a8:19:9c:9f:59:5b:e1:ab:be:
                    ed:76:9f:a3:4c:57:4a:ef:e1:57:24:70:0a:2c:f5:
                    36:39:c0:19:0d:ff:54:1c:70:74:eb:c1:c8:d4:bb:
                    c0:12:58:4d:f1:e8:74:3b:ad:c1:c5:fa:2b:3c:b5:
                    b1:43:13:f8:f5:12:7b:67:3d:4e:a2:8f:0b:90:1b:
                    7c:a3:cf:b2:52:24:2e:27:5f:37:cc:e0:64:ad:ef:
                    eb:82:c6:9b:e2:ec:63:ea:33:ef:42:ea:23:07:f6:
                    ea:72:d3:ba:8d:c8:ae:b7:22:88:82:2f:23:59:33:
                    ec:9b:02:35:39:f1:71:9e:96:31:c6:e2:10:64:8e:
                    8c:1d:02:15:26:ac:5c:a1:ed:12:09:7b:e3:ae:36:
                    1d:25:91:bf:e4:b9:b8:52:7b:08:d6:79:a6:bf:91:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:26:DD:C6:EE:C2:C6:2A:4E:4F:F6:95:E8:D1:06:14:59:38:1A:71
            X509v3 Authority Key Identifier:
                keyid:82:05:E7:80:93:8E:DC:78:18:B7:F2:23:7C:1A:B7:31:4E:E6:6C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/8205E780938EDC7818B7F2237C1AB7314EE66C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8205E780938EDC7818B7F2237C1AB7314EE66C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FLMDRJScvVKx2isgfpEyYs4UqdgqxhTr8Rjt7LYstYTP/0/3138362e3233332e342e302f32322d3332203d3e20323730383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:f7:2b:09:f0:7b:de:85:42:67:7b:ff:ae:5b:f4:43:c9:
         41:54:2a:1f:ca:93:4e:38:1e:38:dc:b7:52:87:14:29:0e:52:
         14:18:a2:a7:e3:75:0d:2e:15:bf:89:dc:36:07:5a:5c:9b:ed:
         6e:d7:f5:ed:75:45:73:9a:08:61:53:2f:e6:97:4c:10:1f:d2:
         15:3a:bc:01:45:13:40:6c:c8:8e:13:00:c2:68:ad:30:59:2e:
         44:4a:cc:0d:90:c9:fe:4f:2d:b4:95:ca:87:7c:82:f5:19:b6:
         2a:50:d8:fa:73:4d:5e:70:7d:8d:24:f5:86:07:ce:f9:06:bc:
         4e:2a:c0:57:cd:2e:65:7a:05:23:ad:6b:8c:b6:91:2c:d5:54:
         bf:81:53:5a:de:99:92:00:9d:29:41:33:96:1e:d8:64:3c:86:
         39:0a:c8:c8:d0:9e:16:b3:1d:fc:34:72:3b:37:75:75:db:33:
         e5:ea:c1:76:f4:97:01:7f:f0:c7:c5:30:97:64:a5:ba:c3:00:
         c8:ee:38:64:f2:46:d9:9f:57:b2:8b:ec:63:3f:22:6e:4e:69:
         6a:24:43:8b:01:2a:90:84:73:00:db:b5:e2:af:bc:de:ec:f1:
         a5:de:d4:2b:02:13:58:95:a0:70:18:c5:ba:c2:eb:ee:2d:3b:
         c3:93:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:45 2024 by rpki-client on console-ams.rpki-client.org