Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3138362e3235302e3232372e302f32342d3332203d3e20323632383534.roa
File:                     3138362e3235302e3232372e302f32342d3332203d3e20323632383534.roa (raw, json)
Hash identifier:          cclFYJ4Iwhdgvm+zEJL6ozZJKzDnWTpnJdy/Keg5qIo=
Subject key identifier:   C5:BA:A4:00:A5:66:B9:9A:CD:42:1B:F2:17:16:D5:BB:09:EF:A0:F2
Certificate issuer:       /CN=484909AE55FE5D252EF7E025126B88260867CF80
Certificate serial:       361335426794A828B296FBB19303069B8ABC4E77
Authority key identifier: 48:49:09:AE:55:FE:5D:25:2E:F7:E0:25:12:6B:88:26:08:67:CF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3138362e3235302e3232372e302f32342d3332203d3e20323632383534.roa
Signing time:             Tue 12 Nov 2024 14:55:46 +0000
ROA not before:           Tue 12 Nov 2024 14:50:46 +0000
ROA not after:            Tue 11 Nov 2025 14:55:46 +0000
asID:                     262854
IP address blocks:        186.250.227.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.crl
                          rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:13:35:42:67:94:a8:28:b2:96:fb:b1:93:03:06:9b:8a:bc:4e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484909AE55FE5D252EF7E025126B88260867CF80
        Validity
            Not Before: Nov 12 14:50:46 2024 GMT
            Not After : Nov 11 14:55:46 2025 GMT
        Subject: CN=C5BAA400A566B99ACD421BF21716D5BB09EFA0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:ce:a7:0b:76:41:3c:40:c7:20:b0:81:c8:
                    52:89:8f:a6:0c:0e:79:aa:0a:8e:68:66:3c:9b:20:
                    49:3e:dd:72:d0:31:24:b8:52:8c:dc:5d:e6:8b:a0:
                    a4:f0:8b:3b:a4:79:e6:ea:fe:37:0a:ec:54:fe:ac:
                    8d:6c:ce:d7:7b:89:85:b3:7b:d1:06:04:dc:82:d9:
                    eb:67:33:df:3b:be:02:4f:24:4b:d2:79:68:8c:7a:
                    f9:ed:e2:0e:b4:81:b3:b9:2b:e2:81:fd:32:4d:dd:
                    dc:b7:a5:f3:02:58:a2:ab:ec:1e:ac:8c:e4:45:08:
                    66:2f:7d:e8:5d:87:19:a6:c7:87:64:d4:3d:ef:b6:
                    95:0b:2a:36:b6:72:91:54:2d:e5:e8:20:83:23:b3:
                    7c:69:e8:e4:54:6a:85:9d:08:5f:4c:3f:15:63:d7:
                    dd:c9:78:c0:8c:fb:b8:b8:3c:44:35:0e:58:b4:2f:
                    f5:03:2a:fb:dc:36:6a:6d:28:d7:bf:28:af:36:8f:
                    9d:0b:08:b6:42:45:ef:8a:27:c7:13:ce:6f:89:35:
                    31:55:72:a4:c5:74:c1:61:51:e4:f8:cd:60:42:aa:
                    95:56:51:d9:96:73:e0:d4:c9:25:cd:24:e1:14:e0:
                    27:74:52:95:6a:93:b4:cf:ac:5d:63:b4:d2:4d:a0:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BA:A4:00:A5:66:B9:9A:CD:42:1B:F2:17:16:D5:BB:09:EF:A0:F2
            X509v3 Authority Key Identifier:
                keyid:48:49:09:AE:55:FE:5D:25:2E:F7:E0:25:12:6B:88:26:08:67:CF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/484909AE55FE5D252EF7E025126B88260867CF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484909AE55FE5D252EF7E025126B88260867CF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3138362e3235302e3232372e302f32342d3332203d3e20323632383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:a4:4f:53:80:99:e6:58:91:a9:46:d7:d4:28:60:cd:f3:
         61:23:3a:15:04:1a:15:8f:f3:8e:06:d3:c2:80:7a:6a:cd:53:
         ac:6d:25:57:1b:c3:2a:2f:99:57:fd:2d:70:a3:03:03:86:13:
         b8:0f:12:b1:19:37:1c:85:81:e8:b0:35:86:eb:b2:1c:7d:98:
         ff:e3:78:11:a5:d0:b4:2b:3f:b3:b2:4e:a6:d7:8b:4a:49:b0:
         99:3c:79:d5:96:2c:9a:14:42:66:72:a0:14:ab:92:9e:32:9c:
         1e:50:18:5e:60:27:29:1e:df:08:a2:c9:1a:18:8b:d6:24:29:
         22:46:63:14:86:d5:99:7a:55:99:52:7c:0d:2e:6c:46:03:e0:
         62:93:8d:9c:20:ae:0b:fd:a6:55:5b:44:27:60:b5:c2:30:ef:
         aa:b1:7d:7d:2e:37:8c:8d:5a:5e:54:51:57:6a:d1:9d:ff:1b:
         11:39:80:2d:9e:b9:c4:c0:04:fb:57:d4:6b:02:c6:7f:84:d7:
         ae:0b:86:ad:86:36:89:51:71:31:31:85:f1:d2:85:28:d3:23:
         3c:e6:cf:65:c9:af:d1:f5:f4:e9:0f:bb:4f:65:f3:50:88:21:
         b0:a3:0b:72:cd:71:b8:0a:94:ba:4d:06:74:ee:2a:95:97:87:
         03:a3:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org