Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa
File:                     3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa (raw, json)
Hash identifier:          f1wTq2uA63UgU62yzr78N5Jkgfnc9H4WReFksNS9g5s=
Subject key identifier:   73:1A:F5:4D:FF:1E:56:08:B9:AD:37:35:C8:1B:B9:0A:BF:3A:EB:64
Certificate issuer:       /CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
Certificate serial:       1D248C4BA337F53F3FABEF9E3D03C45CE6111764
Authority key identifier: B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa
Signing time:             Thu 17 Oct 2024 20:32:19 +0000
ROA not before:           Thu 17 Oct 2024 20:27:19 +0000
ROA not after:            Thu 16 Oct 2025 20:32:19 +0000
asID:                     262698
IP address blocks:        187.102.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl
                          rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:24:8c:4b:a3:37:f5:3f:3f:ab:ef:9e:3d:03:c4:5c:e6:11:17:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7DDBA31B3E035114E8DEE7428E921EE9085B3A1
        Validity
            Not Before: Oct 17 20:27:19 2024 GMT
            Not After : Oct 16 20:32:19 2025 GMT
        Subject: CN=731AF54DFF1E5608B9AD3735C81BB90ABF3AEB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:b2:5f:5e:b3:85:d9:9c:82:d0:8e:c6:c0:
                    fd:c6:c9:64:7d:cf:6c:3f:02:07:36:41:bb:a7:7c:
                    0c:e2:a3:e8:57:d8:49:5d:55:fc:85:8e:ef:b4:a8:
                    30:ef:85:8c:46:96:12:b8:63:8e:28:4e:59:c3:7c:
                    a5:39:da:38:d9:57:45:22:39:da:02:2e:0c:94:10:
                    dd:18:2f:f8:68:36:e1:f3:c3:24:32:0d:2b:41:2b:
                    1e:36:94:07:45:43:46:4c:a2:8a:27:0e:e2:02:56:
                    0e:de:87:4f:91:aa:64:36:4e:7e:c7:d2:53:50:5a:
                    f7:f6:fa:13:52:9b:3e:8a:9d:97:dd:b5:4a:c5:8b:
                    33:68:86:ae:af:08:65:c6:2b:c4:7b:b0:9d:a0:85:
                    e1:67:f2:51:59:63:c9:43:c6:4c:81:a4:5f:a8:b9:
                    80:39:1c:e2:c7:25:36:cf:39:91:37:7d:61:23:75:
                    82:71:1f:33:f8:8b:62:53:7a:22:a4:f4:3b:89:f7:
                    ec:cc:7c:fa:43:a3:1c:80:0a:76:ba:16:24:a9:38:
                    62:8a:25:9c:68:35:00:d2:6b:e7:63:2b:b4:fb:00:
                    3d:9a:f4:18:ab:28:bb:e3:3b:17:ef:da:8d:33:a3:
                    dc:3b:58:9b:f1:f1:a8:8c:f9:0d:5b:eb:b5:e6:ca:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1A:F5:4D:FF:1E:56:08:B9:AD:37:35:C8:1B:B9:0A:BF:3A:EB:64
            X509v3 Authority Key Identifier:
                keyid:B7:DD:BA:31:B3:E0:35:11:4E:8D:EE:74:28:E9:21:EE:90:85:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7DDBA31B3E035114E8DEE7428E921EE9085B3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3138372e3130322e33362e302f32342d3234203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:32:3c:0c:a0:a6:a9:2a:69:69:b1:f5:ec:7a:84:3a:2e:
         cf:7e:bb:eb:bb:70:a6:93:bb:52:7c:ab:7a:30:f7:7d:c1:e0:
         b5:0f:53:87:b0:df:b5:83:00:5e:68:fe:d7:2c:03:47:37:86:
         95:e7:f3:10:b6:de:e8:31:4b:7b:41:1a:ed:7a:5a:66:0c:e8:
         6c:44:5e:48:6c:97:89:fc:5f:36:b7:e6:c8:25:7d:be:2b:5c:
         fa:ee:39:c9:02:66:af:e4:5e:c3:b1:a8:e4:3c:fa:27:d3:32:
         06:e5:1c:23:d8:e3:56:ee:23:01:5e:83:cf:96:b3:e9:6a:5f:
         ef:71:ed:5e:e3:e0:69:e5:10:99:e6:d1:09:18:e6:d6:39:b4:
         c2:64:55:b5:99:77:5f:c9:dc:ae:9a:ce:38:1c:56:fb:33:19:
         e6:6c:b7:8e:a4:e4:a2:8e:03:52:eb:e3:e3:b4:d7:bb:da:52:
         cd:63:cd:45:fa:10:a6:42:47:df:de:16:a8:89:8a:c6:12:ac:
         8f:f1:72:08:b4:22:da:09:32:4e:fd:66:b6:24:f3:de:56:b3:
         2e:34:28:4a:88:46:f9:a5:38:39:67:55:c3:73:6b:b9:7a:e5:
         c7:3b:c2:f5:1a:b8:46:28:05:ac:ad:6e:48:d2:f1:96:82:16:
         f9:a3:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:50 2024 by rpki-client on console-fra.rpki-client.org