Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa
File:                     3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa (raw, json)
Hash identifier:          KGTG14MYEbhQUR6skzfUDgVBOa0hqex3JRN2yxMEp1k=
Subject key identifier:   12:C0:B8:AA:D8:50:12:91:68:A8:6E:44:94:0E:FD:CA:66:B2:C6:AF
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       3AEE1547675012B90E176C871CA7295E1AC0354F
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270765
IP address blocks:        186.194.166.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ee:15:47:67:50:12:b9:0e:17:6c:87:1c:a7:29:5e:1a:c0:35:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d3:2e:9a:60:2e:b6:c1:36:34:28:e6:1c:41:
                    89:09:19:41:4e:33:67:ce:c2:45:c7:43:bd:5e:a4:
                    97:79:a2:bc:93:19:b5:a9:3d:0c:96:4c:94:ba:fd:
                    5d:63:5f:8f:f1:70:c8:d6:63:a6:18:a4:26:79:09:
                    09:2f:d9:ca:3d:b3:c9:13:c9:da:01:27:5a:ff:f2:
                    64:1e:a6:d6:3a:cf:9c:94:1a:f1:b2:c3:fd:63:74:
                    ae:e2:17:2f:26:f2:7a:90:22:c7:60:81:23:ab:06:
                    73:f5:f4:d8:33:94:0e:74:f6:28:cc:e7:58:a2:d8:
                    31:74:92:f5:23:74:4e:72:9e:8c:b9:5d:69:64:75:
                    f4:b4:af:4b:ee:f3:2e:a0:a4:80:6a:e1:84:fe:e2:
                    2d:c9:64:48:64:58:2e:49:b7:4a:f9:79:ef:b3:b5:
                    65:c8:68:44:8d:eb:c7:ad:d1:fb:f5:c2:9d:7e:fb:
                    e4:54:49:66:cb:54:dd:c9:66:e1:9b:99:f4:88:0e:
                    f0:68:2b:29:3f:b2:05:6f:5f:1e:7e:64:85:9d:3d:
                    9a:35:73:99:46:b8:7f:34:1d:44:0c:07:87:69:fa:
                    c4:46:b4:3d:cc:76:1a:75:f2:5f:52:a5:7f:7a:67:
                    ce:da:b6:d5:04:51:42:68:4d:25:3b:d8:34:2d:87:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:B8:AA:D8:50:12:91:68:A8:6E:44:94:0E:FD:CA:66:B2:C6:AF
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/3138362e3139342e3136362e302f32332d3234203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:79:4f:da:5a:9e:9f:90:af:26:e2:09:45:d6:53:88:3b:4d:
         82:a2:ca:bb:1c:99:3c:fd:1f:ba:db:63:0e:9d:f5:1a:2d:f7:
         a9:c1:59:df:9a:7a:00:88:25:4f:40:82:32:b3:02:19:53:56:
         5a:ed:3b:8c:f1:cd:90:73:db:fb:ec:78:44:44:ab:26:2e:f8:
         44:43:4f:d3:c6:80:65:0f:a4:f0:b7:97:36:b5:6c:5f:61:23:
         05:48:02:f8:eb:89:ae:60:11:91:e1:06:e5:22:f5:88:19:32:
         1e:e7:bd:7d:43:86:db:5c:09:0a:26:e6:e4:06:5d:c3:35:24:
         68:3c:af:f2:72:fa:aa:3d:2c:29:8d:af:72:ac:d2:92:49:72:
         66:ed:f5:45:54:bb:ab:0b:0a:a5:f1:64:22:46:6b:69:76:b0:
         c4:9c:b1:5e:2a:d7:5a:7e:f3:46:52:e8:11:77:74:e3:fd:81:
         b0:5c:33:e9:f2:80:f0:01:c8:aa:ed:99:75:d5:34:0b:c1:b8:
         78:78:a7:e2:b5:de:d4:55:c4:cf:c9:79:ab:25:c8:03:b1:38:
         ea:d4:f4:f9:81:0a:13:4e:24:ea:6d:b3:46:f1:b0:93:b0:a7:
         ea:8e:46:e4:49:61:64:1a:93:39:36:33:88:07:c4:18:89:3f:
         16:41:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org