Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa
File:                     3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (raw, json)
Hash identifier:          Aulf2a9wygKS41lUZettmlaapWqTlD3AxwpFjZ12yBU=
Subject key identifier:   BC:28:B8:40:74:5C:DF:59:26:7D:7D:8B:7A:EC:DE:CC:47:98:08:22
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       7F0B158C82735BC61A1299FD1B782FFDA1E8FADD
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa
Signing time:             Tue 26 Nov 2024 10:19:00 +0000
ROA not before:           Tue 26 Nov 2024 10:14:00 +0000
ROA not after:            Tue 25 Nov 2025 10:19:00 +0000
asID:                     61745
IP address blocks:        186.219.240.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0b:15:8c:82:73:5b:c6:1a:12:99:fd:1b:78:2f:fd:a1:e8:fa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Nov 26 10:14:00 2024 GMT
            Not After : Nov 25 10:19:00 2025 GMT
        Subject: CN=BC28B840745CDF59267D7D8B7AECDECC47980822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:aa:38:45:0e:b4:2b:ec:4e:d8:08:c8:02:
                    27:f8:c2:3f:cd:bb:de:0e:f5:5c:4a:2e:d1:40:87:
                    5e:fe:f4:58:1b:7c:f4:db:d8:11:4b:29:68:dc:c8:
                    c0:86:00:90:43:c1:df:16:de:e9:01:7e:19:86:a1:
                    68:75:5c:e5:81:48:58:a3:19:82:80:25:6e:34:c7:
                    11:ae:12:17:c5:44:54:f2:e5:cc:6b:43:5c:95:c5:
                    c9:af:cb:0e:5e:56:b5:0b:fb:36:cf:dd:7c:2a:31:
                    0e:77:0d:0c:b5:da:c0:05:87:95:28:2b:8b:b5:8b:
                    18:5a:f5:3a:2c:20:97:75:f4:c0:31:6e:26:48:20:
                    84:45:0d:65:f1:c2:96:f7:1a:cf:f7:29:51:b0:e9:
                    81:f6:d8:b8:71:1c:ad:a3:21:55:b6:1c:a4:48:df:
                    f1:17:80:2a:ee:72:45:b4:82:58:4a:08:87:b7:6b:
                    97:0e:6a:5d:14:df:33:8e:cf:e4:07:3b:10:76:d8:
                    80:ae:d7:a1:2c:7f:ee:f1:d4:6d:53:97:94:07:de:
                    69:25:aa:ae:a0:c9:c8:a7:43:8c:b9:e3:e9:b1:1d:
                    a7:30:90:42:0d:fc:9a:3b:52:a3:5b:09:ad:59:35:
                    ab:7f:f4:97:e5:8c:fb:ae:69:4f:dd:92:80:96:5d:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:B8:40:74:5C:DF:59:26:7D:7D:8B:7A:EC:DE:CC:47:98:08:22
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:41:5b:99:ec:e8:17:77:30:d2:d6:5e:3f:8b:16:e9:a5:5a:
         cb:8b:6f:1b:87:fc:84:05:13:38:53:8a:04:c9:f4:78:07:8f:
         3a:31:40:ae:5f:90:5d:ad:8f:8e:c6:40:e0:c6:3e:4c:8a:d6:
         68:b6:d3:ef:c7:21:87:0c:ea:71:b0:b2:ad:f0:f5:01:b4:ed:
         35:0f:1c:ef:c5:d5:f7:cb:9a:08:18:ed:20:14:ac:55:73:79:
         63:bd:7f:b6:ac:2e:bc:d3:ab:78:3c:c0:40:89:f2:38:81:72:
         6c:b8:1c:ff:e1:ed:07:5f:ee:48:01:64:b3:df:21:77:27:58:
         b8:08:d7:19:29:a4:87:f0:18:ef:ea:a4:05:c6:ce:ac:d2:03:
         3d:f8:3f:4b:12:b4:94:d5:2b:d6:16:6c:9e:e5:da:7d:2e:34:
         98:83:56:90:4f:51:62:d6:75:0d:1d:f0:64:e0:24:30:f7:48:
         f7:e3:bd:37:6b:6c:26:25:36:5c:2c:f6:07:65:e6:b6:4d:e6:
         40:f3:1d:54:ce:63:44:26:7f:9e:a6:f8:34:25:48:63:71:79:
         bd:c4:96:53:dd:d6:14:d5:e6:29:63:71:bc:fd:1e:dd:00:d1:
         1f:d3:83:43:c7:16:0e:fa:11:73:45:e8:bc:9a:d1:b0:f0:b5:
         8d:3e:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:43 2024 by rpki-client on console-ams.rpki-client.org