Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa
File:                     3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa (raw, json)
Hash identifier:          V2aqog16FJYFlZorlWvK3dBz+3plH62MXPrM2Tg2udM=
Subject key identifier:   2B:EA:E6:53:F7:34:34:F1:73:C3:3C:97:C1:80:2F:5E:6F:9A:16:82
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       71AF5353114304CEF1029F41A9B525DC514FFF49
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa
Signing time:             Tue 26 Nov 2024 10:19:43 +0000
ROA not before:           Tue 26 Nov 2024 10:14:43 +0000
ROA not after:            Tue 25 Nov 2025 10:19:43 +0000
asID:                     61745
IP address blocks:        186.219.252.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:af:53:53:11:43:04:ce:f1:02:9f:41:a9:b5:25:dc:51:4f:ff:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Nov 26 10:14:43 2024 GMT
            Not After : Nov 25 10:19:43 2025 GMT
        Subject: CN=2BEAE653F73434F173C33C97C1802F5E6F9A1682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5c:5e:55:78:cf:26:5a:92:93:a6:9c:1d:9d:
                    65:8a:3d:ca:6a:0d:71:11:7f:5f:aa:59:55:d8:25:
                    d4:d5:91:55:dc:d6:f3:9f:50:4b:b5:b9:b8:3e:6a:
                    31:e6:3f:a7:23:26:12:ba:e0:c4:c4:32:5d:11:74:
                    f9:2c:be:7a:6e:d3:b6:d1:21:eb:8e:53:8c:7d:2f:
                    cc:e9:a1:d6:22:9a:e1:ec:8e:c3:87:a8:19:4e:e8:
                    48:d9:1a:5e:eb:57:ec:03:10:81:c8:c3:a3:f8:60:
                    7f:7d:32:c7:1e:c6:54:d0:b1:72:de:e7:d6:bb:9f:
                    fa:60:c8:3b:8d:b9:98:86:3e:87:6a:f1:a3:67:33:
                    20:6c:61:f6:f8:92:e7:f7:ba:27:de:cb:2b:6e:37:
                    03:91:0a:d2:e6:48:57:4c:82:ba:af:ed:a0:cf:2f:
                    be:da:e0:80:ac:96:31:8a:61:9f:ad:af:b4:b1:ea:
                    d0:b5:0b:c7:50:bd:16:cc:f1:dc:c0:22:97:0c:55:
                    8f:28:db:c5:27:8e:02:f8:5f:32:c5:38:34:7c:51:
                    15:f4:22:6f:a0:f9:27:60:01:45:a4:f5:91:d8:b2:
                    75:0c:1b:76:6f:e2:e9:6c:52:13:ea:c5:ca:7c:26:
                    7e:7a:6a:05:cd:53:30:ea:1e:22:72:25:4c:25:56:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:E6:53:F7:34:34:F1:73:C3:3C:97:C1:80:2F:5E:6F:9A:16:82
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235322e302f32332d3332203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:03:9a:1d:44:8a:3e:a5:71:4a:36:75:3f:94:1e:97:fd:
         66:2b:56:dc:f9:55:2c:9f:e2:83:ed:bf:bd:eb:80:55:7e:04:
         c9:57:a2:f6:cd:f8:c0:86:9f:29:f5:c2:e0:f6:6b:f0:f5:23:
         00:0e:09:47:82:ff:6e:f2:ad:45:ac:f2:2f:ed:32:c4:92:15:
         d9:df:8a:fe:4f:23:9e:44:3c:38:a7:51:9e:de:a3:8d:86:0f:
         a7:63:4d:9f:67:2c:b8:a5:2b:7b:d3:9c:54:7d:06:bb:f4:6d:
         4b:d0:92:5f:b0:8f:aa:d2:1a:a4:a6:c4:aa:96:11:85:22:a6:
         ba:4a:82:63:77:7f:7a:d1:fd:af:1e:17:72:ac:8c:7c:3e:6f:
         fe:b5:4d:ec:33:93:d4:e2:7a:d9:ae:d0:6d:84:32:59:30:4d:
         8f:9d:3d:99:54:a6:1a:6d:bb:58:36:ce:bc:c1:29:5a:80:40:
         f8:97:4c:d5:ab:d8:13:8e:7c:4f:19:5f:06:ab:93:13:60:92:
         8a:92:28:8b:f3:11:0f:52:68:ab:2b:e3:82:1e:a5:46:e9:b7:
         ac:7a:d7:c4:0b:41:89:4a:bb:18:77:ee:93:6c:08:9f:ad:df:
         e0:41:e9:13:83:52:a8:f5:3a:b9:f5:c3:d0:ac:25:f5:f0:a1:
         da:68:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:43 2024 by rpki-client on console-ams.rpki-client.org