Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa
File:                     3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa (raw, json)
Hash identifier:          4ial0zG0Hlh0wQryAzFWfdM1DwjPagTJxoQv7hSVoFs=
Subject key identifier:   CF:11:77:1C:51:72:F3:F5:FE:0D:6C:42:6B:87:EA:11:67:AD:4F:0B
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       4E2B8A49FE77391DD05240359A64D6326A780170
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa
Signing time:             Tue 26 Nov 2024 10:19:54 +0000
ROA not before:           Tue 26 Nov 2024 10:14:54 +0000
ROA not after:            Tue 25 Nov 2025 10:19:54 +0000
asID:                     61745
IP address blocks:        186.219.254.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2b:8a:49:fe:77:39:1d:d0:52:40:35:9a:64:d6:32:6a:78:01:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Nov 26 10:14:54 2024 GMT
            Not After : Nov 25 10:19:54 2025 GMT
        Subject: CN=CF11771C5172F3F5FE0D6C426B87EA1167AD4F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:cc:58:4a:82:e7:18:87:3b:ec:01:17:0d:
                    58:ce:08:68:3a:c6:ed:07:ce:26:92:50:b3:f8:1c:
                    43:d9:d0:9e:04:c6:d9:0a:bf:b8:0f:96:1e:d0:03:
                    33:6b:6b:52:ef:b1:65:a9:ab:3d:13:ca:79:97:f5:
                    7c:0a:c5:8a:29:30:ad:2e:c7:d6:fc:5e:21:0e:8c:
                    f5:87:c5:03:6b:04:a8:c4:9b:81:57:6d:6d:77:d8:
                    2f:86:64:27:24:23:32:e6:fe:61:b5:a3:e4:cc:b2:
                    a9:87:b1:07:78:fe:ce:82:65:3d:19:6a:3d:98:d3:
                    88:ce:0b:3d:65:3d:2d:3c:b7:66:e3:29:7e:9f:20:
                    7e:e2:9a:d2:72:5c:ce:8f:2c:89:0d:36:62:73:dc:
                    64:df:bb:25:d6:e6:c6:c8:d3:92:55:96:44:00:ef:
                    91:2b:d8:f9:17:54:94:bb:37:7f:f6:22:d0:6a:43:
                    3c:a7:45:35:fc:23:f3:99:98:ad:3d:d7:72:cc:96:
                    09:9f:6d:87:dc:f8:9f:59:16:98:01:7e:a9:bc:9e:
                    75:64:3b:88:9c:b7:67:7f:17:86:06:b0:8c:80:c0:
                    df:bb:c3:07:67:ad:f3:29:0f:e9:b4:a3:87:3e:01:
                    a3:66:10:72:50:fe:bd:d6:21:3d:50:29:e5:07:63:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:11:77:1C:51:72:F3:F5:FE:0D:6C:42:6B:87:EA:11:67:AD:4F:0B
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3235342e302f32342d3332203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:14:9d:53:71:cb:38:6e:ce:4a:84:13:1a:76:95:55:83:08:
         e2:7b:13:6e:4f:5b:fd:79:e5:72:b1:f6:4d:32:8a:9f:63:30:
         c3:da:78:5d:c8:f6:fd:e2:67:46:84:ff:6c:6b:c5:2a:6e:fe:
         00:ca:bb:c8:03:a7:e3:93:74:3c:be:0d:c8:39:72:25:68:0f:
         67:96:dd:d8:d2:68:85:87:5a:a2:c2:5c:68:7f:5d:af:6a:7f:
         5a:90:b4:f7:fd:ca:d5:74:d8:04:43:8a:a6:25:17:09:29:a4:
         7f:17:24:61:67:bb:05:33:37:b3:a4:76:14:b2:78:60:1f:c8:
         ee:9d:15:0e:4f:17:af:46:8b:6c:b3:5e:58:b6:55:69:2f:11:
         7c:bf:8e:e9:96:2f:d3:b3:c0:76:20:c1:0e:a1:68:26:94:69:
         f0:ef:3e:43:40:e9:d7:ad:aa:35:2d:31:ba:6b:77:31:b0:04:
         fa:80:53:4f:a9:28:fd:aa:77:97:af:38:8f:43:66:66:b8:9a:
         2d:17:0b:ea:85:03:40:4d:72:d0:8a:59:53:4f:a0:1d:b3:dc:
         20:32:98:3d:03:3e:6c:6d:fa:07:c4:da:99:11:6c:10:e0:9c:
         1c:f5:0f:ce:03:a6:1c:40:ec:ff:92:0b:37:b7:b9:c4:16:39:
         b0:a0:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:43 2024 by rpki-client on console-ams.rpki-client.org