Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138362e3234392e39362e302f31392d3332203d3e203238323736.roa
File:                     3138362e3234392e39362e302f31392d3332203d3e203238323736.roa (raw, json)
Hash identifier:          KSmoKvWEUaeEqM2AXnve6dSzPm2i8BjLX5+TRLsHT2M=
Subject key identifier:   CA:08:B9:C6:5B:C2:30:2E:BB:63:18:D8:8E:27:F2:47:EA:35:9E:07
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       35634FF265AB2EB09CC86EEAF37BD6DD30A313DC
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138362e3234392e39362e302f31392d3332203d3e203238323736.roa
Signing time:             Thu 07 Nov 2024 14:01:39 +0000
ROA not before:           Thu 07 Nov 2024 13:56:39 +0000
ROA not after:            Thu 06 Nov 2025 14:01:39 +0000
asID:                     28276
IP address blocks:        186.249.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 13:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:63:4f:f2:65:ab:2e:b0:9c:c8:6e:ea:f3:7b:d6:dd:30:a3:13:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Nov  7 13:56:39 2024 GMT
            Not After : Nov  6 14:01:39 2025 GMT
        Subject: CN=CA08B9C65BC2302EBB6318D88E27F247EA359E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:e2:3b:72:1f:6d:5a:78:4f:d9:61:a3:33:
                    7d:e5:5b:31:3b:a5:2e:05:46:9b:ef:2e:3c:7a:ae:
                    c2:26:ff:b0:5e:f7:2f:be:d9:26:38:6e:6b:a8:49:
                    9d:63:56:c1:23:b6:47:ff:a2:b3:bb:46:43:0b:0e:
                    67:5d:4a:ed:a9:7c:94:bc:4e:7d:23:f0:ca:5b:58:
                    61:c9:4f:11:f4:61:c5:a9:82:23:35:b9:4d:d7:33:
                    4e:3f:e7:61:f2:0a:7b:ba:e0:57:82:ba:98:63:d4:
                    ea:d6:a8:d2:a3:d0:99:4e:7c:2c:4a:8c:a2:f3:8c:
                    e1:2c:48:2e:42:00:38:c8:85:a5:c4:31:22:18:fc:
                    86:93:ca:d5:3a:d2:5e:29:9b:b8:46:cc:1a:ec:9b:
                    f0:a6:f9:c7:52:2f:89:46:ac:82:23:53:27:68:5e:
                    d6:4f:11:82:d7:2b:23:cd:4a:0b:72:fe:3f:97:a1:
                    1a:77:91:c6:2b:f1:52:37:1e:a1:2d:58:17:ff:86:
                    2a:e7:f0:97:82:b4:d9:33:7d:0c:5e:bb:9b:d8:3a:
                    82:c5:bd:b4:5c:b3:90:8d:42:ae:1a:41:b1:97:3c:
                    21:03:c0:48:1d:01:d9:fd:4b:3e:2c:29:a4:81:10:
                    84:c6:3b:b5:12:17:55:b3:ff:b5:46:15:9d:e9:15:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:B9:C6:5B:C2:30:2E:BB:63:18:D8:8E:27:F2:47:EA:35:9E:07
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138362e3234392e39362e302f31392d3332203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:a4:0a:e0:28:b8:eb:b3:16:b7:8a:e4:86:0a:c9:58:10:
         41:4d:15:49:e0:58:a0:72:e9:c7:9c:c3:1b:2a:83:76:4f:1f:
         d3:7d:78:9e:43:10:fa:30:a5:55:1d:56:ab:d4:40:52:c0:3b:
         c3:15:50:82:a2:bc:19:b7:e5:6f:e9:59:6b:fd:a6:47:81:bc:
         6e:7f:c5:70:a7:8e:94:5c:c0:93:0d:50:e8:cd:a2:13:2c:f8:
         70:f6:6b:26:cc:72:f1:11:65:33:f5:02:a9:ff:d4:e8:48:ef:
         de:08:9e:4b:97:01:c6:2c:da:62:ae:bc:9c:82:9b:75:a2:3d:
         3b:53:be:a9:a6:7e:db:91:e9:8f:50:e1:05:83:47:e7:c8:0a:
         9a:54:dc:d2:35:aa:af:b8:96:79:e3:ea:d7:3b:ea:b5:86:c2:
         49:82:37:80:27:6a:59:66:63:3b:d1:eb:c3:df:ce:6d:94:f1:
         b7:46:df:4b:af:92:c2:60:ea:ef:a0:87:1b:b1:59:12:67:4c:
         a6:a2:04:4a:53:2f:08:cf:93:0d:6f:83:ae:fe:29:38:4a:e2:
         63:9b:79:69:c9:49:d2:a2:e5:83:7c:4f:db:51:77:1c:5d:f1:
         d0:41:f5:19:a3:53:1a:80:c9:d4:71:04:ae:e0:82:1f:66:0c:
         cd:a5:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:23 2025 by rpki-client