Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32312d3234203d3e203533313037.roa
File:                     3138362e3139342e34382e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          hY6z7zFbmiA+x70WrcR9YEd/u3hIefqrLQuG1o2H4jI=
Subject key identifier:   56:41:86:EC:FD:A6:F1:7E:10:67:05:15:3A:58:AD:EE:6C:D0:9E:EE
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       1FBBDCA9F1E0053B4B1067ABE58B0B1BF6A3BF35
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:20:25 +0000
ROA not before:           Tue 06 Aug 2024 00:15:25 +0000
ROA not after:            Tue 05 Aug 2025 00:20:25 +0000
asID:                     53107
IP address blocks:        186.194.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 21:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:dc:a9:f1:e0:05:3b:4b:10:67:ab:e5:8b:0b:1b:f6:a3:bf:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:15:25 2024 GMT
            Not After : Aug  5 00:20:25 2025 GMT
        Subject: CN=564186ECFDA6F17E106705153A58ADEE6CD09EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:36:42:27:c0:48:f1:e3:1e:ec:15:f6:ba:
                    22:fe:93:d7:01:01:2c:a2:88:3c:df:6b:20:64:0a:
                    82:73:58:92:14:c2:ac:36:66:40:39:f3:54:1d:15:
                    3c:64:fd:39:39:5e:85:91:e2:de:ac:90:97:fc:cd:
                    88:dd:69:5b:e5:ca:02:3e:e9:5d:23:c2:54:3d:97:
                    45:3e:3b:b4:a6:00:c5:3e:a0:15:69:0c:a4:8e:02:
                    3a:9c:43:68:fc:cf:3a:33:8a:e2:61:7c:e9:99:5e:
                    c6:fe:b9:e6:0a:8d:0a:ae:b4:9e:ca:9e:e7:32:ba:
                    31:00:00:8e:09:52:24:58:71:28:21:d8:b5:00:e1:
                    33:69:78:72:77:b2:dd:fe:b8:a6:e4:75:c2:67:52:
                    e3:21:87:a3:ca:ef:38:85:c3:22:94:11:e1:6f:1f:
                    13:62:8e:dc:51:4a:e2:6c:9c:8b:69:5a:3a:43:ad:
                    a9:7c:17:41:43:30:0a:01:9b:19:60:83:d6:a9:b8:
                    06:c1:e1:2e:e5:68:9b:4d:be:f1:32:f1:15:25:f0:
                    3b:87:33:b9:f7:99:6e:98:1f:f8:75:bc:fe:4f:d7:
                    a9:9c:77:85:ff:e7:fd:cc:cb:8b:8c:e5:a3:93:53:
                    bb:c0:a6:b1:90:33:1d:bd:8a:f0:9b:fb:09:4a:f9:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:41:86:EC:FD:A6:F1:7E:10:67:05:15:3A:58:AD:EE:6C:D0:9E:EE
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:db:4a:9e:28:14:08:4b:24:4c:5d:b6:98:f5:b9:24:99:
         3a:0e:d8:80:48:be:0d:0f:65:ec:97:38:87:00:37:ef:9b:1c:
         dc:09:ae:53:16:18:08:2b:ef:e4:87:72:47:c7:83:6e:6a:2f:
         ea:6b:28:7c:d5:b7:00:17:84:c8:c1:d3:07:64:16:08:e2:21:
         0d:42:9a:2f:34:0d:36:04:57:34:42:50:f0:da:98:ee:81:06:
         0c:f6:32:78:9c:b3:cc:ea:b8:9f:5c:be:ee:c7:a4:ca:d1:e3:
         ed:3a:ce:3c:83:11:85:6c:a2:f7:2a:c2:df:a8:6e:08:ea:e2:
         c5:9b:7c:61:66:3b:b7:68:a2:bd:c0:48:1c:85:05:ea:83:ba:
         97:b8:dd:d0:d9:04:0d:11:cf:37:e8:aa:6a:e3:f5:fe:87:4d:
         5b:74:76:5e:c6:0a:86:71:42:6a:40:ad:10:9a:be:3c:55:5c:
         b9:e4:2b:66:62:28:ac:19:d3:cc:93:db:90:cf:cf:2f:fc:22:
         40:29:e4:ac:39:bf:05:7f:e5:71:a9:b7:a5:f0:c1:51:0c:d2:
         08:0e:80:68:f4:13:77:37:83:59:01:d6:12:a8:14:e3:12:1b:
         ad:1e:ba:50:59:8a:05:12:77:90:f1:b9:ad:46:a3:57:c5:54:
         08:15:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:19 2024 by rpki-client on console-ams.rpki-client.org