Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
File:                     3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          UP3j4QD3mVnojOsuStLqRLPmW1Z31fv7p/lX5kILZ/U=
Subject key identifier:   9E:DC:C0:02:FB:09:25:D9:4F:56:01:BF:C2:01:0C:D9:67:C9:E1:D2
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       52BE5B12943EB7178E22FF26908F81A418EA870C
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:19:31 +0000
ROA not before:           Tue 06 Aug 2024 00:14:31 +0000
ROA not after:            Tue 05 Aug 2025 00:19:31 +0000
asID:                     53107
IP address blocks:        186.209.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:be:5b:12:94:3e:b7:17:8e:22:ff:26:90:8f:81:a4:18:ea:87:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:14:31 2024 GMT
            Not After : Aug  5 00:19:31 2025 GMT
        Subject: CN=9EDCC002FB0925D94F5601BFC2010CD967C9E1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:9b:52:ab:9e:67:9f:5a:0f:2e:00:ff:a2:
                    77:59:04:89:be:cd:29:05:30:d9:5b:70:fb:c7:59:
                    c1:8a:ec:ce:c6:ad:79:5b:1f:28:03:42:a3:32:c5:
                    3c:38:cb:66:63:f6:5c:dd:c0:f1:7f:5e:49:0c:a2:
                    e7:19:39:ef:e4:af:74:1b:0f:e3:d8:4d:e5:b2:9c:
                    b7:61:12:14:49:f6:41:a0:d3:6b:1e:c1:82:40:f4:
                    35:84:db:58:0f:0c:68:ed:0e:88:1d:13:64:9a:3d:
                    b7:08:51:14:4f:87:88:be:3c:da:c2:00:f7:04:98:
                    e9:77:bb:b0:4e:10:ce:c1:05:fe:b3:d6:aa:27:77:
                    eb:3d:76:29:f0:41:71:1c:1e:4e:33:a3:8d:cd:31:
                    f0:13:1d:39:7b:96:c0:04:5e:1b:94:52:63:85:31:
                    6c:20:42:ab:ab:ae:07:16:36:8a:93:ca:da:54:b1:
                    1e:a7:6d:f0:18:6d:71:03:d2:35:be:2a:cf:ac:ff:
                    85:b8:83:05:2c:12:6f:6a:49:0d:fa:8f:27:a9:69:
                    a8:b5:62:98:a2:89:40:49:1a:91:65:fe:e5:09:c0:
                    a4:1d:2a:e2:71:81:d3:02:83:a0:7f:d0:bb:78:d8:
                    94:e0:1b:93:fa:f4:82:e0:79:04:ba:2e:01:ee:00:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:C0:02:FB:09:25:D9:4F:56:01:BF:C2:01:0C:D9:67:C9:E1:D2
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:68:1d:b5:e9:6c:fd:92:19:a4:0c:6b:e0:0e:10:4c:94:
         a7:d1:61:2b:c9:78:3d:0c:ba:e5:d5:6c:e0:a3:59:c9:55:06:
         a9:ae:59:09:fa:e9:f2:2e:39:62:db:fc:0e:69:5d:cc:a3:60:
         50:a1:26:0a:5d:0d:a4:cb:e3:5b:e8:2d:9c:7a:1d:ff:a0:f3:
         f5:a6:9f:38:f9:ca:40:15:af:e2:4a:98:ea:a8:33:99:b2:6a:
         27:cc:1a:02:26:cb:b9:d2:64:f0:e5:17:39:0b:ed:3e:c0:85:
         fe:64:1d:c0:88:0e:91:dc:34:65:90:ac:31:45:81:da:f3:41:
         1f:be:65:18:a3:f4:dd:e3:cd:57:db:48:56:66:ac:eb:b3:2f:
         32:16:5d:01:eb:02:d9:02:56:66:58:83:99:46:4e:32:53:33:
         66:ae:26:69:07:19:b5:f5:e4:19:9c:00:6d:6c:db:ec:5f:ed:
         cc:94:07:c9:1c:d5:58:28:e5:01:b9:32:e4:6f:2d:63:32:08:
         9b:65:75:05:57:32:51:b5:a2:db:e9:91:6f:8d:da:5c:73:bc:
         d8:7e:f3:45:fb:2a:61:d3:66:08:71:e0:ab:67:ac:e9:fd:a0:
         22:7d:55:b8:cf:49:68:3b:a4:58:8d:07:0d:bb:a5:c2:78:ea:
         94:38:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org