Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232342e302f32302d3233203d3e203533323137.roa
File:                     3138362e3233372e3232342e302f32302d3233203d3e203533323137.roa (raw, json)
Hash identifier:          HKsF3ryftFbUxWWHpvZUbtkrr8p4blYSVrxc1669yUc=
Subject key identifier:   81:7E:E7:04:DA:ED:DE:65:22:B7:29:AB:A0:E2:7B:A3:C1:C6:D9:9C
Certificate issuer:       /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial:       48601E95367459D33E2C105FB2D6D2DC6A7CA578
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232342e302f32302d3233203d3e203533323137.roa
Signing time:             Sun 28 Jul 2024 19:51:28 +0000
ROA not before:           Sun 28 Jul 2024 19:46:28 +0000
ROA not after:            Sun 27 Jul 2025 19:51:28 +0000
asID:                     53217
IP address blocks:        186.237.224.0/20 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl
                          rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:60:1e:95:36:74:59:d3:3e:2c:10:5f:b2:d6:d2:dc:6a:7c:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
        Validity
            Not Before: Jul 28 19:46:28 2024 GMT
            Not After : Jul 27 19:51:28 2025 GMT
        Subject: CN=817EE704DAEDDE6522B729ABA0E27BA3C1C6D99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:55:7c:4b:a9:d7:6f:9a:88:66:e2:5d:ef:
                    bc:89:b3:15:03:67:17:fc:67:2a:1e:0f:60:13:7a:
                    ef:19:1b:42:4f:de:f8:d5:fc:db:76:9a:a5:a7:89:
                    07:00:11:71:1d:12:6b:26:00:fc:af:bc:6e:71:be:
                    4b:48:d2:0e:1a:51:d3:a2:78:f5:43:9e:c9:32:ec:
                    15:f9:04:d6:09:53:19:0f:28:7e:d6:01:d2:da:e5:
                    61:86:f6:9d:32:86:52:a2:45:05:18:0d:1b:b9:56:
                    e3:db:6b:df:5a:4a:b2:52:7e:ce:55:49:85:08:1e:
                    41:c2:6d:50:7c:cf:38:c1:a0:91:a0:a3:f3:5b:6c:
                    51:3e:21:fa:8f:4c:a5:dd:65:14:98:73:91:77:40:
                    07:1d:ff:8a:37:b7:2f:e4:a6:b0:3b:0d:64:8f:d6:
                    32:30:f6:79:ab:3b:dd:74:a3:67:33:41:af:e9:11:
                    59:19:33:10:5c:40:e2:12:46:91:46:6d:37:fa:ef:
                    7d:38:17:85:0c:3d:2e:d2:d1:9b:3d:61:4c:ea:a0:
                    7a:2b:f4:b5:37:cd:68:bd:af:96:66:b1:78:e9:98:
                    a2:49:f7:ab:55:54:3a:3d:d2:c1:23:3a:d4:0c:7a:
                    80:e0:e3:6b:e1:4a:f8:61:ed:9a:e7:01:2d:97:3a:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:E7:04:DA:ED:DE:65:22:B7:29:AB:A0:E2:7B:A3:C1:C6:D9:9C
            X509v3 Authority Key Identifier:
                keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3138362e3233372e3232342e302f32302d3233203d3e203533323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:99:e2:1b:57:3f:73:fa:b1:0d:3e:0f:48:07:c2:95:43:6c:
         59:45:cc:3e:3b:48:79:cb:28:c7:7c:5d:1a:39:f6:fd:db:62:
         b0:4c:9f:fd:17:8c:54:23:38:b1:25:a5:f5:31:49:49:55:b8:
         5b:92:3b:81:c6:be:33:2b:6f:9a:f8:6a:be:a7:05:c7:92:c5:
         8d:b4:ae:dd:7f:d8:91:ff:63:bb:c1:bb:4f:c9:bc:18:e3:61:
         f1:74:bf:81:e1:5f:c1:f6:f3:dd:f1:0e:d9:0c:ff:74:82:e1:
         da:82:4c:5b:13:13:33:7a:bb:2d:6f:48:de:ac:93:57:2c:86:
         5a:aa:65:6d:2c:6b:1d:e4:e6:06:8a:ae:16:a1:fc:0e:1f:cc:
         5c:b1:ad:4b:f2:20:2f:c7:b5:5d:80:80:4b:b4:3f:1e:8a:33:
         e3:1f:51:30:db:72:54:ac:f2:2c:30:cc:e1:86:fc:37:da:69:
         18:ef:57:c8:3f:1e:9d:b4:80:1b:17:3a:3a:5b:ba:5a:4f:7c:
         02:a7:11:85:ae:b7:f8:84:f7:10:65:7a:92:58:11:a8:34:21:
         56:50:e2:19:23:8c:1c:f0:fc:77:e9:66:e3:2f:e4:22:a0:0e:
         b0:4a:6a:05:f5:39:11:00:31:c3:2e:8a:7f:43:c3:c9:75:8f:
         16:e5:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:32:00 2024 by rpki-client on console-fra.rpki-client.org