Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa
File:                     3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa (raw, json)
Hash identifier:          Z8KkPUpEd1MmbGIBznFG3N++jmghdw7xW5Vtu7tsOsE=
Subject key identifier:   C7:79:56:47:5E:04:02:F0:D8:E2:3D:44:14:6A:9B:31:04:88:E6:E1
Certificate issuer:       /CN=21619A6DD05DB15FE1B213C8C5C580B755346175
Certificate serial:       70BE8D329CA7DE1AE68835FB4C928AD2A9D0B753
Authority key identifier: 21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa
Signing time:             Thu 04 Apr 2024 15:57:43 +0000
ROA not before:           Thu 04 Apr 2024 15:52:43 +0000
ROA not after:            Thu 03 Apr 2025 15:57:43 +0000
asID:                     262996
IP address blocks:        186.219.208.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl
                          rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:be:8d:32:9c:a7:de:1a:e6:88:35:fb:4c:92:8a:d2:a9:d0:b7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21619A6DD05DB15FE1B213C8C5C580B755346175
        Validity
            Not Before: Apr  4 15:52:43 2024 GMT
            Not After : Apr  3 15:57:43 2025 GMT
        Subject: CN=C77956475E0402F0D8E23D44146A9B310488E6E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3c:5a:a9:2d:1f:0c:e9:9d:e8:05:ac:eb:36:
                    06:8c:02:c8:ee:b0:aa:dd:ea:fc:ca:ad:9b:2a:f9:
                    85:fe:d0:9e:46:1b:54:6e:b1:41:47:71:f3:1f:a4:
                    60:c9:21:c3:88:35:6b:3e:96:08:41:60:70:ee:90:
                    8d:69:48:52:e1:99:13:11:9a:d9:a0:8b:dd:26:2f:
                    fc:6b:9f:e3:f9:e8:63:b8:94:c1:38:0c:5e:2b:06:
                    53:33:8f:e8:0e:2f:6b:84:a8:9f:ba:7f:03:b3:46:
                    8b:63:09:ff:26:ed:1d:5f:0f:20:d6:b7:60:f5:a4:
                    7a:81:ed:d3:03:53:37:86:19:fd:79:a9:b8:70:43:
                    f3:dc:ce:75:90:21:ec:5d:4e:9b:d5:dd:fa:67:8d:
                    39:aa:c5:cf:d0:4c:24:7a:92:fa:b8:e0:2e:ea:b2:
                    89:fe:d8:83:e1:e8:0e:2a:cb:8f:d2:82:b0:47:d6:
                    86:e4:7b:c7:08:7d:6a:65:dd:64:60:c2:3f:dd:78:
                    3d:d5:a4:1f:ca:af:a3:9c:83:77:b4:be:c9:25:8d:
                    08:41:7d:50:9c:f9:42:57:1e:0a:c7:88:18:de:e3:
                    bd:48:68:d7:85:4b:90:9c:d6:19:c3:07:8a:e0:93:
                    b7:b0:71:d3:cf:11:c0:4f:a8:eb:86:e9:01:cf:ba:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:56:47:5E:04:02:F0:D8:E2:3D:44:14:6A:9B:31:04:88:E6:E1
            X509v3 Authority Key Identifier:
                keyid:21:61:9A:6D:D0:5D:B1:5F:E1:B2:13:C8:C5:C5:80:B7:55:34:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/21619A6DD05DB15FE1B213C8C5C580B755346175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21619A6DD05DB15FE1B213C8C5C580B755346175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNfKfyUAFNAtzm4REoj6PccExE4k5vGR3kC6FGSXqgDs/1/3138362e3231392e3230382e302f32312d3332203d3e20323632393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:bb:42:c8:0e:54:3c:f9:c1:3c:29:f3:91:a4:e0:c7:5d:
         29:c0:8b:96:e8:3e:78:6b:7d:23:a2:c5:1c:e5:94:96:be:92:
         ef:72:1a:24:fa:7d:05:21:67:72:03:0d:05:2f:4f:7a:50:0b:
         bb:3a:b2:03:0e:0e:58:6a:4f:20:20:7e:98:fd:b6:c7:fb:1d:
         d1:77:83:10:75:57:b6:58:aa:60:38:d2:4c:cf:9b:df:cc:68:
         fb:1c:1b:43:f5:27:31:d0:c8:da:c1:99:87:9e:62:82:9e:10:
         41:cb:f3:73:ac:ee:cf:7c:bd:e3:7b:3c:d1:03:09:72:d1:e4:
         3b:8c:c3:9a:6e:64:68:7f:77:e4:d5:ba:f3:89:72:94:dc:c6:
         be:d5:9f:ff:e0:3e:ae:61:86:4f:12:39:ee:bc:0b:2a:82:be:
         7f:cf:0c:65:9a:bb:90:19:d2:86:49:bd:50:40:da:14:60:d2:
         e6:be:a8:de:ba:13:8e:cb:10:5b:9d:58:0d:3f:75:c8:87:cd:
         c4:ef:46:88:63:45:8e:aa:4e:f2:d8:b3:2c:01:4b:8f:1d:a4:
         85:ea:34:f4:8d:c6:11:48:67:c7:b7:92:b7:35:e3:14:60:80:
         e9:b4:ea:55:c1:b1:f4:a2:ee:94:53:bb:e5:58:16:cf:3d:b7:
         1a:57:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org