Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e312e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e312e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          L/v9d8EJgVRkC5fXLdjEvvxq8yJPfqxIb/sbwbdlGUM=
Subject key identifier:   9C:D0:85:7B:FC:E7:35:B5:A6:F9:E7:47:64:2F:40:73:16:4F:D2:BE
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       4AFB035DF637F4A7BB09FEF059AF5AF36643C9A3
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e312e302f32342d3234203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:42 +0000
ROA not before:           Thu 04 Apr 2024 20:05:42 +0000
ROA not after:            Thu 03 Apr 2025 20:10:42 +0000
asID:                     28135
IP address blocks:        187.86.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fb:03:5d:f6:37:f4:a7:bb:09:fe:f0:59:af:5a:f3:66:43:c9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:42 2024 GMT
            Not After : Apr  3 20:10:42 2025 GMT
        Subject: CN=9CD0857BFCE735B5A6F9E747642F4073164FD2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:a1:ef:cf:2c:78:52:db:53:11:e4:4c:50:
                    c5:11:27:a1:e1:60:5a:fb:3f:88:b6:2d:57:4f:5b:
                    f6:1c:6f:db:dd:ec:e9:53:43:ab:af:58:7a:fd:0a:
                    1e:0e:20:0a:10:83:6e:6f:fe:0d:90:62:97:4f:19:
                    b1:6e:15:1d:ec:dd:56:71:21:13:d0:d8:2a:97:13:
                    99:54:8a:10:66:7b:b0:d6:b1:86:e5:ee:8d:69:bd:
                    51:41:d8:24:21:47:7a:57:3f:38:70:bc:a4:4f:4a:
                    5c:f8:d1:73:27:e8:35:b0:89:3b:e8:ac:eb:33:00:
                    67:25:34:80:7a:2b:be:1a:c6:3e:3a:d8:2e:17:cc:
                    3d:e9:3d:6e:ee:8e:61:67:8e:ec:2f:b3:23:40:7b:
                    0f:de:f8:8b:9c:fa:44:d6:67:c0:4e:0f:fe:60:d4:
                    f4:1f:2a:44:fd:af:fd:7f:ef:34:7f:d8:62:46:82:
                    1e:94:64:fd:e1:a0:2b:a8:97:5c:cb:44:81:bd:59:
                    74:95:41:f9:84:94:93:44:ba:42:65:55:3a:15:a0:
                    5c:57:d6:31:f5:df:3a:1f:b9:40:e7:ee:ea:f9:72:
                    2d:41:03:ef:dc:b7:e4:90:76:56:96:83:53:9f:9e:
                    f2:77:ee:27:67:25:f0:18:97:15:00:91:b0:de:5c:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:85:7B:FC:E7:35:B5:A6:F9:E7:47:64:2F:40:73:16:4F:D2:BE
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e312e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:3a:0f:bc:75:07:0b:26:01:f6:9b:d6:c6:72:08:65:b0:
         b4:af:13:5e:d7:7f:33:7d:04:9a:5b:f4:ca:0f:bd:51:45:02:
         9b:2a:7d:f2:ab:5c:15:17:1d:ff:30:ab:4e:4a:bd:6a:2b:b4:
         fd:79:9d:86:96:6e:bb:bc:7c:35:a6:00:83:a1:40:a9:3c:9e:
         c4:af:8f:51:83:fb:4f:f7:43:66:47:03:f1:ad:20:44:ab:d9:
         ec:a1:83:a9:28:7f:0c:9e:9a:fd:f9:26:26:cd:d8:3c:c6:8c:
         de:dd:92:bb:be:db:43:42:f3:3d:79:e9:af:f7:6f:a0:e4:c6:
         ea:08:10:73:79:4d:cc:17:a0:64:aa:e9:35:dc:f8:23:ce:69:
         3a:1e:ea:96:9e:f9:95:ae:9a:4c:69:17:89:33:91:30:28:09:
         05:11:c2:2e:35:87:6d:e2:9c:9d:b2:ee:73:40:c1:ab:3c:02:
         83:c8:57:98:ca:b8:1d:d5:a7:1c:30:79:49:45:d1:8a:a4:cc:
         ef:49:68:9b:df:1b:be:1c:01:0a:00:5d:38:a4:78:23:7e:64:
         be:e5:59:ed:9c:4a:84:dc:6a:d2:44:52:32:60:cf:43:c3:d7:
         5e:30:4a:36:81:fb:27:9f:d0:32:d3:9e:bf:51:d8:07:69:b9:
         8b:d5:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org