Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3138362e3235312e38302e302f32312d3332203d3e203533323233.roa
File:                     3138362e3235312e38302e302f32312d3332203d3e203533323233.roa (raw, json)
Hash identifier:          573mIUEsMazU9aU2hdN742J0b6XDN8PFNZlq1l9n8vQ=
Subject key identifier:   30:FF:41:C6:EA:49:7F:DC:70:F8:EF:63:28:F4:A2:12:0E:96:4F:8E
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       57564050E4CD3E5543A303F3D97D989135DB72CF
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3138362e3235312e38302e302f32312d3332203d3e203533323233.roa
Signing time:             Mon 15 Jul 2024 17:47:40 +0000
ROA not before:           Mon 15 Jul 2024 17:42:40 +0000
ROA not after:            Mon 14 Jul 2025 17:47:40 +0000
asID:                     53223
IP address blocks:        186.251.80.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:56:40:50:e4:cd:3e:55:43:a3:03:f3:d9:7d:98:91:35:db:72:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Jul 15 17:42:40 2024 GMT
            Not After : Jul 14 17:47:40 2025 GMT
        Subject: CN=30FF41C6EA497FDC70F8EF6328F4A2120E964F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:c7:25:27:44:0c:7f:9f:5a:01:1c:83:bb:
                    0e:e9:9a:f4:b0:f9:a7:f8:87:7d:2d:4c:8e:b1:49:
                    a9:17:b4:93:ea:75:91:f0:ec:7d:9f:c2:64:30:cd:
                    5a:fc:76:f8:4c:42:03:f6:00:69:54:36:50:84:84:
                    29:b1:80:ef:9f:47:5c:05:28:86:9f:76:93:f8:1d:
                    91:05:c9:7f:77:61:92:d1:a3:80:f0:a1:af:43:45:
                    ad:3c:4f:97:d0:e6:d8:e4:c2:e1:96:fc:44:d9:3c:
                    21:b8:a3:d8:d9:44:74:57:d2:dc:f2:68:1f:0a:57:
                    42:47:63:c6:7e:f0:19:ed:a8:e6:50:bf:33:71:20:
                    44:ee:9b:72:81:8b:28:eb:12:98:0a:2e:9e:aa:b6:
                    8a:68:53:15:a9:14:9c:bc:d1:25:36:6f:39:2c:0a:
                    b9:70:f7:9c:b2:db:dd:73:44:d9:9d:e4:46:b4:21:
                    37:4e:93:b2:57:fa:b2:e4:33:a7:63:6e:f3:51:02:
                    05:cc:41:05:38:c3:1c:58:ff:6d:1e:98:34:d1:fe:
                    01:40:1b:b4:a2:a0:e7:8e:f0:02:1e:26:12:6b:41:
                    d5:8e:85:1f:84:3a:43:3b:09:b2:2a:80:9e:f7:19:
                    fb:72:7e:5b:86:4d:65:43:5e:05:db:5a:6c:57:76:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FF:41:C6:EA:49:7F:DC:70:F8:EF:63:28:F4:A2:12:0E:96:4F:8E
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3138362e3235312e38302e302f32312d3332203d3e203533323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:68:d4:47:7c:7a:cb:f6:e8:04:00:a6:79:66:81:8f:0a:f3:
         5e:c3:9d:ea:2e:59:0e:e7:6a:11:f9:a0:89:b5:8a:be:b0:e9:
         9a:b8:44:46:f9:fd:81:3f:f6:b5:91:98:79:bd:05:bb:05:9a:
         a2:3d:94:7e:36:4c:52:08:65:20:b8:74:8a:83:07:63:a5:cc:
         ae:85:52:55:f9:2f:23:09:2a:c2:fb:b1:67:ae:52:bd:47:56:
         d5:77:9d:8b:67:c4:d8:03:06:1f:5c:87:ee:70:df:64:eb:cc:
         85:91:61:73:14:87:d6:3a:53:6f:bf:a0:8f:1c:71:5d:7f:cb:
         70:6a:18:1f:d0:0a:b4:b1:9b:1a:d0:00:a8:4b:79:c8:97:29:
         41:b8:e2:73:19:de:23:8a:ac:e4:94:33:4f:ce:af:7b:b5:09:
         62:7b:ed:6e:bf:c0:c3:f7:48:12:d7:e0:e8:1e:ea:18:e3:75:
         e4:38:6b:56:1c:4b:a3:5e:27:4d:0b:7c:6e:25:ed:a9:4e:ca:
         0e:76:ca:4c:9f:c6:23:94:df:1d:2d:f4:6a:31:49:c2:64:3a:
         25:cc:b8:b9:82:b4:ba:d6:ca:e8:b5:66:ce:2d:41:67:d9:27:
         88:4d:c8:8c:20:c3:d5:37:07:b9:96:4c:4f:9d:53:e5:44:28:
         09:36:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:47 2024 by rpki-client on console-ams.rpki-client.org