Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3132332e302f32342d3234203d3e203631363231.roa
File:                     3138362e3230392e3132332e302f32342d3234203d3e203631363231.roa (raw, json)
Hash identifier:          eOhe4Q/pIN+8tutkZwO2ogLxTNkxGuPxfIr6PjrBcQE=
Subject key identifier:   95:B9:4E:6A:2D:90:3A:88:0F:7A:DC:A0:A5:86:D4:D7:ED:6B:54:8C
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       22F393D1FE976EA98D6941F1E2419BC1BF77E632
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3132332e302f32342d3234203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 01:05:12 +0000
ROA not before:           Wed 20 Nov 2024 01:00:12 +0000
ROA not after:            Wed 19 Nov 2025 01:05:12 +0000
asID:                     61621
IP address blocks:        186.209.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f3:93:d1:fe:97:6e:a9:8d:69:41:f1:e2:41:9b:c1:bf:77:e6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 01:00:12 2024 GMT
            Not After : Nov 19 01:05:12 2025 GMT
        Subject: CN=95B94E6A2D903A880F7ADCA0A586D4D7ED6B548C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:e4:12:d8:b6:89:f8:9a:6a:37:e4:2b:fe:
                    64:05:1b:3f:b7:f1:2e:e3:68:87:3f:c8:28:7e:04:
                    e6:b6:3a:2c:66:8c:eb:aa:ef:30:c0:6e:d2:4b:a9:
                    c8:84:72:93:0f:f3:ac:06:43:ff:58:10:fc:8e:e5:
                    b1:78:bd:ab:93:4d:82:7c:ac:b1:ee:ea:44:4c:28:
                    43:43:d2:c6:46:bf:db:f5:95:c8:0c:25:40:c9:7a:
                    2c:60:1c:70:e0:ba:c4:5d:e0:44:38:3a:93:2f:aa:
                    66:3b:94:19:62:9b:ea:ad:cc:91:25:15:c4:fa:36:
                    59:e8:cf:16:da:14:b4:b6:51:28:b2:01:90:a3:86:
                    49:1e:17:af:6b:e3:a6:07:0b:3d:d5:f8:b1:4e:bd:
                    1b:70:4f:48:01:37:78:2d:e8:0f:af:bd:be:e8:c9:
                    03:ae:0b:31:0f:5a:8f:30:d2:45:8f:02:30:33:2d:
                    b5:5f:79:50:0f:13:f8:03:df:b3:d0:51:d1:bf:ce:
                    10:da:3f:8c:f2:51:f2:15:6b:90:cc:93:6d:d9:2d:
                    2b:55:e0:5e:a2:cc:29:04:08:f6:5e:00:a3:d1:ac:
                    05:9f:68:1e:ac:17:4f:0a:76:44:ab:c7:6f:6e:12:
                    7c:60:12:79:d6:33:98:9c:f8:59:82:c9:1b:14:4b:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:4E:6A:2D:90:3A:88:0F:7A:DC:A0:A5:86:D4:D7:ED:6B:54:8C
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3138362e3230392e3132332e302f32342d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:10:6b:84:2c:4e:51:2b:d9:ca:22:e0:f7:e7:a8:2c:c0:dd:
         33:01:9d:c9:50:bc:5e:91:be:b9:80:f5:73:bf:a6:0b:86:0d:
         18:6c:77:ef:2c:a3:ce:3f:42:e2:4a:e3:6d:ea:35:35:6f:fe:
         6b:34:a7:40:a8:f4:a0:6c:ff:42:5b:ce:0a:01:93:30:a1:d7:
         79:27:e6:e0:c3:0a:ce:be:a8:87:12:4c:16:79:b0:18:04:62:
         a4:25:c0:93:ab:7d:d7:a9:d7:b5:25:f3:d5:77:8c:ec:2f:88:
         92:1a:18:75:47:a3:62:2b:e7:26:0f:5e:ab:ca:02:9d:81:07:
         1f:5b:af:4e:de:56:1a:7a:f7:b3:33:81:c9:66:5f:b9:fc:70:
         ed:58:b9:bc:ca:ee:26:f6:37:a5:03:a0:35:ae:49:ec:9f:02:
         83:98:bb:3d:57:8f:75:c7:d5:78:e2:9f:56:a6:ef:08:b8:1b:
         05:eb:1e:ff:0b:6d:4f:37:74:c1:39:45:3c:68:9c:97:a7:80:
         68:b5:76:94:a1:75:db:0b:a5:76:57:34:da:14:70:21:b4:3c:
         3e:3d:39:a8:4b:aa:d6:a6:84:77:d3:d4:a2:f3:2f:ab:3c:27:
         b9:bc:56:fe:86:6b:51:a8:34:a5:e1:34:c8:40:74:8d:69:a8:
         a2:46:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:43 2024 by rpki-client on console-fra.rpki-client.org