Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
File:                     3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa (raw, json)
Hash identifier:          4khjfNYXHri7B5NEr9NZegb7bCN1VmyoXbMBqp8vIRU=
Subject key identifier:   23:28:1A:0E:48:69:7C:20:0F:6B:9A:B1:9A:B0:91:12:8D:CE:1C:D1
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       51EF3DCE65FE3FCCA6EF37C4DAF9B1EA55A10067
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
Signing time:             Mon 05 Aug 2024 11:48:52 +0000
ROA not before:           Mon 05 Aug 2024 11:43:52 +0000
ROA not after:            Mon 04 Aug 2025 11:48:52 +0000
asID:                     262972
IP address blocks:        186.227.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ef:3d:ce:65:fe:3f:cc:a6:ef:37:c4:da:f9:b1:ea:55:a1:00:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Aug  5 11:43:52 2024 GMT
            Not After : Aug  4 11:48:52 2025 GMT
        Subject: CN=23281A0E48697C200F6B9AB19AB091128DCE1CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:25:81:fa:6d:5f:8a:48:5d:dc:60:8e:81:
                    6e:8e:e0:de:fb:d8:e4:17:fc:de:52:0a:e2:cc:15:
                    fe:df:6c:47:8c:41:40:fe:a3:74:05:35:76:a3:2f:
                    ce:d3:7b:93:77:e6:d0:6c:ad:6b:2e:5c:b9:af:11:
                    ce:17:08:8f:d2:ff:12:15:5a:11:ba:48:71:a9:cd:
                    eb:a8:99:ab:bd:eb:b1:1b:bd:cb:36:f9:92:f4:57:
                    6e:69:db:a7:d1:d7:a9:f4:07:3b:15:db:66:66:d9:
                    87:bf:93:b1:1d:5f:73:d5:1a:3a:bc:a0:c9:06:b6:
                    10:a2:7e:48:62:7d:b9:94:4f:13:5e:c7:7d:f3:9f:
                    9a:92:39:55:cd:74:ba:6c:eb:10:7f:4a:b9:38:b9:
                    76:5a:73:d6:1d:ca:77:ad:c7:69:8f:a7:a2:60:5e:
                    9c:cb:14:0e:15:bc:68:9c:cc:44:c9:bd:55:e2:b2:
                    5f:b9:d7:63:37:d5:76:97:4d:b6:0d:2e:1f:d8:c7:
                    68:b1:55:96:5b:db:ec:08:14:29:7c:a2:49:d7:f6:
                    0c:83:22:96:09:c8:2a:26:8d:d3:28:04:6c:85:13:
                    fe:cf:8b:78:6a:98:1b:58:5d:3f:33:b4:de:d0:0a:
                    eb:ca:66:53:61:79:a1:bc:1d:2b:23:d8:64:7c:a2:
                    4c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:1A:0E:48:69:7C:20:0F:6B:9A:B1:9A:B0:91:12:8D:CE:1C:D1
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:1e:7b:60:ff:11:99:3b:3e:c0:3f:a7:f4:bf:f4:0a:49:
         e1:dc:38:ba:5d:1d:0c:c3:f8:81:02:14:c5:5e:77:72:98:53:
         fc:fe:5c:bc:92:5e:ad:5e:8c:d3:86:44:e5:8e:3f:ef:a4:c0:
         a0:01:6e:ee:64:8d:87:5b:b4:a9:3b:ba:c2:04:c4:43:8c:02:
         8b:dd:76:1e:e7:71:c7:a1:ca:a5:6b:30:9b:88:67:ae:c0:19:
         71:4c:05:93:08:e6:b9:04:69:2f:87:af:48:b9:27:34:9d:a7:
         91:9a:29:64:7b:aa:8e:3d:66:6d:b6:2d:90:8d:3e:ba:d9:2c:
         c5:f8:3b:c8:f6:6b:20:2d:96:8c:a8:88:4e:3d:6b:21:a2:15:
         bd:f1:93:46:b0:63:d4:1b:ea:94:7a:81:b1:5b:15:3c:13:00:
         d1:97:90:16:b5:5d:6d:ed:a2:b2:4d:03:1f:58:91:3f:4b:16:
         6f:ab:0f:c9:f8:d9:68:63:68:f3:1e:cc:83:91:f8:57:c4:db:
         27:70:e8:0a:3f:49:ef:42:4a:c2:ea:3e:b7:a8:44:3a:81:56:
         6b:dc:0b:b1:a9:8a:1c:f2:8e:8e:a4:42:e7:72:d3:d8:f4:0f:
         d0:c0:29:aa:d5:a2:12:30:78:ab:79:cc:a3:89:e3:6c:03:cf:
         4a:cd:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:20 2024 by rpki-client on console-ams.rpki-client.org