Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa
File:                     3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (raw, json)
Hash identifier:          QOxfagp1QYbTlVQ1FnjU7jzqxVQZbOJfWe8t2uMZKtk=
Subject key identifier:   A7:26:8B:A5:B9:02:16:00:6C:00:AF:03:43:B2:E1:51:B5:FE:82:6C
Certificate issuer:       /CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
Certificate serial:       2D9D8DF8E87DD9ADB4B375A78D85C5A8F6FEDAD1
Authority key identifier: BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa
Signing time:             Mon 27 May 2024 14:41:17 +0000
ROA not before:           Mon 27 May 2024 14:36:17 +0000
ROA not after:            Mon 26 May 2025 14:41:17 +0000
asID:                     53158
IP address blocks:        186.209.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:8d:f8:e8:7d:d9:ad:b4:b3:75:a7:8d:85:c5:a8:f6:fe:da:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC82BE57E4F783F1814FC9D4B6B03E6937617A47
        Validity
            Not Before: May 27 14:36:17 2024 GMT
            Not After : May 26 14:41:17 2025 GMT
        Subject: CN=A7268BA5B90216006C00AF0343B2E151B5FE826C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:98:b6:cd:78:38:66:37:22:d4:7a:27:d9:
                    3b:61:f3:86:75:54:0a:ed:33:b1:91:f1:24:10:6b:
                    d1:e5:cf:df:90:9e:28:26:d4:3a:8c:f2:ef:9b:c6:
                    10:74:4e:73:8c:04:70:64:66:00:c2:a9:d5:c0:54:
                    f6:e4:86:b2:08:f8:f2:b6:4e:dd:ef:70:ba:49:2a:
                    ff:eb:e4:83:5b:3f:31:ea:36:b2:be:1f:88:20:3c:
                    89:20:77:3a:d7:2c:18:0d:50:04:54:8e:4d:98:b2:
                    37:48:33:bd:a6:b2:00:1f:dc:ec:78:58:01:d6:80:
                    bd:0f:37:83:e5:a5:30:57:be:7f:f8:31:e0:64:13:
                    68:d9:5a:a4:b7:e1:87:13:b3:56:9e:18:75:70:13:
                    6c:c4:a5:33:81:e6:34:a6:18:fc:d2:3d:b6:e4:d3:
                    33:a8:cf:8e:d9:50:a0:d9:ff:6e:f6:6b:21:b9:6e:
                    53:13:9e:fc:5c:01:7f:1b:fa:6b:b8:2a:42:e4:10:
                    08:d3:6c:f2:42:f5:55:cd:07:ab:ab:95:5e:ae:21:
                    63:8e:74:1c:9f:a9:8e:74:58:89:28:be:3c:b3:06:
                    f7:80:13:1e:c0:0e:35:af:28:0a:5e:3b:81:96:40:
                    be:9c:fb:6c:59:a4:2e:ca:06:86:3d:91:ba:dd:e7:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:8B:A5:B9:02:16:00:6C:00:AF:03:43:B2:E1:51:B5:FE:82:6C
            X509v3 Authority Key Identifier:
                keyid:BC:82:BE:57:E4:F7:83:F1:81:4F:C9:D4:B6:B0:3E:69:37:61:7A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC82BE57E4F783F1814FC9D4B6B03E6937617A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3138362e3230392e34382e302f32302d3234203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:f2:3a:55:12:eb:23:76:62:cd:6c:a2:98:59:74:0d:bf:
         f7:d1:b9:72:07:7a:a6:05:fa:a8:b7:6a:bf:f1:57:3a:53:8a:
         d1:1f:ad:32:5e:8e:f6:be:59:7e:a8:b7:76:a0:b5:1f:c3:3d:
         43:d1:d2:c1:d7:59:78:fc:a7:f3:e5:c4:4c:df:37:52:fa:7c:
         ad:1d:64:75:6c:89:8a:33:cc:5d:3a:91:e8:3b:aa:83:60:fa:
         2a:59:f7:ed:10:3c:bd:5b:f4:e4:bb:e8:c9:29:80:c1:c0:91:
         ae:ac:99:3c:a5:45:61:7a:60:c2:a8:bf:3a:9b:20:5d:75:27:
         69:58:d9:88:0c:93:7a:7f:f5:80:74:84:5c:2a:4c:8c:88:69:
         40:72:c4:39:90:48:93:f2:b1:bd:c9:99:eb:46:e1:55:ca:8a:
         f5:30:14:e8:f7:6c:8f:91:40:9b:3d:cf:13:c0:bc:2a:70:41:
         9c:60:44:4b:68:7f:0d:b6:2f:e1:71:79:3d:38:97:81:0d:e3:
         5b:92:c4:62:65:11:78:1c:8e:24:4e:bb:ef:7f:63:b7:7f:ea:
         bb:54:52:57:fd:d2:f1:6b:58:35:8c:93:df:b5:44:9a:ad:c1:
         1b:8b:0d:64:36:c0:7d:8e:af:07:76:e2:59:db:9f:4e:65:9e:
         7f:d8:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:53 2024 by rpki-client on console-ams.rpki-client.org