Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa
File:                     3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          UQhXYMh6S0pqYdqlc+NiAhKl4OkJlRJyqaQ4ukeD8U0=
Subject key identifier:   E8:F6:F6:5A:8C:4A:D5:79:AE:09:C1:6D:C1:BB:44:50:C6:5B:E6:42
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       1A98F50535D5A172F45BF24CEC992B639609CFE3
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:49 +0000
ROA not before:           Thu 04 Apr 2024 07:27:49 +0000
ROA not after:            Thu 03 Apr 2025 07:32:49 +0000
asID:                     28130
IP address blocks:        186.251.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:98:f5:05:35:d5:a1:72:f4:5b:f2:4c:ec:99:2b:63:96:09:cf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:49 2024 GMT
            Not After : Apr  3 07:32:49 2025 GMT
        Subject: CN=E8F6F65A8C4AD579AE09C16DC1BB4450C65BE642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:79:6c:8a:4d:7a:01:c4:c5:50:03:2d:58:
                    01:94:a8:e7:37:04:b5:99:40:c5:42:86:90:d1:6a:
                    a1:e2:86:4c:68:bc:bb:a3:4c:dc:8d:bb:e5:b8:f6:
                    89:b1:43:b8:2a:05:24:31:c9:39:03:d1:dd:b1:ee:
                    85:8c:46:48:6d:41:db:10:8a:c2:a7:f6:3b:cd:e2:
                    52:21:80:34:58:e7:b5:d6:bd:76:d8:3d:69:20:dc:
                    df:95:a5:51:53:b4:e6:e9:86:9e:82:3c:1b:74:e5:
                    5e:ad:6f:64:23:32:53:3b:16:d6:04:f5:1d:26:de:
                    ee:cb:40:d6:fb:8a:ca:c0:ec:fe:93:49:26:76:da:
                    d8:7e:22:6d:7f:45:11:82:a4:18:db:04:e3:ca:1f:
                    69:7a:af:2f:dd:15:14:39:ae:ba:7f:1f:23:01:fa:
                    e3:d5:4e:97:bf:a5:63:33:e3:63:8a:f6:ed:7d:80:
                    72:64:22:64:97:ab:69:1a:e3:ec:0d:21:5c:1b:53:
                    ea:7d:81:ff:d9:2f:9e:66:2d:f2:5e:af:70:37:75:
                    3c:53:6c:97:b7:ba:d4:f8:1b:c2:94:23:8e:1d:38:
                    67:37:ab:d4:84:50:16:64:90:12:26:27:ca:3b:d5:
                    be:99:ec:e3:95:ee:48:ca:82:21:8a:6e:05:44:4d:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:F6:5A:8C:4A:D5:79:AE:09:C1:6D:C1:BB:44:50:C6:5B:E6:42
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:09:bc:4e:f4:81:a8:4c:52:4a:0c:f7:63:90:a5:9b:36:
         9b:68:fc:b8:a1:77:e7:6b:dc:d1:c6:3d:10:c5:9b:1e:d1:a0:
         df:4a:dc:15:72:b3:26:42:52:bc:6e:4c:88:a0:3d:31:04:fe:
         c2:42:41:85:76:a1:71:29:f4:b4:be:fd:a8:e2:18:39:3c:46:
         40:b7:b2:4e:71:c3:3f:90:01:5b:0c:7f:b9:e9:21:ec:69:28:
         6a:d7:db:02:3d:ac:d6:44:e9:9d:9f:61:5a:03:f1:96:36:10:
         b1:0c:74:9f:fe:9d:44:00:57:d8:f7:1c:5d:44:7b:48:76:ed:
         dc:f1:cf:5f:bf:70:e0:b8:fd:d7:a4:64:de:59:99:e2:03:3d:
         48:b7:ba:d7:30:51:62:9f:07:37:82:a7:25:76:4c:35:a8:a7:
         b1:17:ef:40:dc:ba:c4:0a:6c:cd:22:6d:66:68:af:53:05:b6:
         49:15:05:7e:57:98:49:8a:e6:98:a2:61:90:d6:f9:e0:b6:2c:
         9c:2b:71:89:54:13:d7:b0:f5:28:04:9d:3d:32:f9:e1:3b:5e:
         8f:53:c9:e2:93:7f:32:f5:30:69:e8:6f:c4:dd:02:2b:a6:0c:
         24:cb:95:8b:6d:ab:50:aa:1b:26:6d:ff:cb:ee:7c:d1:18:13:
         87:f8:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:12 2024 by rpki-client on console-ams.rpki-client.org