Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3138362e3232372e302e302f32302d3234203d3e20323632373635.roa
File:                     3138362e3232372e302e302f32302d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          cnfer3iwjCNPA/FiAknl3nyVG2hFQLCKpocSmP8aXQc=
Subject key identifier:   87:A7:E8:C7:46:C3:CF:7A:BC:8A:B4:60:82:6E:F0:8F:AC:25:0B:0D
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       09CFA79100E161257C87B182BA794078958C6904
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3138362e3232372e302e302f32302d3234203d3e20323632373635.roa
Signing time:             Fri 01 Nov 2024 13:10:32 +0000
ROA not before:           Fri 01 Nov 2024 13:05:32 +0000
ROA not after:            Fri 31 Oct 2025 13:10:32 +0000
asID:                     262765
IP address blocks:        186.227.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cf:a7:91:00:e1:61:25:7c:87:b1:82:ba:79:40:78:95:8c:69:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Nov  1 13:05:32 2024 GMT
            Not After : Oct 31 13:10:32 2025 GMT
        Subject: CN=87A7E8C746C3CF7ABC8AB460826EF08FAC250B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:1b:f2:a1:d4:a2:98:61:0a:9d:53:6e:b1:
                    32:94:76:a1:c2:36:c7:d0:88:57:1f:33:70:a3:cf:
                    1c:53:05:03:ec:2d:b2:48:0e:87:d8:3c:b0:9d:21:
                    13:97:6c:42:00:cf:36:5b:29:64:9c:3e:b6:db:5d:
                    76:51:12:13:8d:05:8c:82:9d:b7:39:12:0a:0a:ba:
                    1a:38:3e:ce:19:e0:d6:f8:64:88:f5:7a:d5:1f:e3:
                    9c:37:38:83:7c:c9:70:11:b9:2a:f8:70:ce:c1:87:
                    04:11:a6:be:c7:ce:b4:a6:c1:9f:6d:4b:99:2e:c4:
                    52:f2:9a:33:e9:44:2e:e7:e7:b3:0d:99:36:79:ba:
                    d6:78:cc:70:f2:54:59:ab:23:6a:05:4c:54:e8:92:
                    8d:70:b2:b3:9a:c8:ee:cd:d5:5a:bc:e5:a8:dd:ec:
                    98:96:55:6d:c1:c6:a8:5b:93:80:87:59:08:75:93:
                    89:9c:96:9a:35:00:cd:c7:33:95:98:44:4a:df:58:
                    af:d1:97:c2:b1:e4:03:df:6b:24:ee:63:f9:c3:42:
                    30:90:c3:47:5b:f8:c7:ba:3e:dd:91:2b:42:04:e7:
                    9d:56:83:78:76:00:da:6b:d7:dc:fe:fc:5d:5d:d5:
                    32:6b:56:03:b2:30:25:ee:90:92:2f:48:ab:68:72:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:E8:C7:46:C3:CF:7A:BC:8A:B4:60:82:6E:F0:8F:AC:25:0B:0D
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3138362e3232372e302e302f32302d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:df:91:ec:c3:bd:5c:98:b1:89:00:7e:0c:77:31:bf:bd:8e:
         13:22:cd:c7:a8:fe:58:54:ba:c9:1b:92:3c:73:8e:9d:5c:4d:
         79:94:b7:55:8b:f0:8b:bd:ad:00:b7:7c:b7:ba:e9:71:37:d1:
         f2:02:34:aa:8d:43:c2:7b:dd:8a:ab:2f:6d:19:58:13:28:f1:
         57:ac:43:3d:01:50:b2:ca:69:0f:fc:5b:54:5f:07:ce:80:be:
         fc:43:d2:ac:84:09:87:59:ec:59:d9:b9:83:cb:c7:ac:11:54:
         d8:f7:17:46:d4:41:06:a1:f3:f1:6d:62:24:e3:46:c3:06:23:
         99:5a:f7:ec:3d:57:b9:16:a1:61:72:a6:a1:4d:04:d1:7c:8f:
         2c:6f:1a:9e:62:42:ec:47:16:ec:50:f8:4b:df:77:ea:9e:0a:
         28:cb:d9:4f:85:c8:b2:e5:51:26:59:4d:2b:54:23:13:68:e9:
         f4:44:5e:6d:57:d9:f1:ed:8f:eb:a9:6f:f0:73:6d:b2:c3:a2:
         ea:23:91:53:e7:83:58:b8:13:73:df:02:38:34:00:f5:d4:3f:
         ce:e8:95:b0:30:09:29:88:16:2b:38:61:6f:9c:f9:bb:d6:a4:
         a5:99:87:68:3c:fe:b2:0b:cf:2a:19:67:12:12:70:ac:a1:04:
         1f:f3:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org