Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa
File:                     3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (raw, json)
Hash identifier:          NDp9eJe+42eDm6yXHvEdf9HcdpGANCOWFpMiqcNAZv8=
Subject key identifier:   78:65:CF:01:C1:99:2F:F8:39:2A:A7:7F:C7:4E:4F:B3:E7:1C:49:AE
Certificate issuer:       /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial:       0B26A6EF3FB370B04107C5A2C7DE53E846689804
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa
Signing time:             Mon 15 Jul 2024 19:15:00 +0000
ROA not before:           Mon 15 Jul 2024 19:10:00 +0000
ROA not after:            Mon 14 Jul 2025 19:15:00 +0000
asID:                     262758
IP address blocks:        186.224.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 07:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:a6:ef:3f:b3:70:b0:41:07:c5:a2:c7:de:53:e8:46:68:98:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Validity
            Not Before: Jul 15 19:10:00 2024 GMT
            Not After : Jul 14 19:15:00 2025 GMT
        Subject: CN=7865CF01C1992FF8392AA77FC74E4FB3E71C49AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:e3:55:56:0d:4f:2d:88:3a:04:4c:51:51:
                    ec:90:1c:71:41:5b:de:ef:d9:df:0b:09:1a:d4:da:
                    9c:34:36:05:28:ea:bb:d4:2a:fd:b8:86:21:ba:09:
                    30:f3:e5:67:16:b0:79:7f:1b:96:a5:82:74:7b:e9:
                    ec:d4:ae:3c:6d:85:75:9b:ae:36:2f:c5:5b:cb:f3:
                    8a:99:27:62:29:28:21:94:b2:a4:d1:e0:90:d5:a7:
                    84:11:fe:08:8c:3e:ea:b4:83:8f:de:f3:b3:52:40:
                    af:54:0d:16:94:dc:bb:1f:33:16:34:61:ad:6f:2d:
                    58:17:eb:02:17:2b:b5:8e:a7:6c:96:16:29:40:21:
                    be:76:4b:a8:d2:7b:f9:8d:98:04:d5:d0:63:b3:77:
                    4c:0a:f0:5f:05:1b:a0:93:68:ce:39:2e:b2:bf:9b:
                    49:16:e5:6f:b2:6d:ff:27:71:e8:10:52:3f:fb:94:
                    f2:46:3a:03:3b:2f:76:21:b9:80:e4:f4:28:af:94:
                    92:8d:34:ed:03:04:e5:ef:a2:db:bc:66:50:95:a6:
                    db:55:f9:45:cc:d0:45:f6:3c:5d:81:a4:e5:b2:c8:
                    27:a6:40:76:e7:fd:b5:8b:15:f9:de:fb:be:0d:44:
                    2f:3f:4b:6e:30:40:d5:e6:5a:34:93:c5:55:63:bb:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:65:CF:01:C1:99:2F:F8:39:2A:A7:7F:C7:4E:4F:B3:E7:1C:49:AE
            X509v3 Authority Key Identifier:
                keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:66:72:01:f7:35:a9:92:4e:e8:6a:cb:bd:a4:5a:a7:fe:
         02:4d:41:73:9f:f7:b6:6f:9f:67:62:57:45:6d:2a:ec:21:cb:
         e7:32:33:79:6a:37:71:2e:be:6d:4f:b4:2b:a9:75:e4:c5:6a:
         ec:9f:d3:da:2e:c9:52:5e:d7:b9:e5:98:b1:14:c5:b3:71:40:
         cb:6a:5e:41:af:10:85:93:1a:5d:4b:1d:02:98:bc:df:45:99:
         53:81:00:57:6c:1d:1e:01:e5:82:f8:ac:e5:fb:3b:c0:56:11:
         83:54:64:65:81:f9:21:4d:a7:15:02:f8:4b:dc:d0:06:f2:1d:
         ed:79:a0:a5:06:10:07:75:fe:a4:a8:07:20:c3:2c:c0:86:3b:
         ad:d6:71:42:a9:1c:eb:39:8b:a2:8d:81:7c:82:94:4e:40:20:
         74:b8:05:c3:78:43:c8:52:0b:82:e6:5d:fb:a0:a8:8e:0d:5e:
         92:1a:c7:72:13:7c:37:70:5f:cf:46:ec:0a:72:c6:3f:a4:d4:
         2a:d5:b4:41:da:7d:ca:44:f2:f2:6c:f7:ee:14:08:d5:b5:0b:
         30:a8:5c:10:d6:bb:cf:0a:77:33:16:c4:49:38:f1:1e:c1:7b:
         89:36:95:59:bb:1b:15:bd:83:29:cf:cc:00:00:a9:aa:e8:27:
         fe:3c:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:31:29 2025 by rpki-client