Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/3138362e3232342e3234342e302f32342d3234203d3e20323632373538.roa
File:                     3138362e3232342e3234342e302f32342d3234203d3e20323632373538.roa (raw, json)
Hash identifier:          0nlVdgQNDGXDcuqcAOoYAHAiRgc20Fu4ogVDm06ntEM=
Subject key identifier:   BF:DC:A4:7C:71:51:77:12:06:3F:B2:BB:DC:34:2C:6F:E6:A3:2A:1A
Certificate issuer:       /CN=8E4B2F03150374B75EF6EA86D73B6950B75B49AC
Certificate serial:       314B9854B4FB138F6D2347855140AB5226EDFA74
Authority key identifier: 8E:4B:2F:03:15:03:74:B7:5E:F6:EA:86:D7:3B:69:50:B7:5B:49:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/3138362e3232342e3234342e302f32342d3234203d3e20323632373538.roa
Signing time:             Thu 04 Apr 2024 20:12:38 +0000
ROA not before:           Thu 04 Apr 2024 20:07:38 +0000
ROA not after:            Thu 03 Apr 2025 20:12:38 +0000
asID:                     262758
IP address blocks:        186.224.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4b:98:54:b4:fb:13:8f:6d:23:47:85:51:40:ab:52:26:ed:fa:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E4B2F03150374B75EF6EA86D73B6950B75B49AC
        Validity
            Not Before: Apr  4 20:07:38 2024 GMT
            Not After : Apr  3 20:12:38 2025 GMT
        Subject: CN=BFDCA47C71517712063FB2BBDC342C6FE6A32A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:02:2c:25:de:72:fc:0e:24:00:5c:c8:55:
                    23:dc:1e:76:4c:bd:df:2e:e5:b3:1c:f7:8f:36:b6:
                    2d:9a:5c:74:1e:a1:00:5e:9a:0c:51:53:7b:ed:62:
                    fa:98:20:94:de:eb:fd:a4:24:e4:fd:77:d2:9e:8a:
                    ef:c4:f2:ec:6e:eb:84:55:e0:6a:33:74:5f:76:94:
                    60:9e:48:42:db:f8:3d:e7:3e:f0:9c:f8:64:58:36:
                    f8:cf:d8:b8:f7:6c:50:2b:16:0d:6d:8f:04:5a:b5:
                    93:05:1f:ab:67:5b:9e:3f:8b:b8:1b:f0:50:4e:f4:
                    55:b6:de:c1:6d:14:27:be:30:c4:fc:12:6c:79:35:
                    89:7d:86:aa:08:23:2b:33:13:ca:7d:04:04:1f:46:
                    0d:05:97:6e:32:0e:ce:5c:14:b0:26:a4:71:2e:7e:
                    d4:65:7e:e0:cf:db:c1:74:7a:2b:5f:69:f6:57:15:
                    3e:7b:fc:d4:73:fc:1e:39:e7:53:bb:6e:a5:9d:40:
                    83:04:f3:36:ed:af:af:98:f5:cf:4a:e7:83:a7:0a:
                    8f:4f:56:98:96:0f:e0:11:62:bf:e4:02:95:8a:eb:
                    ed:53:cb:0d:23:73:7d:5d:89:14:f9:17:39:b1:81:
                    0c:28:01:0a:a0:7b:23:fa:0d:8f:52:64:6b:10:ff:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:A4:7C:71:51:77:12:06:3F:B2:BB:DC:34:2C:6F:E6:A3:2A:1A
            X509v3 Authority Key Identifier:
                keyid:8E:4B:2F:03:15:03:74:B7:5E:F6:EA:86:D7:3B:69:50:B7:5B:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/3138362e3232342e3234342e302f32342d3234203d3e20323632373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:01:83:6d:c9:30:fe:ac:5b:89:b0:0f:7d:86:bc:76:2a:4e:
         35:06:88:2d:c1:7a:04:d3:5e:09:ab:08:46:14:3d:4a:75:28:
         e8:55:14:04:09:ff:85:ed:6d:43:77:9d:fb:01:70:99:3f:f8:
         48:26:df:59:b4:39:d3:64:19:44:73:bf:1f:d8:d1:e0:63:74:
         f1:38:82:95:73:90:ca:b6:ae:f1:c8:02:da:3c:f6:9f:11:33:
         81:b0:f7:1f:09:c0:d0:bc:3a:b5:26:1b:32:3e:0f:32:77:56:
         99:3c:5e:c6:d9:0f:93:e2:ab:c4:bd:a3:e1:ce:c2:02:78:62:
         f1:75:ad:c8:be:c0:2f:cf:cb:e4:cc:21:e9:1d:b7:8f:08:6d:
         97:b8:5e:6e:e6:b3:96:48:a3:a6:68:7f:a3:0a:d2:6d:21:76:
         96:f7:6a:98:58:c1:ff:4a:fa:ee:ee:41:28:91:91:d3:1b:17:
         5e:ca:10:a2:fb:5d:a7:e9:9c:c7:89:45:0c:26:48:ee:a7:a5:
         86:73:c5:58:96:b4:ed:5d:ff:82:f5:02:eb:70:cb:e5:df:9b:
         ca:96:74:12:82:ae:e0:21:76:53:14:c5:97:4b:e7:2f:74:70:
         91:b1:de:89:c4:66:9a:69:ef:f1:0c:dd:89:0d:d2:65:fe:63:
         fe:5e:5c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:39 2024 by rpki-client on console-fra.rpki-client.org