Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/3138362e3232342e3235302e302f32342d3234203d3e20323632373538.roa
File:                     3138362e3232342e3235302e302f32342d3234203d3e20323632373538.roa (raw, json)
Hash identifier:          jQikLkL04RCEMy18S+/SLEsVRL4rubBjBFFh7Xv5peQ=
Subject key identifier:   EB:45:71:D9:E5:81:B0:FB:A5:3F:65:B6:39:3C:E4:01:E3:02:07:C7
Certificate issuer:       /CN=8E4B2F03150374B75EF6EA86D73B6950B75B49AC
Certificate serial:       3EA640A8D1B767A73FFC26E928F92D24A3D4D60F
Authority key identifier: 8E:4B:2F:03:15:03:74:B7:5E:F6:EA:86:D7:3B:69:50:B7:5B:49:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/3138362e3232342e3235302e302f32342d3234203d3e20323632373538.roa
Signing time:             Thu 04 Apr 2024 20:12:40 +0000
ROA not before:           Thu 04 Apr 2024 20:07:40 +0000
ROA not after:            Thu 03 Apr 2025 20:12:40 +0000
asID:                     262758
IP address blocks:        186.224.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a6:40:a8:d1:b7:67:a7:3f:fc:26:e9:28:f9:2d:24:a3:d4:d6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E4B2F03150374B75EF6EA86D73B6950B75B49AC
        Validity
            Not Before: Apr  4 20:07:40 2024 GMT
            Not After : Apr  3 20:12:40 2025 GMT
        Subject: CN=EB4571D9E581B0FBA53F65B6393CE401E30207C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:79:7b:72:e5:26:96:50:87:3d:77:9e:63:
                    91:c1:9d:cb:5d:7b:2d:da:bb:9a:01:cd:ae:59:40:
                    2c:19:dd:f3:dd:8a:2d:b8:18:77:83:b0:05:4f:5e:
                    90:f3:28:b6:21:76:9c:68:55:9a:c4:29:6f:a0:f3:
                    b9:23:86:9d:2c:a7:51:f3:39:57:c9:07:2c:9f:fc:
                    fb:56:94:b0:90:13:4f:50:bf:06:c0:21:6b:a0:e9:
                    24:b2:c0:fe:b7:bf:b6:96:1c:13:3f:ae:e3:cd:2c:
                    c0:85:54:29:0e:af:89:ee:ab:52:a5:18:7e:0d:41:
                    e3:45:5a:37:e0:e2:7e:66:1c:ae:61:f6:09:c9:db:
                    6e:ec:ce:a5:87:9f:37:a8:01:eb:92:0c:fc:2b:03:
                    26:b4:e4:df:cb:e7:b0:59:72:a3:99:01:90:60:f0:
                    b5:8a:7e:33:0c:2c:a7:54:c8:01:98:af:b6:75:4f:
                    bb:5f:44:66:06:27:11:a1:d9:e4:ea:62:b5:33:0b:
                    40:0b:84:ec:e1:04:9b:53:a9:75:47:54:c4:80:1b:
                    fd:2b:d5:ef:5b:92:0c:51:77:3a:61:46:ea:0d:da:
                    7e:32:de:a4:db:81:11:2e:55:bc:11:39:f5:af:72:
                    43:3c:d3:92:1f:36:f4:3d:b3:ea:e2:25:4e:bd:ee:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:71:D9:E5:81:B0:FB:A5:3F:65:B6:39:3C:E4:01:E3:02:07:C7
            X509v3 Authority Key Identifier:
                keyid:8E:4B:2F:03:15:03:74:B7:5E:F6:EA:86:D7:3B:69:50:B7:5B:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/3138362e3232342e3235302e302f32342d3234203d3e20323632373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:cd:ba:68:53:11:cd:cd:1c:8d:0e:49:c3:ab:dc:64:61:a7:
         b5:3b:b4:4d:e1:ce:89:6d:ea:25:e6:8c:86:c8:c1:d8:3c:4a:
         ad:8b:de:9f:82:68:58:94:dc:ee:2d:83:0f:64:12:bf:e9:81:
         10:4c:52:d8:68:c6:0a:75:3e:81:15:21:81:ae:1e:c0:e1:87:
         a6:c5:a2:2b:e5:e9:7c:51:61:a9:d8:30:38:11:a6:04:ce:6c:
         b0:67:e3:b2:a7:3b:15:d0:1d:5d:8a:f6:de:c5:c9:a4:73:23:
         c0:49:03:d7:b6:48:3b:7e:04:cc:37:dd:fa:d8:42:cf:b0:f4:
         42:b1:ad:7a:df:64:15:64:22:68:57:e1:00:99:cc:b2:0a:56:
         27:21:e6:ea:c6:71:72:89:80:36:6e:78:46:6a:5d:b3:26:06:
         54:42:d0:98:4b:28:85:5c:b5:63:d8:99:83:18:f8:5e:cc:c8:
         8f:7a:ff:ee:38:08:30:f3:7c:ab:ca:98:2e:ef:49:0c:45:e5:
         06:cb:fc:62:75:7b:9e:1c:65:ec:89:cb:25:1f:df:be:9d:b3:
         3b:c6:16:86:9e:fa:9a:d1:80:52:ea:e1:e4:69:42:df:97:47:
         b8:c4:5b:a6:b2:8c:47:38:5f:f5:cb:5b:98:d1:77:dd:23:6c:
         d7:51:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:39 2024 by rpki-client on console-fra.rpki-client.org