Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37382e302f32342d3234203d3e203631393232.roa
File:                     3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (raw, json)
Hash identifier:          fMniLVi5jMndVedCiTz7SzfVSP78AYWLLI/5D7/ezCI=
Subject key identifier:   77:02:4B:14:0D:4A:88:6E:7E:F5:2B:DF:3B:10:55:6E:D4:9B:67:6D
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       45BEC03D6028C5ABE557A830BC34B7837BF55195
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37382e302f32342d3234203d3e203631393232.roa
Signing time:             Mon 28 Oct 2024 14:24:54 +0000
ROA not before:           Mon 28 Oct 2024 14:19:54 +0000
ROA not after:            Mon 27 Oct 2025 14:24:54 +0000
asID:                     61922
IP address blocks:        186.251.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:be:c0:3d:60:28:c5:ab:e5:57:a8:30:bc:34:b7:83:7b:f5:51:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Oct 28 14:19:54 2024 GMT
            Not After : Oct 27 14:24:54 2025 GMT
        Subject: CN=77024B140D4A886E7EF52BDF3B10556ED49B676D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:c8:1b:fc:be:58:d9:9b:df:79:a4:0e:89:
                    4b:e5:35:91:1b:c5:07:38:2a:19:c9:a3:3e:24:92:
                    82:7e:26:e6:69:82:fe:30:db:bf:4a:97:ea:da:18:
                    34:7b:b5:5b:f1:fe:59:64:d7:30:13:80:25:bb:9a:
                    38:89:04:00:33:1d:c2:2d:f8:42:3c:f8:85:7a:6e:
                    4c:b3:cf:ee:ad:f1:8d:2e:b5:b9:3b:3a:08:2f:06:
                    19:f3:ba:24:5f:67:c3:2a:23:37:fd:88:60:a9:17:
                    eb:f0:1a:ec:ee:0f:ce:32:b1:80:69:16:1f:ee:bf:
                    8e:43:39:34:b9:14:08:1a:02:72:69:7c:ad:0e:be:
                    a6:82:8c:c4:84:58:a7:bb:9d:0b:ae:b5:d7:ea:35:
                    00:51:78:4d:18:6b:fb:a8:c6:09:4c:fe:61:5b:05:
                    24:30:d1:b8:de:9c:89:62:08:1b:f0:b5:ac:2a:69:
                    d5:98:29:a8:87:59:05:25:54:9b:2a:03:f6:17:08:
                    73:80:e1:67:e0:b9:fc:9d:4c:a2:9a:be:ef:fd:1e:
                    36:18:b0:4d:e0:a4:29:16:92:5e:1b:69:3e:af:0e:
                    4c:c7:7f:86:fc:a1:13:ff:14:c7:a1:ce:0a:8e:d1:
                    0a:33:f2:88:95:30:85:95:e6:f2:12:d1:79:6f:6d:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:02:4B:14:0D:4A:88:6E:7E:F5:2B:DF:3B:10:55:6E:D4:9B:67:6D
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3138362e3235312e37382e302f32342d3234203d3e203631393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:8d:52:3e:cf:34:ea:50:d5:af:f7:55:7f:78:4d:d4:d2:
         11:47:39:50:0b:88:00:96:0b:1d:c6:dd:18:d8:d5:c0:e2:c3:
         a7:b4:1d:a5:ff:8a:1e:8d:cc:89:cf:c3:21:0a:f9:89:f3:4a:
         eb:ed:85:f4:ab:33:72:ba:95:fa:b2:98:5b:e9:53:11:bd:37:
         05:93:56:9a:9f:ab:73:5b:b1:f9:af:44:69:78:b7:41:5f:97:
         ed:e1:1f:6d:b0:29:90:a4:d6:65:ac:6c:f3:29:1b:8b:cb:a6:
         7b:9d:87:f4:84:f3:5e:18:78:9e:a3:6a:69:8e:f6:b3:a4:19:
         fc:8c:49:26:1b:39:cc:51:3f:3d:65:e1:11:0c:60:ae:28:7d:
         9e:3a:8d:cc:e7:f6:6b:95:d8:94:70:7d:16:10:8a:36:a9:85:
         b7:12:4e:76:8d:a8:02:21:7e:9d:a2:d0:d5:f0:f8:96:9e:48:
         37:52:5f:28:40:89:72:26:d6:47:c9:96:1f:79:4b:d2:04:d2:
         4d:c4:48:34:c8:58:a4:cd:7a:f9:a0:92:ed:16:15:ad:1c:c2:
         ba:30:a0:fe:4e:b4:72:f1:d4:0d:dc:71:e1:af:1e:2f:12:c7:
         dc:23:2e:7e:c3:2d:36:d8:49:39:7e:ac:12:10:d7:62:00:e7:
         82:02:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:59 2024 by rpki-client on console-fra.rpki-client.org