Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa
File:                     3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          w84Anik40z83DFX3yj+lx1Zs+2i9lRNW4FQ+f7ZHMcc=
Subject key identifier:   25:D3:C2:F7:92:85:0B:B7:50:26:39:F5:27:64:2D:15:E2:41:E7:1B
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       04BD000F586C878CF9DBC6764D390246382F0451
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa
Signing time:             Mon 10 Jun 2024 14:02:09 +0000
ROA not before:           Mon 10 Jun 2024 13:57:09 +0000
ROA not after:            Mon 09 Jun 2025 14:02:09 +0000
asID:                     53118
IP address blocks:        187.110.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
                          rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bd:00:0f:58:6c:87:8c:f9:db:c6:76:4d:39:02:46:38:2f:04:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Jun 10 13:57:09 2024 GMT
            Not After : Jun  9 14:02:09 2025 GMT
        Subject: CN=25D3C2F792850BB7502639F527642D15E241E71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:00:c7:37:77:aa:75:9c:a7:c9:cf:14:4e:
                    57:11:21:e2:c6:1f:39:c5:99:d8:1f:65:dd:63:fc:
                    da:88:96:bc:24:b6:0c:88:49:6f:21:0a:5e:aa:95:
                    15:e1:d2:67:67:40:ad:f6:58:b4:13:2c:ea:3f:1e:
                    d2:d9:61:5f:43:cf:47:61:dd:c0:f8:c6:73:42:39:
                    c6:db:73:15:1d:46:5a:28:82:f1:3b:65:8e:1b:df:
                    92:42:26:92:bb:45:a4:f9:fa:48:e4:46:0d:93:bd:
                    7c:59:d6:84:f2:84:61:11:a7:ac:90:93:d7:ff:7e:
                    88:ee:5a:bd:4d:ac:d4:d3:3c:7f:3d:d0:97:2e:b6:
                    5f:8a:cb:48:5e:b9:f3:29:04:12:f7:fa:23:c5:f7:
                    3c:4d:78:d4:e0:a3:2f:a3:a7:b8:19:5e:b5:6a:3d:
                    ea:b7:94:97:62:d9:62:91:6e:ec:92:aa:34:eb:c2:
                    e9:b6:7f:bd:4f:65:30:88:98:38:9d:bd:a3:7a:0d:
                    c0:bb:fd:f8:85:80:01:34:3f:b0:57:4b:c9:94:9e:
                    8f:07:70:d6:ce:a7:42:fd:4b:f3:77:41:37:28:ed:
                    61:d0:ed:49:47:82:fb:b1:57:16:ee:c3:52:89:34:
                    97:ae:3a:5c:17:b1:b0:92:63:92:18:18:ed:81:f9:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:C2:F7:92:85:0B:B7:50:26:39:F5:27:64:2D:15:E2:41:E7:1B
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:76:84:8e:3d:c5:a4:fd:4e:03:32:37:63:11:da:ed:de:11:
         53:3c:13:59:87:0d:61:7a:06:01:88:88:0b:53:8e:2c:c2:32:
         c3:13:90:63:00:8b:ae:dc:97:55:ef:f0:91:b5:ea:ef:c3:89:
         57:c4:4f:07:7e:25:28:0f:2d:45:12:d1:42:56:b6:11:1f:91:
         b7:ac:82:b3:c6:2f:66:0e:8d:22:78:47:3a:ba:b0:eb:25:1d:
         20:8c:23:79:af:60:b8:10:40:79:f2:9c:28:8c:33:65:b1:15:
         a1:cf:40:a1:8b:63:50:fd:23:b0:e5:9e:ae:24:6b:f7:f5:ac:
         56:f5:d0:4c:69:c3:28:61:dc:e9:08:6c:00:f7:34:94:dc:44:
         de:67:fe:a0:ed:25:6a:b0:d9:27:b5:b0:d0:57:df:cb:26:e1:
         ae:ea:38:92:9d:7a:89:8f:d6:94:37:8c:a5:b4:04:89:f5:78:
         b5:ae:9b:6f:10:11:d0:22:93:db:5d:59:20:bc:b3:32:29:97:
         1f:ee:35:0f:4b:f9:35:ed:97:57:be:b1:78:15:0e:b4:57:41:
         1b:d6:58:69:b4:e8:cb:e6:30:75:0e:63:c8:a5:d8:3b:58:11:
         c7:48:21:11:bf:70:17:74:f7:7d:d2:3c:d4:1f:44:c8:4e:e2:
         57:37:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:31 2024 by rpki-client on console-fra.rpki-client.org