Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa
File:                     3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa (raw, json)
Hash identifier:          QtcVu1XQAYUwQTPLuTFKN1FgEEgoxsLavRGLPUw9mRs=
Subject key identifier:   E7:64:3B:F0:3F:BC:F0:70:6C:AC:16:46:01:33:DF:69:1E:67:A9:FE
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       24A982FF6EC51EC458826C1F64BBBD2FD23D244E
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa
Signing time:             Mon 10 Jun 2024 14:02:10 +0000
ROA not before:           Mon 10 Jun 2024 13:57:10 +0000
ROA not after:            Mon 09 Jun 2025 14:02:10 +0000
asID:                     53118
IP address blocks:        187.110.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
                          rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 04:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a9:82:ff:6e:c5:1e:c4:58:82:6c:1f:64:bb:bd:2f:d2:3d:24:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Jun 10 13:57:10 2024 GMT
            Not After : Jun  9 14:02:10 2025 GMT
        Subject: CN=E7643BF03FBCF0706CAC16460133DF691E67A9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:46:ed:90:a9:63:28:77:c6:94:64:9a:9d:
                    b9:8b:2f:9d:0c:4f:df:24:31:08:0a:89:88:93:b4:
                    f7:ed:13:df:32:cf:ad:da:60:9c:6b:b8:9f:98:8b:
                    ce:d9:e8:15:95:02:b1:f0:ce:53:83:3a:f3:80:1f:
                    c3:82:3c:9c:70:0c:1e:6f:4c:89:a5:f4:9a:00:cf:
                    82:0b:76:6b:40:37:f6:94:da:b7:db:91:64:be:0e:
                    29:ee:6d:eb:65:9f:e8:13:01:3f:50:c5:18:05:e4:
                    81:fb:db:3f:95:4d:70:4a:90:dd:a0:4a:4d:45:4c:
                    ae:99:3b:a0:b7:55:d1:58:b8:17:05:53:a3:f3:8e:
                    20:28:c2:86:b5:c8:62:63:01:82:35:39:9a:6b:19:
                    d1:a3:8f:06:cd:6a:07:da:a7:0a:3c:3f:36:ba:ae:
                    43:75:0f:02:03:78:11:1a:e1:dc:a0:f4:b9:06:85:
                    49:94:13:e5:0c:84:ec:21:7b:ad:06:2b:24:28:e0:
                    cc:0c:ba:ef:d6:c4:9e:40:c5:d7:2e:48:0f:6e:28:
                    d7:95:3f:77:10:7f:76:e7:69:ea:00:ea:bc:ef:19:
                    f1:dd:f1:42:f9:69:e4:28:e2:19:f4:bf:43:ad:b5:
                    c4:76:a8:d0:c0:48:8b:18:8a:d5:98:75:3f:da:76:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:64:3B:F0:3F:BC:F0:70:6C:AC:16:46:01:33:DF:69:1E:67:A9:FE
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:0d:5f:13:f0:03:e2:f3:ae:26:9e:09:b9:94:4e:82:f2:
         43:e2:cc:96:81:2f:82:9c:11:91:b5:7f:8a:fe:e7:2d:87:f0:
         0c:6e:2f:ba:f9:f4:ea:0f:d2:dd:21:db:e9:97:da:e1:33:90:
         7f:e3:d2:86:f2:fc:53:60:48:25:12:20:9e:10:95:10:ea:b6:
         06:8e:5b:b7:ee:5b:d1:32:5e:45:3b:79:7e:36:54:1f:46:dc:
         9b:08:f9:69:e3:8a:7f:47:78:35:9b:ef:d8:b4:71:82:88:fe:
         08:d4:12:56:d3:75:6f:77:93:88:26:9a:e2:10:96:af:f1:94:
         fa:5d:9b:0d:5f:2b:f6:8a:3b:49:c3:58:95:05:9a:33:30:1d:
         ce:7c:bc:63:b2:90:6f:5c:84:c6:d4:c4:1e:d7:1a:6f:f9:3a:
         e9:cf:46:35:dd:51:d7:aa:07:22:43:a6:f1:c9:71:49:0e:8d:
         8a:13:7d:38:70:62:19:ac:97:37:b2:b8:74:bb:bc:9f:0c:82:
         fa:6e:ca:d1:7d:6e:6b:5e:ee:b8:ac:9a:fc:cd:37:c9:15:f7:
         f0:de:1a:5d:04:c1:7d:b7:e5:25:d8:74:59:a4:13:9c:47:d6:
         74:94:e4:a3:90:a0:96:5a:2f:4e:0f:38:fe:57:35:49:f6:57:
         33:43:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 07:58:05 2024 by rpki-client on console-fra.rpki-client.org