Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3131302e302f32342d3234203d3e203238323736.roa
File:                     3138372e3130322e3131302e302f32342d3234203d3e203238323736.roa (raw, json)
Hash identifier:          dFLh4394o9BPWAreGzdla5y8ih+2RRbApY2ATjmjaEc=
Subject key identifier:   22:2A:30:DD:40:45:41:EF:1C:9C:C2:77:FC:F9:C8:9A:E1:A2:43:57
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       2ACB2FB62E2A87FE850D7A977EBD49457689FD3A
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3131302e302f32342d3234203d3e203238323736.roa
Signing time:             Wed 05 Jun 2024 19:19:19 +0000
ROA not before:           Wed 05 Jun 2024 19:14:19 +0000
ROA not after:            Wed 04 Jun 2025 19:19:19 +0000
asID:                     28276
IP address blocks:        187.102.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:2f:b6:2e:2a:87:fe:85:0d:7a:97:7e:bd:49:45:76:89:fd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Jun  5 19:14:19 2024 GMT
            Not After : Jun  4 19:19:19 2025 GMT
        Subject: CN=222A30DD404541EF1C9CC277FCF9C89AE1A24357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:8f:71:0f:c2:c0:1d:85:b4:3e:f5:0c:10:
                    1e:fe:c8:ff:3d:f8:58:0f:bf:73:fa:fa:bc:60:f6:
                    2f:83:65:5c:74:f2:f4:b4:48:4f:9b:a1:1a:9e:dc:
                    72:cd:38:9e:c6:c9:e1:f1:7c:1e:5f:06:67:c8:ee:
                    11:54:65:8d:be:a0:35:d5:a3:3b:7b:a9:19:13:6e:
                    39:21:69:ed:06:3c:6f:40:78:4d:6e:29:2c:36:49:
                    33:0e:dd:78:f0:e1:06:a9:91:6c:9b:dd:c7:46:19:
                    fd:6e:a5:d7:06:57:43:e0:4f:b9:62:57:3f:00:5d:
                    29:75:97:fb:85:8b:3b:b2:55:f2:a3:92:1d:56:46:
                    62:1a:d9:ef:58:19:d9:20:8c:6e:f8:8a:56:c5:71:
                    e9:96:9e:73:09:22:e5:00:e8:63:f4:6c:fc:c3:52:
                    63:05:9d:d6:ea:06:61:3b:e2:a4:4d:fc:66:8a:90:
                    22:22:6e:b9:16:d9:69:1b:0e:6f:ea:ca:45:55:a0:
                    81:44:91:42:a6:6f:ed:f4:88:1a:3c:9b:f5:86:0f:
                    38:9e:ab:27:2e:47:32:38:96:69:1d:ec:f3:5b:08:
                    50:63:8f:74:98:9e:62:f4:c6:a7:9f:9b:b3:3b:7d:
                    f9:58:d0:17:eb:d8:ab:ae:4a:d2:55:08:14:b1:eb:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:30:DD:40:45:41:EF:1C:9C:C2:77:FC:F9:C8:9A:E1:A2:43:57
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3131302e302f32342d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:25:8c:0e:2f:41:64:ab:1c:4c:2f:77:f4:24:ef:b3:5d:83:
         da:bf:fb:60:96:05:b0:40:c7:40:1a:f9:a6:3a:b4:c5:b0:a7:
         b4:b8:00:ab:9f:4e:2b:7d:37:3d:f9:68:be:6c:2b:b9:32:d6:
         1f:e0:58:f8:db:ac:bd:f8:46:d9:22:5b:7d:b1:43:dc:10:80:
         a4:68:ef:fe:71:99:e6:6a:d0:d6:d0:13:ac:a1:be:34:50:a5:
         c9:6f:68:1c:ac:a2:ae:0d:9b:96:61:f6:b2:4c:a8:64:53:7d:
         73:36:32:51:42:cf:9a:93:80:70:1a:7d:df:3a:59:80:fc:25:
         b4:5f:58:99:27:c2:70:0b:c1:49:92:ad:07:5a:ab:8e:52:f1:
         d2:32:48:b4:ad:5a:06:a0:40:80:c9:69:dc:c7:97:89:2c:03:
         8f:78:f6:39:50:d5:f0:72:d8:aa:35:f0:c8:08:c3:21:e5:af:
         0f:4c:be:d6:90:c0:aa:cf:91:86:19:35:c4:e4:de:98:63:8d:
         a3:59:77:44:c1:24:10:77:39:43:cf:64:d8:6c:6e:24:70:b6:
         a6:f7:b6:ee:ad:35:c5:91:ac:b4:82:a2:7e:45:04:b0:52:62:
         91:43:7e:4a:a9:bd:2b:e6:19:e3:6e:7e:61:23:aa:a4:9b:89:
         ad:40:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:43:23 2024 by rpki-client on console-fra.rpki-client.org