Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32322d3234203d3e20323634323132.roa
File:                     3138372e302e3232342e302f32322d3234203d3e20323634323132.roa (raw, json)
Hash identifier:          1VlLAAFqunTeCqPjVgmjYRyc9I2aKgmuhgsN6kYeIN0=
Subject key identifier:   EA:40:ED:1B:3F:F0:EA:5F:D2:41:2F:E7:B9:F1:32:11:35:DB:BB:E4
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       735650F4A9136F5A47181FB9019044C86DD74647
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32322d3234203d3e20323634323132.roa
Signing time:             Tue 27 Aug 2024 21:06:07 +0000
ROA not before:           Tue 27 Aug 2024 21:01:07 +0000
ROA not after:            Tue 26 Aug 2025 21:06:07 +0000
asID:                     264212
IP address blocks:        187.0.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:50:f4:a9:13:6f:5a:47:18:1f:b9:01:90:44:c8:6d:d7:46:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Aug 27 21:01:07 2024 GMT
            Not After : Aug 26 21:06:07 2025 GMT
        Subject: CN=EA40ED1B3FF0EA5FD2412FE7B9F1321135DBBBE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:95:5e:f0:32:c9:ca:e1:68:d6:0d:54:5a:
                    55:e3:b3:2e:49:c8:0f:d3:08:31:fc:c0:85:f4:53:
                    ba:84:54:9d:4f:df:c7:ce:e7:34:0e:c9:71:23:eb:
                    a0:33:ea:b2:1b:76:00:f5:e2:d1:16:e4:81:aa:76:
                    33:75:a9:89:3c:98:a4:37:1c:26:af:ab:69:73:25:
                    d5:ff:0b:ab:a3:90:03:97:49:29:e5:d3:36:00:2e:
                    57:68:de:04:b9:4a:0e:e8:ee:34:3d:26:5b:b1:b6:
                    12:90:ef:d6:75:36:7b:28:30:92:d8:25:77:09:ea:
                    bb:71:38:28:f2:d5:6c:a3:3c:13:16:0c:b2:39:b3:
                    72:7e:80:87:d9:be:e1:f6:af:b4:a8:8e:9f:16:44:
                    3e:92:88:e8:73:85:ed:7e:c0:68:f0:e6:26:ac:d1:
                    d1:79:0c:69:f1:d8:1a:5f:fb:a9:cf:82:44:da:46:
                    6f:35:27:57:59:9d:1f:d2:6e:9b:4a:46:a7:62:67:
                    cd:22:de:37:2c:fe:af:74:13:59:1e:59:7c:1b:22:
                    7b:7c:0a:ec:a7:37:ed:d5:45:e7:b4:41:6e:36:59:
                    cf:33:e7:8e:91:2a:bb:36:c5:96:18:a2:86:d0:bb:
                    6e:a8:e5:3b:70:32:a3:d8:81:8a:cd:2d:1f:0f:0e:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:40:ED:1B:3F:F0:EA:5F:D2:41:2F:E7:B9:F1:32:11:35:DB:BB:E4
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32322d3234203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:5d:04:de:12:0b:a6:a3:d9:2b:c0:bb:69:de:bc:15:00:
         7d:16:48:28:79:d5:63:9c:bf:fc:4d:96:78:50:c8:cb:fe:0a:
         a7:c4:3b:d3:4b:bb:e5:97:1d:0d:d9:a2:5e:b6:2b:5e:ee:12:
         b2:04:85:23:7e:9a:13:d6:5b:06:de:b9:93:0b:b5:e0:7c:e6:
         d5:1e:2a:5a:c0:87:b1:14:4a:09:b4:f6:9c:ea:af:fb:f7:d0:
         03:a2:cd:40:32:e3:fe:3f:ed:d0:02:19:f4:95:ac:3e:9b:e7:
         d1:3d:92:f5:e4:78:f4:32:f9:e4:eb:c6:84:0d:eb:d0:d6:97:
         bd:a8:40:6c:55:f6:21:4a:1e:d7:6a:b0:18:1c:c9:c3:d9:80:
         c9:df:74:6e:28:a2:f7:db:44:6c:55:e0:61:0d:61:22:2a:6c:
         19:bb:eb:95:3f:8e:69:4f:00:07:8c:ca:aa:31:67:0c:ed:18:
         96:53:fe:ff:33:0b:6e:86:c0:ef:51:8e:ee:5b:86:2c:1c:2a:
         f8:ee:a7:92:d3:b4:ef:cc:76:ff:81:f5:24:ee:52:8f:ee:60:
         af:43:dc:13:1b:32:bc:04:11:84:b5:0f:71:d9:fe:27:9e:1d:
         8f:50:17:00:e6:8d:59:4e:83:8b:5e:c6:54:eb:bb:b9:24:7e:
         78:65:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:34 2024 by rpki-client on console-ams.rpki-client.org