Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3234203d3e20323634323132.roa
File:                     3138372e302e3233322e302f32322d3234203d3e20323634323132.roa (raw, json)
Hash identifier:          HKuv2lccceoZDrqKGr3FEcWJRiwdVtQpLmgJd6RpBYE=
Subject key identifier:   42:D5:90:2F:3A:8A:34:F7:05:E4:99:8E:25:F4:60:6B:AB:93:9B:ED
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       25B154B42BF020BE837A11C623F8468FCDC2CE98
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3234203d3e20323634323132.roa
Signing time:             Tue 27 Aug 2024 21:06:16 +0000
ROA not before:           Tue 27 Aug 2024 21:01:16 +0000
ROA not after:            Tue 26 Aug 2025 21:06:16 +0000
asID:                     264212
IP address blocks:        187.0.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b1:54:b4:2b:f0:20:be:83:7a:11:c6:23:f8:46:8f:cd:c2:ce:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Aug 27 21:01:16 2024 GMT
            Not After : Aug 26 21:06:16 2025 GMT
        Subject: CN=42D5902F3A8A34F705E4998E25F4606BAB939BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:56:cf:bf:5c:ee:af:92:42:a5:46:4c:2c:
                    b8:8b:04:30:ea:07:e9:96:ed:2e:20:65:da:c3:b3:
                    bd:c2:a4:67:1e:4c:bc:d0:32:cb:b4:db:04:8a:ac:
                    73:d3:17:a0:bc:0a:af:7e:57:71:d0:de:6b:99:97:
                    19:98:72:3a:47:6c:c3:f2:fc:56:27:27:9f:25:86:
                    f9:97:2f:32:da:75:12:2e:2f:a6:0b:33:05:8b:85:
                    f2:49:1f:c3:fc:a0:3d:3e:2f:99:19:75:0e:a1:94:
                    fa:79:4e:c2:46:8d:a3:62:ea:a0:aa:81:cf:93:88:
                    08:01:c1:1e:1e:87:96:ee:5e:2e:10:27:e2:af:4f:
                    ab:87:4b:da:da:d1:3f:59:2e:73:2e:d7:10:f2:6d:
                    fb:a8:2c:57:4f:d1:f0:2e:6d:75:40:60:07:6b:13:
                    4f:4a:92:dc:5a:5f:29:c6:d1:2f:f5:da:c3:13:99:
                    eb:bc:7c:7a:69:63:ba:d1:6d:86:26:c9:e3:fd:9a:
                    60:f2:b6:b6:dd:b1:2f:d8:ec:f0:dc:a2:82:60:9f:
                    5f:64:1d:f1:f0:54:88:9d:79:e1:d6:9b:ac:7f:96:
                    f2:86:94:28:92:ac:a4:12:d7:28:b6:5a:89:81:ad:
                    92:59:5d:1e:9b:cd:33:0a:e1:aa:c4:26:a2:a7:2c:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D5:90:2F:3A:8A:34:F7:05:E4:99:8E:25:F4:60:6B:AB:93:9B:ED
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3233322e302f32322d3234203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:fa:b4:b6:f5:53:f1:2f:58:f2:8a:af:ea:8a:03:5e:7f:
         24:43:7b:32:be:9c:db:36:5a:33:eb:80:74:13:59:25:0c:7b:
         7f:3a:95:1a:8d:6b:cc:1f:df:7a:d1:9e:db:f2:78:62:53:a2:
         5f:dc:eb:8e:27:2a:7e:d5:27:93:7f:63:a5:33:79:ef:2c:70:
         81:4d:60:60:ec:77:b6:ca:6a:fb:b5:2c:9a:6f:ed:3d:27:99:
         e4:9e:08:c4:ae:34:74:11:af:e5:70:10:18:7c:62:f1:6c:83:
         c8:f0:be:56:f8:79:84:a7:bf:88:53:69:48:12:65:42:27:6c:
         c3:24:c1:cd:e8:1b:06:54:66:c6:f7:ae:b6:61:85:08:af:60:
         63:6b:32:ce:97:52:25:22:35:f4:23:65:75:4d:48:46:60:aa:
         8c:36:9f:e9:97:93:44:9e:07:69:de:1d:05:02:eb:6f:32:e1:
         34:de:fc:bb:42:77:cc:cc:65:c0:a2:34:db:46:19:7d:97:b0:
         50:bb:2f:f4:87:2e:a9:65:a2:5f:9f:79:11:cd:4f:94:06:26:
         e3:8a:6a:90:e1:b5:88:ab:98:30:ba:5a:0c:af:49:e0:52:37:
         ab:5a:a8:44:a2:66:0c:99:ee:88:d0:ce:c9:cb:6e:42:ef:2a:
         a2:34:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:48 2024 by rpki-client on console-fra.rpki-client.org