Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (raw, json)
Hash identifier:          oq6mYnS5O1+SR9tjfaue6Z9Aev6wuFVWSzIgNxzx7Yw=
Subject key identifier:   3B:12:61:AD:4E:5D:ED:A0:FF:AE:01:A3:38:4B:F5:4E:FA:29:6E:55
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       2475CD6819E8651DE318148AEBE4B42CAAB1B16A
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
Signing time:             Wed 03 Apr 2024 20:06:21 +0000
ROA not before:           Wed 03 Apr 2024 20:01:21 +0000
ROA not after:            Wed 02 Apr 2025 20:06:21 +0000
asID:                     271680
IP address blocks:        187.111.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:75:cd:68:19:e8:65:1d:e3:18:14:8a:eb:e4:b4:2c:aa:b1:b1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Apr  3 20:01:21 2024 GMT
            Not After : Apr  2 20:06:21 2025 GMT
        Subject: CN=3B1261AD4E5DEDA0FFAE01A3384BF54EFA296E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:26:7a:55:32:e0:d1:c8:84:f2:2f:1f:a6:
                    d4:b1:ad:2c:dc:1e:ea:c4:77:c1:75:72:4c:8f:4f:
                    35:03:4f:2e:e4:22:ef:7f:39:60:51:b8:dd:35:14:
                    d8:96:50:f9:81:c0:4f:6f:88:79:34:1c:99:3c:a1:
                    ab:47:9a:23:84:c6:49:46:7f:3e:4e:c7:82:2c:0f:
                    6c:05:73:09:c0:71:81:1a:9c:57:59:e3:bd:73:55:
                    49:c0:66:0e:ef:03:90:50:83:ca:27:e7:b2:57:ad:
                    7e:d2:db:f1:a3:55:73:84:b9:73:ae:d8:17:36:aa:
                    53:47:d0:96:40:76:60:de:a7:5a:90:ba:ef:f1:2d:
                    3f:f6:22:de:11:ae:4f:83:67:aa:92:cb:0e:5f:35:
                    71:12:8a:7e:fa:13:98:6d:ba:48:a9:99:19:d8:f3:
                    23:89:1b:32:ab:25:7b:00:6b:27:3e:e4:27:0d:95:
                    6d:0e:ff:3e:b6:cb:3a:09:e1:05:4c:97:05:67:41:
                    aa:13:47:92:37:8c:16:22:4f:d9:f6:2b:8f:ef:18:
                    9a:bf:ce:68:f4:13:b9:25:19:18:a8:59:09:8f:f4:
                    65:8f:2b:df:7a:c5:7a:c2:05:bd:50:45:d5:8f:fb:
                    03:d3:f8:93:7b:f2:14:c1:32:54:a1:da:d8:c5:e8:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:12:61:AD:4E:5D:ED:A0:FF:AE:01:A3:38:4B:F5:4E:FA:29:6E:55
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:74:63:c8:bf:bd:17:35:73:81:e6:65:5a:6a:a1:86:c2:
         07:bd:61:83:5b:b6:3f:79:09:19:0e:b3:58:d3:80:95:42:7d:
         ef:ff:40:6f:8e:11:e7:26:11:97:08:b5:be:3d:1e:0e:b7:f6:
         b3:ce:d9:fe:b1:78:ec:52:b7:4a:b3:3a:ce:43:79:10:d7:ab:
         a4:5b:a1:17:09:a8:ce:4b:09:0f:6f:0b:39:be:11:30:04:f8:
         82:d5:4d:a4:f6:b1:fe:9b:24:de:64:65:1b:fa:7d:82:e2:fb:
         fd:32:5e:ba:2b:9e:d1:4b:11:7e:93:fd:7a:96:31:ce:ce:40:
         f6:4c:64:42:92:27:4a:56:b5:5e:15:82:27:11:a3:d0:49:7c:
         b4:92:1b:0a:c4:d2:a3:a5:85:10:17:b1:40:07:47:0c:9a:06:
         2d:84:cf:5f:7a:e0:94:4c:65:bd:aa:8b:2b:e5:79:9e:69:4a:
         5a:5b:38:be:9d:c0:da:9f:8a:14:93:db:b0:b3:a4:bd:6d:17:
         1d:8c:e2:98:18:fb:e8:b3:e6:6f:ee:1b:d2:4a:ea:16:b8:5f:
         a6:25:d3:05:4a:77:b2:0d:1f:69:f9:cb:dc:0a:3e:a7:f6:e8:
         55:b4:b6:66:3e:d8:7f:4d:71:3f:6f:32:ae:88:06:8b:db:60:
         9a:ed:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org