Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (raw, json)
Hash identifier:          g2jBRUIBb+HlExD5uPtbpTt+LvDI8wF7afuC72Mj5js=
Subject key identifier:   8C:55:55:CA:05:51:5C:A3:27:33:89:0B:67:4F:5B:19:4D:4E:50:1F
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       655EDD0A5AB137B7B37063B64D2547EB3CA3762A
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
Signing time:             Wed 03 Apr 2024 20:06:21 +0000
ROA not before:           Wed 03 Apr 2024 20:01:21 +0000
ROA not after:            Wed 02 Apr 2025 20:06:21 +0000
asID:                     271680
IP address blocks:        187.111.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5e:dd:0a:5a:b1:37:b7:b3:70:63:b6:4d:25:47:eb:3c:a3:76:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Apr  3 20:01:21 2024 GMT
            Not After : Apr  2 20:06:21 2025 GMT
        Subject: CN=8C5555CA05515CA32733890B674F5B194D4E501F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:c6:3b:94:2b:65:2d:11:02:d7:41:74:78:
                    4a:cb:5d:35:56:9f:38:3e:5e:86:ff:90:b0:57:44:
                    f1:97:2b:a1:ea:53:51:f6:c3:80:fe:a8:38:6c:cd:
                    73:17:8a:b6:15:79:1d:d8:5a:d6:bc:e1:5b:09:c6:
                    64:f9:d3:20:88:0e:be:92:d1:bf:6e:b1:1d:5d:31:
                    f5:78:dc:24:e7:02:b3:fc:68:f0:7b:2f:61:28:2b:
                    28:db:cc:6b:85:ca:7d:5f:6c:81:ac:0b:67:ae:dd:
                    64:36:d9:45:1b:e7:a0:ea:93:2f:07:da:69:cf:4d:
                    41:64:f2:91:c2:d6:69:51:49:57:0b:20:c5:84:55:
                    7b:e9:9c:ed:60:90:05:4b:e8:12:6b:50:59:7a:5b:
                    b4:e0:c7:53:c1:d1:f8:58:f3:9b:0e:03:2e:b2:fd:
                    04:2c:fe:9e:49:39:b3:c2:5f:a0:f6:99:5b:60:7b:
                    84:c0:4a:7e:83:ce:84:b6:9b:6b:07:10:48:6d:65:
                    29:43:cb:0c:f6:7e:84:8c:27:dd:2e:43:51:04:d5:
                    a9:e8:31:11:66:a8:97:3b:3f:20:b4:6f:72:94:50:
                    5c:44:1d:5c:b6:43:cf:6c:47:33:79:2e:ef:90:7e:
                    fd:ff:9f:a1:d5:e8:36:58:a3:cc:48:10:60:c4:26:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:55:55:CA:05:51:5C:A3:27:33:89:0B:67:4F:5B:19:4D:4E:50:1F
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:93:89:d3:60:99:bb:d4:34:c9:87:42:78:d3:fd:6f:f2:65:
         62:cd:73:16:c4:e6:68:7b:91:40:a9:20:ad:c5:bc:39:12:92:
         fe:f5:35:31:ff:83:64:30:3c:a6:03:f0:84:16:85:fe:cf:d2:
         a6:ab:2c:d6:da:9d:c3:4c:2a:54:46:a5:2e:8c:c2:41:48:7f:
         1d:86:6a:29:65:19:f6:e5:72:aa:78:8d:a7:92:01:0f:91:50:
         2d:0a:24:e1:eb:e7:80:12:cc:27:19:e9:70:24:5a:aa:a1:45:
         01:fc:ca:b7:ed:16:18:30:f8:17:45:29:3f:73:eb:91:b7:90:
         4e:67:68:49:eb:46:86:88:4e:1e:4f:29:96:23:b0:8a:df:eb:
         90:cc:62:5d:dc:57:0b:08:bd:ed:46:62:4b:04:2c:ef:c1:32:
         4c:fb:dd:1a:ba:39:a8:df:5a:dd:1b:23:74:8a:61:da:ed:62:
         8b:d3:fd:2c:af:f7:a2:85:46:58:9f:ac:7b:c4:ac:f5:31:1a:
         8b:9b:3e:36:d7:fc:59:f2:cd:b0:4d:58:3a:ae:6d:c9:6b:ee:
         ed:0a:f6:33:9d:ef:65:94:8e:67:10:7d:42:60:af:64:f0:98:
         30:eb:f4:5d:e6:c7:20:e0:1d:9a:b7:03:14:0b:1f:51:f5:f2:
         db:c6:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org