Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35332e302f32342d3234203d3e203238323034.roa
File:                     3138392e39312e35332e302f32342d3234203d3e203238323034.roa (raw, json)
Hash identifier:          86zTPrySpgSH73x46oMJTwhr6/3jojNpDDGUzYuCExU=
Subject key identifier:   8D:89:9F:7E:39:E4:14:B4:FF:BA:7B:B3:60:7B:73:81:DE:2F:21:68
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       3831DD4B778E5B16161980EFEC8D65D76F19EF0D
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35332e302f32342d3234203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:42 +0000
ROA not before:           Wed 24 Apr 2024 14:32:42 +0000
ROA not after:            Wed 23 Apr 2025 14:37:42 +0000
asID:                     28204
IP address blocks:        189.91.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:31:dd:4b:77:8e:5b:16:16:19:80:ef:ec:8d:65:d7:6f:19:ef:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:42 2024 GMT
            Not After : Apr 23 14:37:42 2025 GMT
        Subject: CN=8D899F7E39E414B4FFBA7BB3607B7381DE2F2168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:03:88:82:4d:b9:bf:9f:86:3a:07:5b:4b:
                    d6:41:7f:c3:42:16:6c:1a:56:91:b4:4b:95:ef:38:
                    fe:dd:1b:d2:27:a6:11:62:e5:ba:14:d7:91:34:e3:
                    4c:1a:4e:4d:f8:c9:08:14:aa:de:d6:ea:e5:0d:a4:
                    e5:b7:46:1e:ca:0a:6f:4b:11:30:c7:15:bb:59:65:
                    80:ea:e5:21:ec:82:c7:af:bc:35:2f:cc:02:44:e0:
                    20:58:f8:82:82:8e:e9:07:d6:28:b3:77:c4:67:2d:
                    33:12:a8:b5:c4:ff:f1:cb:99:fd:6a:ee:35:dc:7b:
                    48:8a:a3:08:05:d2:ea:f6:e4:ea:09:c9:b9:77:b1:
                    bb:81:e4:c2:6b:c2:a8:ef:b1:45:ea:3a:c3:52:36:
                    29:e8:3d:28:d9:b8:6a:da:bd:43:85:3c:e2:09:05:
                    cd:53:e3:19:50:5e:0a:cb:2f:9c:e1:35:4c:dc:a2:
                    39:e6:7c:de:42:11:40:f1:a6:c7:51:4f:de:a2:97:
                    38:bc:ef:35:58:7d:ae:e8:e8:f6:d4:b0:f4:be:f2:
                    c9:c9:f4:4d:8c:2e:33:47:ae:d9:97:1d:7a:82:1f:
                    86:f1:f9:9f:f0:21:de:80:05:8b:a8:8c:61:46:bb:
                    bb:d7:e2:72:26:d6:66:56:75:f5:60:24:24:46:58:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:89:9F:7E:39:E4:14:B4:FF:BA:7B:B3:60:7B:73:81:DE:2F:21:68
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35332e302f32342d3234203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:b3:12:b4:86:34:ff:65:15:07:5f:cf:54:0f:24:b8:a1:
         6a:c6:a7:44:30:03:91:bd:d2:0e:cc:9f:03:42:5e:27:bd:d5:
         10:f4:28:a2:d1:a3:c0:e1:e5:11:8e:b0:bb:29:b6:03:4c:d6:
         d3:f0:6e:f3:7f:71:16:ed:21:84:2e:e1:93:f0:0b:e5:66:82:
         da:84:3b:11:ad:f4:72:6d:2d:e7:2b:55:31:c6:b4:a7:19:15:
         e1:65:e3:b5:f4:40:bd:75:6c:97:72:d3:84:eb:70:f4:4a:95:
         ce:43:25:84:d4:ce:68:30:a8:c9:04:20:66:cd:90:1e:72:17:
         39:bc:8d:b3:6e:d5:a2:09:0e:6a:be:22:bb:a0:39:b6:96:e2:
         ea:66:5e:25:23:f2:da:af:8a:8b:04:ae:af:c8:18:3f:5d:1f:
         4c:e4:66:41:1f:7c:bf:e6:0a:de:14:92:85:1e:9b:86:96:a0:
         b7:a8:03:3e:3a:9c:a5:ef:d7:37:40:2d:c5:15:99:75:43:20:
         07:00:6b:0a:99:71:a5:e1:00:51:22:17:8c:25:d0:28:a9:e9:
         15:85:8d:7b:c7:d7:8c:2f:ee:19:7b:b3:2f:90:04:3b:94:21:
         32:cf:98:bc:3e:49:2a:f3:96:38:09:e4:c5:fa:9e:01:be:18:
         64:47:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:06 2024 by rpki-client on console-ams.rpki-client.org