Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138362e3139342e33322e302f32302d3332203d3e203238323333.roa
File:                     3138362e3139342e33322e302f32302d3332203d3e203238323333.roa (raw, json)
Hash identifier:          fVX8ifDe2mQcPT0d7Hjp3v32kMENtYSyFKqV153BaKo=
Subject key identifier:   FB:2E:0B:FE:00:63:B3:1B:1B:6B:89:CF:BA:65:D9:45:36:6E:B3:E2
Certificate issuer:       /CN=A49EDE7869E1E60D78D21826C89D0275F1F39CD3
Certificate serial:       76EE119D2718859E8F60BBD5AA866B5B094F733E
Authority key identifier: A4:9E:DE:78:69:E1:E6:0D:78:D2:18:26:C8:9D:02:75:F1:F3:9C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138362e3139342e33322e302f32302d3332203d3e203238323333.roa
Signing time:             Tue 13 Aug 2024 15:12:26 +0000
ROA not before:           Tue 13 Aug 2024 15:07:26 +0000
ROA not after:            Tue 12 Aug 2025 15:12:26 +0000
asID:                     28233
IP address blocks:        186.194.32.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.crl
                          rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 03:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ee:11:9d:27:18:85:9e:8f:60:bb:d5:aa:86:6b:5b:09:4f:73:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A49EDE7869E1E60D78D21826C89D0275F1F39CD3
        Validity
            Not Before: Aug 13 15:07:26 2024 GMT
            Not After : Aug 12 15:12:26 2025 GMT
        Subject: CN=FB2E0BFE0063B31B1B6B89CFBA65D945366EB3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:c8:de:f6:dc:7d:17:71:38:08:a5:96:86:
                    bd:54:1d:05:f9:d2:91:71:a3:1b:01:59:3d:d9:c8:
                    fe:42:53:e4:c0:c6:2c:92:90:bb:71:6c:8e:7d:75:
                    8e:eb:4e:31:c3:f5:07:39:7e:ae:91:55:11:48:8f:
                    28:b0:64:04:53:a4:10:12:90:97:de:17:d0:35:ec:
                    fd:71:a1:4c:58:4e:60:f6:e3:fa:be:3d:b9:93:39:
                    9d:76:54:7f:45:b1:62:76:ec:c4:7e:15:9c:97:59:
                    17:d2:f0:10:28:04:e7:73:21:81:c5:f2:fe:ee:32:
                    32:0e:c3:dd:b9:0a:58:43:0b:f9:0a:21:80:24:e5:
                    52:34:f5:53:c9:b0:d2:d9:a9:d7:86:ac:4d:e8:d0:
                    f0:e1:54:92:e3:81:54:cf:87:0f:d1:5b:b4:b7:16:
                    ae:16:4b:83:ec:2c:31:45:1a:0c:ae:68:69:af:7c:
                    38:11:99:4d:20:e6:c7:76:90:86:75:f2:90:49:a7:
                    00:f7:0f:71:db:81:38:8e:73:0a:29:b9:3c:a6:bc:
                    5f:75:cb:ea:94:0c:ef:c7:a6:33:d0:62:77:71:42:
                    e7:8b:a7:41:b2:99:ee:4c:2b:b6:b1:5b:37:3b:c8:
                    84:73:52:b0:01:9d:e5:10:f4:03:c2:65:dd:8d:d3:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:0B:FE:00:63:B3:1B:1B:6B:89:CF:BA:65:D9:45:36:6E:B3:E2
            X509v3 Authority Key Identifier:
                keyid:A4:9E:DE:78:69:E1:E6:0D:78:D2:18:26:C8:9D:02:75:F1:F3:9C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138362e3139342e33322e302f32302d3332203d3e203238323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:20:3f:f2:f6:f8:27:6e:87:1e:32:97:9c:4a:ff:94:ad:
         96:e0:5b:3e:d5:7d:79:42:7f:15:f8:c1:69:f6:d3:7c:54:1e:
         19:25:ec:22:6d:f8:f7:25:3c:e4:1a:94:ba:32:87:d0:d4:6a:
         a3:2e:75:f5:50:f9:0c:82:40:d2:2d:12:d3:e8:d4:f2:d8:45:
         a0:c2:10:9b:67:84:94:f8:a3:f0:fd:03:65:36:1a:7d:ef:27:
         86:aa:3e:d4:64:63:75:88:6c:e4:7f:f6:28:ba:8a:13:b4:c9:
         e4:89:86:dc:c0:3b:aa:6f:4b:0c:03:6d:38:3f:b3:bd:01:5d:
         89:2a:12:59:05:96:ae:4d:70:51:56:35:63:74:4e:36:74:9d:
         d5:80:89:60:7f:cc:ad:42:35:6a:05:98:1a:35:f3:87:91:c8:
         6b:9c:44:ea:38:e8:0c:b8:b7:46:49:42:83:5f:95:40:32:ad:
         5d:49:11:e6:9b:72:48:6c:cf:c2:d7:37:37:e0:cd:b0:45:6a:
         45:ab:39:99:c3:d4:a9:59:24:b6:3f:63:6e:7f:31:b5:62:aa:
         9e:ea:0f:1e:84:85:c2:fe:cb:f7:58:db:67:a2:ba:78:c1:65:
         95:83:63:83:b3:74:f5:59:4f:29:6c:9c:1a:57:a9:02:42:8b:
         ed:56:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:42:12 2024 by rpki-client on console-ams.rpki-client.org