Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138392e3132372e34382e302f32302d3332203d3e203238323333.roa
File:                     3138392e3132372e34382e302f32302d3332203d3e203238323333.roa (raw, json)
Hash identifier:          2Os+oW6gUFUj9CXJaW6MxPsgViUAZHIYRdpnn9U6wV0=
Subject key identifier:   9D:86:E4:C9:5F:57:ED:3A:8C:B7:2B:20:D4:9F:57:F5:59:FE:3F:00
Certificate issuer:       /CN=A49EDE7869E1E60D78D21826C89D0275F1F39CD3
Certificate serial:       760A83EDD685D71A021AB53DD5518B7CD877D967
Authority key identifier: A4:9E:DE:78:69:E1:E6:0D:78:D2:18:26:C8:9D:02:75:F1:F3:9C:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138392e3132372e34382e302f32302d3332203d3e203238323333.roa
Signing time:             Tue 13 Aug 2024 15:12:02 +0000
ROA not before:           Tue 13 Aug 2024 15:07:02 +0000
ROA not after:            Tue 12 Aug 2025 15:12:02 +0000
asID:                     28233
IP address blocks:        189.127.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.crl
                          rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0a:83:ed:d6:85:d7:1a:02:1a:b5:3d:d5:51:8b:7c:d8:77:d9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A49EDE7869E1E60D78D21826C89D0275F1F39CD3
        Validity
            Not Before: Aug 13 15:07:02 2024 GMT
            Not After : Aug 12 15:12:02 2025 GMT
        Subject: CN=9D86E4C95F57ED3A8CB72B20D49F57F559FE3F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d3:cf:b2:72:51:c7:3a:22:5f:54:cf:08:10:
                    eb:8e:c8:1b:7b:aa:0d:20:e3:c9:36:86:ca:05:c7:
                    a9:d3:f8:12:12:00:af:7a:e9:44:2b:bb:ff:3b:a6:
                    28:78:c8:8b:34:fd:2a:50:67:28:bc:da:87:34:bc:
                    c4:f1:15:24:bc:22:27:aa:c0:e8:72:14:43:92:0e:
                    79:5c:f8:0d:cd:66:d1:9f:1e:5f:07:6c:95:ae:71:
                    c1:55:ff:f1:ec:9c:d6:03:f7:73:c3:93:84:7a:fa:
                    6a:99:a6:82:b6:a3:b7:33:97:df:58:56:90:82:88:
                    73:c4:9a:4d:22:d6:1a:88:20:8e:53:a1:b7:7c:8f:
                    84:d0:3f:9f:de:82:af:df:b2:36:25:8a:86:6b:20:
                    20:64:11:b7:19:4f:f3:04:4a:6b:dd:ba:82:32:11:
                    0f:5f:f4:bc:4c:05:6d:11:15:54:1f:51:fa:e4:50:
                    e4:50:f8:16:19:7c:83:c7:9e:40:bf:62:2e:28:73:
                    8b:6d:39:63:c5:08:c1:1c:72:12:8c:52:ef:36:5e:
                    31:51:f7:fa:91:fb:a5:50:88:cf:89:76:4b:a2:0c:
                    63:bd:6e:e9:49:9f:08:df:8d:e4:45:40:d3:4d:fd:
                    af:8d:3e:3b:fc:0a:cc:a5:ae:04:bd:8b:20:45:b7:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:86:E4:C9:5F:57:ED:3A:8C:B7:2B:20:D4:9F:57:F5:59:FE:3F:00
            X509v3 Authority Key Identifier:
                keyid:A4:9E:DE:78:69:E1:E6:0D:78:D2:18:26:C8:9D:02:75:F1:F3:9C:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A49EDE7869E1E60D78D21826C89D0275F1F39CD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/3138392e3132372e34382e302f32302d3332203d3e203238323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:4d:96:de:96:44:09:41:e2:ae:16:e1:75:c5:8e:09:bc:01:
         aa:98:10:c2:98:a5:a2:f5:06:c2:d8:7d:88:72:9f:6c:10:79:
         42:12:9b:0a:13:e2:c3:2b:3f:d0:97:96:e9:74:f9:77:5c:d8:
         d0:77:5c:b8:5f:93:75:7f:20:f4:94:70:af:57:97:dc:ca:9f:
         c4:a7:fe:08:f9:62:23:8b:90:55:3f:04:f3:82:be:e1:96:1d:
         3c:dc:b6:58:f0:33:e2:4b:2b:9d:e9:a2:1e:58:c0:a2:9f:0e:
         ad:37:c8:01:d6:a2:25:37:28:84:76:a7:0b:9b:45:a1:ff:19:
         dc:98:ec:48:53:06:7a:b2:77:58:0e:7e:59:6a:f8:d9:d9:1f:
         c5:0b:95:a1:d8:f2:f3:b9:e6:73:85:38:30:4a:77:db:ad:be:
         79:e0:1b:25:90:71:d9:4a:ac:9a:d7:60:4c:d8:b7:7d:0a:0f:
         b4:a9:00:cd:bc:96:0c:dc:e0:a0:44:98:0d:00:0e:5b:f0:57:
         f7:0a:05:98:f7:34:e5:e3:69:54:db:25:72:a9:bb:63:04:b3:
         ef:b4:34:e8:1b:53:4c:04:97:2d:27:f3:64:0d:0c:b6:9b:2a:
         e3:ae:13:f9:59:34:67:70:64:6b:6e:32:4b:27:02:88:27:48:
         1f:b1:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:16 2024 by rpki-client on console-fra.rpki-client.org