Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
File:                     3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          PY4DumeP1AVf+Jtvz9Osak3L9sas3P817HmdqSDg3hc=
Subject key identifier:   45:FD:2C:D6:4C:D7:1F:4E:57:8E:51:97:8F:04:47:70:6F:A5:AF:7F
Certificate issuer:       /CN=97544BE1E037DEC68470E5CF05CB2966855E710F
Certificate serial:       23D618B2787EF543410B7EFFA3F2B547C65CADA9
Authority key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:07 +0000
ROA not before:           Mon 08 Apr 2024 20:02:07 +0000
ROA not after:            Mon 07 Apr 2025 20:07:07 +0000
asID:                     28270
IP address blocks:        186.219.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d6:18:b2:78:7e:f5:43:41:0b:7e:ff:a3:f2:b5:47:c6:5c:ad:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97544BE1E037DEC68470E5CF05CB2966855E710F
        Validity
            Not Before: Apr  8 20:02:07 2024 GMT
            Not After : Apr  7 20:07:07 2025 GMT
        Subject: CN=45FD2CD64CD71F4E578E51978F0447706FA5AF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:29:ff:2f:df:35:92:08:a5:40:65:d4:7e:
                    aa:d7:19:05:da:51:e8:1f:7f:89:16:d8:33:a8:52:
                    63:1d:2b:40:b1:c7:21:d2:fe:55:7d:bf:fb:a1:7e:
                    df:65:ac:3c:f5:d2:cc:26:e1:4a:7e:5a:ec:14:50:
                    df:da:74:17:82:df:72:e6:bf:21:50:f1:b6:79:43:
                    a3:7a:a1:bf:39:b7:06:1d:b9:3f:e4:84:3f:4c:16:
                    e3:94:4b:56:f6:7b:cb:a2:46:bf:ec:d0:b4:6c:4a:
                    98:ae:f8:22:18:78:68:20:64:b8:01:f0:f0:d2:3c:
                    44:3c:3b:a1:db:9c:4c:54:87:5d:98:a3:a6:84:9d:
                    39:d7:a2:c4:7b:93:de:9f:d1:21:1c:1b:f7:13:bd:
                    df:58:8f:b8:3c:7c:8f:6d:13:bd:a1:81:9e:f1:10:
                    56:97:6b:b5:f3:36:fe:e5:e7:4a:4a:03:14:ee:2a:
                    d8:a1:fd:3f:20:18:4e:75:e2:ca:45:7e:c8:9d:70:
                    81:10:47:c2:6b:37:72:83:3f:92:25:24:42:19:e1:
                    97:8a:31:c5:66:41:12:2e:58:c1:c5:25:a6:b3:73:
                    5f:f3:c0:7c:7c:98:aa:c1:e6:2b:43:ae:c3:ab:22:
                    cf:35:71:4a:e4:6a:6e:24:df:46:92:f8:27:45:12:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FD:2C:D6:4C:D7:1F:4E:57:8E:51:97:8F:04:47:70:6F:A5:AF:7F
            X509v3 Authority Key Identifier:
                keyid:97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:f9:13:e6:c0:d2:5c:29:3f:dc:0c:9a:78:b2:48:68:94:
         7c:75:b9:89:fe:82:51:92:49:98:7e:f9:bb:f4:ac:a4:60:30:
         b5:84:5c:29:e0:c1:01:2f:3a:a1:32:97:27:43:22:a9:35:f7:
         79:b3:d7:61:da:b0:8f:f8:7a:5f:85:0a:6d:1c:5f:77:fc:04:
         7f:35:55:93:29:74:3d:6b:7e:20:63:06:8a:f2:4b:5f:c8:16:
         c9:7b:e5:c7:a9:ce:84:22:a1:59:de:47:62:23:9e:26:42:5f:
         ec:08:3a:db:53:4d:18:54:4e:6a:b7:d2:5f:b4:20:d9:25:10:
         7b:0a:5c:1d:de:5f:ab:69:d8:3d:b4:1f:d2:4e:fc:22:d9:21:
         2a:c0:e3:55:2d:58:05:da:0a:1d:27:bf:8f:00:26:15:cc:b0:
         74:65:d7:b4:42:c7:eb:93:4b:57:2d:61:94:9c:ee:4a:c6:9a:
         cb:b4:c4:8a:c7:f2:98:bc:ad:5b:b9:e7:ca:05:e4:e8:dd:c2:
         4d:24:0d:59:aa:f6:2c:74:29:28:0b:79:4e:7b:4a:01:36:16:
         a5:8d:fc:a0:7d:e6:4e:e6:78:25:23:54:84:a1:b8:98:7a:f2:
         9c:f6:5c:a7:43:3c:ce:31:86:08:00:35:8b:b2:93:f0:0a:13:
         23:ff:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:14 2024 by rpki-client on console-ams.rpki-client.org