Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          x4K8yCCf4kFTdkDpKDgc+SHgLiTyd7gLJx3zkp68Scg=
Subject key identifier:   F7:6F:66:42:A5:EE:88:9F:F1:FF:FC:57:D3:84:73:1D:2C:88:A4:CB
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       47290F31C68BC09240403DD3AEECD1DCC8AE12C1
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 09 Sep 2024 15:00:19 +0000
ROA not before:           Mon 09 Sep 2024 14:55:19 +0000
ROA not after:            Mon 08 Sep 2025 15:00:19 +0000
asID:                     271724
IP address blocks:        187.110.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:29:0f:31:c6:8b:c0:92:40:40:3d:d3:ae:ec:d1:dc:c8:ae:12:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:19 2024 GMT
            Not After : Sep  8 15:00:19 2025 GMT
        Subject: CN=F76F6642A5EE889FF1FFFC57D384731D2C88A4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:24:b7:bc:f3:b1:16:b3:30:95:46:be:c8:
                    10:87:18:3c:fb:11:4c:69:34:1d:8a:b7:7f:c7:4c:
                    4f:37:ea:43:74:47:74:91:d0:4d:27:66:e5:cd:09:
                    9d:6e:d6:9c:e5:06:5c:e2:4e:4f:37:79:f4:27:1f:
                    f4:72:24:c2:85:37:e0:b9:f0:d8:8f:40:f7:86:a5:
                    a1:12:be:c0:66:bc:cb:76:d1:01:48:11:1f:2a:0b:
                    db:1a:79:54:78:ca:ef:6d:ba:e6:86:75:14:f7:e3:
                    09:f6:d4:e8:52:e2:10:02:55:4c:e3:b4:1f:96:83:
                    e1:3c:20:a3:67:89:79:5d:5d:f4:1f:18:8b:69:d2:
                    4e:61:ce:39:94:02:5f:41:95:74:1f:3e:a5:09:81:
                    1f:2a:ae:0e:ec:ff:c0:73:62:27:7f:0e:c6:b5:df:
                    f8:34:cb:bd:6c:cf:b4:78:b8:e5:b4:de:82:12:33:
                    16:fa:8c:2a:e8:72:8f:ea:9e:6d:e8:96:25:35:da:
                    e6:59:b1:e9:b8:24:60:0b:87:15:94:7f:cb:c8:0d:
                    74:34:0c:ab:1b:55:f5:1e:d1:ea:60:8d:b4:83:9b:
                    e5:86:bb:ec:34:28:53:2e:c4:29:0e:e0:b6:fa:60:
                    42:98:c5:1c:9e:26:7a:56:65:d1:08:9b:0d:36:67:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:66:42:A5:EE:88:9F:F1:FF:FC:57:D3:84:73:1D:2C:88:A4:CB
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:79:54:7a:9a:b2:ef:38:05:34:73:59:96:89:f7:b8:02:ab:
         65:94:37:bc:96:8c:09:e2:c5:26:24:10:89:f9:50:18:db:54:
         f2:46:19:74:e6:e0:60:95:df:bb:01:1e:cb:f3:93:c7:0b:df:
         f2:ba:75:98:fb:56:b8:10:31:f6:56:5f:9c:bf:85:9e:7f:a2:
         23:89:7d:7f:5d:52:97:bf:d8:ed:3b:cd:d9:01:ea:20:75:aa:
         21:c8:14:7d:9f:c4:b5:e2:91:c4:ad:cf:3d:d2:0f:e7:4f:55:
         7d:af:45:97:e6:c3:cc:a8:79:3a:b1:45:a3:59:01:03:b9:87:
         b4:30:31:34:ea:c7:26:c1:e9:fa:7f:97:db:7c:19:07:24:2e:
         9e:61:5c:8d:76:d6:a3:f0:bb:71:cc:2a:3c:e3:f7:95:13:cb:
         de:0c:da:a7:38:c8:fd:9a:e1:c2:12:04:05:09:23:86:e8:ce:
         25:b1:49:44:23:db:54:4f:6d:6e:99:b3:db:0e:ff:27:e2:d7:
         cc:4a:47:04:42:48:2e:89:14:69:72:9a:ce:38:1b:f4:1b:52:
         6b:56:44:0f:19:64:a3:34:11:02:5e:5a:86:64:f0:27:35:15:
         57:c5:f9:46:0c:43:e3:f9:a4:45:11:f3:29:ee:94:1b:d0:8f:
         b1:1b:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:55 2024 by rpki-client on console-fra.rpki-client.org