Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          qemTecG1NGP8DTRFv+hhRJYcIU81BDGUDOP2+DhaXfs=
Subject key identifier:   2D:A8:04:81:A4:F6:F3:20:31:E3:B8:ED:87:6D:48:3E:D7:2A:4F:F0
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       1D01CDCDCAD96B49F2176315571891CB2B46BAF7
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
Signing time:             Mon 09 Sep 2024 15:00:17 +0000
ROA not before:           Mon 09 Sep 2024 14:55:17 +0000
ROA not after:            Mon 08 Sep 2025 15:00:17 +0000
asID:                     28220
IP address blocks:        187.110.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:01:cd:cd:ca:d9:6b:49:f2:17:63:15:57:18:91:cb:2b:46:ba:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:17 2024 GMT
            Not After : Sep  8 15:00:17 2025 GMT
        Subject: CN=2DA80481A4F6F32031E3B8ED876D483ED72A4FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:83:60:5d:ab:a3:97:a4:cc:64:40:bd:be:
                    15:4b:3e:97:51:52:28:89:f9:37:7b:e8:6a:32:50:
                    32:85:8c:7d:e1:58:66:cc:1f:70:03:45:3b:c7:2b:
                    d6:4d:f8:bc:13:bc:bb:52:38:ac:4b:63:02:3e:a2:
                    75:65:f8:3e:fb:b7:86:f1:27:09:ae:90:17:99:e5:
                    b5:9a:11:f7:fd:f9:ca:2c:1c:e9:2a:f6:cf:f1:20:
                    8d:ce:20:fd:ab:0d:03:03:28:8c:a5:16:13:65:95:
                    f1:6e:0f:7f:9e:bb:09:e1:c7:04:39:03:09:f2:7e:
                    19:c4:06:76:62:23:f4:36:b2:c8:d5:47:7d:b3:03:
                    23:30:6e:a4:90:82:85:49:7e:89:93:7d:be:ec:c1:
                    2e:e9:1b:70:42:e6:73:12:27:34:8e:6b:84:2f:ba:
                    1f:7f:d5:d3:15:ab:79:b4:f0:96:82:1e:cc:07:79:
                    17:9b:77:62:46:e7:0c:a7:06:36:0f:9e:34:b5:14:
                    7c:cd:b6:ab:99:cc:4a:3b:b6:5a:36:54:09:99:56:
                    e8:e0:2a:4a:29:6f:8d:ad:a7:c1:f4:e3:7d:44:81:
                    86:ca:2d:15:2b:de:be:2b:b4:18:82:f9:0b:b6:23:
                    a2:d7:52:c2:f7:46:49:5d:c0:b0:b6:91:90:1f:bd:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:04:81:A4:F6:F3:20:31:E3:B8:ED:87:6D:48:3E:D7:2A:4F:F0
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:35:08:7c:f5:61:59:c6:e7:99:26:ab:36:22:ba:03:43:
         3e:b0:54:a5:50:b5:c5:5d:d6:31:9e:86:a1:85:8c:43:96:2b:
         6a:1a:00:38:65:fd:f3:19:6b:ff:09:fb:f5:2f:6e:d5:4a:c8:
         e7:66:38:59:c6:12:f4:9c:59:2d:dd:73:7e:3a:b8:e6:37:96:
         ca:bb:b8:c5:1d:c8:f6:82:18:b2:fe:90:22:10:b2:f1:18:1e:
         28:bc:fe:92:b3:5e:a7:f8:d6:c1:1a:d7:bb:7f:da:44:b3:17:
         04:da:06:84:84:8f:67:b9:5e:00:f1:07:1c:89:ac:41:c3:f0:
         4e:52:69:11:ec:ba:fb:e0:c0:04:62:50:7a:cf:62:c0:61:c1:
         d5:8d:21:6d:32:91:de:de:92:ca:0d:db:34:dd:a0:4e:f3:fe:
         10:aa:78:5a:df:c2:f8:2b:5e:d1:e4:d9:f6:70:ec:ea:93:dc:
         aa:d1:9e:44:73:35:e2:1e:04:12:99:07:f7:72:f6:86:d5:11:
         0f:ee:9b:bd:bf:13:cd:d7:24:32:01:d7:6b:59:ad:e7:ae:8c:
         c3:f6:d5:c1:a5:06:d0:7e:33:0e:a6:9b:a9:85:55:03:5f:7b:
         9d:82:11:21:eb:e5:af:f0:03:db:88:67:d5:64:bb:ce:b8:fd:
         56:32:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:55 2024 by rpki-client on console-fra.rpki-client.org