Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32312d3231203d3e203238323730.roa
File:                     3138372e3131302e3230382e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          7/l6TzOB+lxsMXuL5DCM8v73diYKKSLRqMnXzJJaryM=
Subject key identifier:   5E:2D:B1:37:6B:97:E0:B8:D9:FB:F5:43:6C:6F:F4:C8:51:8F:39:08
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       3DCBFAB76727A0EE042225A1915A8A1F07F297B9
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32312d3231203d3e203238323730.roa
Signing time:             Fri 20 Sep 2024 18:01:14 +0000
ROA not before:           Fri 20 Sep 2024 17:56:14 +0000
ROA not after:            Fri 19 Sep 2025 18:01:14 +0000
asID:                     28270
IP address blocks:        187.110.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cb:fa:b7:67:27:a0:ee:04:22:25:a1:91:5a:8a:1f:07:f2:97:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep 20 17:56:14 2024 GMT
            Not After : Sep 19 18:01:14 2025 GMT
        Subject: CN=5E2DB1376B97E0B8D9FBF5436C6FF4C8518F3908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:0b:06:ec:12:f4:7f:18:62:27:0b:07:7e:
                    d3:9d:8b:9e:cb:f5:4a:a6:87:75:95:9c:d0:f2:01:
                    56:79:0c:a0:b7:a4:35:2e:f2:a0:fb:0d:52:39:a8:
                    3d:6f:4b:36:fd:f3:46:e3:bd:ea:c5:10:8d:ec:1f:
                    e9:e1:59:c6:0d:8b:10:b1:f1:f5:23:86:75:ef:f9:
                    74:d9:89:72:96:82:2d:26:e8:63:15:14:c5:4c:eb:
                    ff:b2:0e:e9:57:e8:ca:8f:13:dc:37:52:dd:c8:ae:
                    4f:a3:59:68:0f:9b:4b:35:5a:12:40:09:17:48:a3:
                    88:5e:a1:5b:0e:74:a5:f4:c2:f6:f7:37:cc:6d:f6:
                    2b:e3:99:66:11:0d:31:c5:69:92:01:81:39:00:80:
                    22:da:b1:22:f2:64:02:c9:e5:43:c9:8c:48:e3:dc:
                    71:30:90:9e:9c:9d:6b:91:cf:f3:ca:0b:5f:70:12:
                    11:99:db:e6:62:a0:3c:79:d2:6b:ea:10:5b:65:be:
                    bb:ee:1e:36:4c:3d:47:f1:4e:58:37:7b:5e:7d:bf:
                    3c:41:3e:7d:17:99:49:91:63:0e:eb:e8:3d:17:53:
                    81:c2:ee:ac:fb:9d:bd:e8:d9:6b:58:2f:49:de:0f:
                    4b:b3:2c:e7:af:50:df:96:58:96:60:cd:52:0c:34:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:B1:37:6B:97:E0:B8:D9:FB:F5:43:6C:6F:F4:C8:51:8F:39:08
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:ce:dc:c9:7e:8b:e0:35:85:dc:cc:6b:d3:91:04:cd:74:
         5c:c3:d7:34:9d:47:38:8f:79:61:40:06:14:4c:33:63:33:d9:
         0f:1f:b2:ed:bb:74:57:a1:b3:41:24:46:c9:2c:4a:b2:6c:5a:
         e2:bb:72:a2:10:ae:36:8f:32:5c:e2:cf:52:6e:62:8b:89:51:
         02:f8:06:97:ef:e9:83:10:ac:45:59:0f:71:22:ea:fa:0f:57:
         ce:e9:7e:82:23:2b:17:ff:94:8f:01:99:a9:e0:0a:4f:3e:0f:
         bb:4d:bb:f3:69:77:49:be:f7:a5:0b:05:ef:80:57:a8:3c:f2:
         41:36:f3:cd:3b:05:9c:c4:3c:98:7a:d1:76:05:f0:ab:96:20:
         e0:14:75:ea:dd:61:47:fe:39:eb:6d:4b:c6:74:da:46:64:07:
         1f:9b:c5:12:2f:a3:cb:88:ed:dc:aa:1e:85:93:a8:06:55:3c:
         a1:e7:03:0d:bc:20:d8:66:74:59:b7:99:b4:af:8b:ad:7c:8c:
         79:d9:b1:8c:de:73:46:b3:c9:b0:f0:38:33:d0:28:74:0a:63:
         42:35:e5:4d:b7:45:59:3e:4f:c1:6d:c7:e2:69:03:b9:d4:50:
         4c:a8:ce:ec:4f:50:58:00:8b:5b:57:01:a0:87:b2:31:ac:07:
         03:b7:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:55 2024 by rpki-client on console-fra.rpki-client.org