Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          k9viPK8dAFozuJ6zq5Aq9LPPtE6AI0hQBnYJ93xKu+s=
Subject key identifier:   F0:99:F0:6F:B8:47:E4:4C:06:E2:DD:AE:B9:03:57:AA:1A:10:89:B8
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       4FBC88B328A865D570B5A3621881A0D8132D7126
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28220
IP address blocks:        187.110.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bc:88:b3:28:a8:65:d5:70:b5:a3:62:18:81:a0:d8:13:2d:71:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=F099F06FB847E44C06E2DDAEB90357AA1A1089B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:dd:f6:01:22:41:ec:7d:96:64:6b:c0:9d:
                    fb:c3:33:0d:0a:af:16:e8:4d:df:e7:2c:83:5c:6d:
                    90:8f:c3:f8:81:ce:f5:03:05:16:e5:ea:92:b1:ab:
                    45:ef:df:06:38:98:ee:86:07:75:ea:d9:3b:95:de:
                    35:53:6f:cc:a8:57:9e:73:43:3f:a7:a2:d9:56:8a:
                    59:04:0a:9f:34:c3:29:b0:e8:56:7a:6a:6f:e4:7d:
                    b9:67:0d:e8:21:11:78:52:bf:e0:7d:65:a6:3f:ce:
                    15:07:d8:05:4b:e8:e3:4a:9b:72:51:95:fd:24:e8:
                    ed:76:2f:f1:d9:e9:c2:f2:e8:d4:6a:cb:74:67:c2:
                    b5:af:06:a0:d9:d2:15:b6:59:f9:0d:8c:18:be:24:
                    11:94:c3:3e:2d:5e:ec:70:b2:71:3f:c6:a2:98:42:
                    0b:f5:0f:5a:84:83:3d:21:6f:05:8f:4f:64:4f:df:
                    50:e6:04:6a:81:5e:f1:37:4a:7b:d1:8f:eb:d9:2f:
                    5f:ed:7e:0e:67:eb:e6:ed:ca:fc:51:8e:7f:53:86:
                    05:34:33:b9:6c:91:fa:c5:f7:2f:f6:b4:59:98:cd:
                    b9:41:4f:3b:a9:9d:39:6b:57:ea:34:d9:8b:fe:fb:
                    df:43:7b:07:73:44:bf:d8:4c:f5:d6:88:4e:8c:58:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:F0:6F:B8:47:E4:4C:06:E2:DD:AE:B9:03:57:AA:1A:10:89:B8
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:f0:d9:f7:d6:28:c6:77:c8:64:45:49:2e:65:cd:45:68:
         9f:07:e7:04:47:c7:d7:ce:73:1c:ae:1a:ac:0d:a4:b2:79:d4:
         f9:1a:7b:cd:f1:e2:26:53:15:01:93:f7:2c:a4:af:f6:47:61:
         72:68:8c:63:3d:95:c1:3a:fa:a1:18:89:16:16:08:72:e0:73:
         2c:d6:35:db:4c:ab:7d:68:65:2a:e8:7e:e6:e2:65:2b:cf:1e:
         14:cb:f9:e2:39:00:0c:88:95:fa:f1:f2:86:39:14:7c:5f:07:
         4f:a2:a2:ac:6b:51:59:36:8d:2d:2a:d4:d8:79:85:ac:fd:fa:
         a6:b5:6f:f6:87:0f:70:95:c4:1d:91:b1:26:c3:91:7a:f1:96:
         50:cf:5f:1e:13:cc:c8:8a:4a:03:bc:15:36:bc:24:b3:06:8e:
         e4:d8:25:21:90:a1:17:91:ec:7a:99:30:3a:6a:22:87:3d:3e:
         3f:74:83:eb:a1:7d:7e:94:c4:f5:1c:88:a1:7d:0d:8f:49:65:
         e0:ac:61:83:a1:57:bd:a4:1a:6b:93:30:4c:21:a7:35:61:08:
         da:d4:1e:92:73:30:88:23:64:5c:fa:3f:7d:c1:6d:18:73:a9:
         5b:ee:b1:a6:72:5a:81:25:4c:24:63:cc:0d:ed:cf:80:68:bf:
         98:f5:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:55 2024 by rpki-client on console-fra.rpki-client.org