Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
File:                     3138372e31382e3132382e302f31372d3137203d3e203238323730.roa (raw, json)
Hash identifier:          +Q1twDA7+YMVvD4M3ECy5lFHbMs+7eeQI4ntk7RiPXU=
Subject key identifier:   24:AD:92:8A:84:F6:FE:E8:5A:76:D2:57:2F:13:7B:FF:09:55:6E:CC
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       45C3BEC04961C9A43DA8E2FC780CC4AA28BE6F67
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:20 +0000
ROA not before:           Mon 09 Sep 2024 14:55:20 +0000
ROA not after:            Mon 08 Sep 2025 15:00:20 +0000
asID:                     28270
IP address blocks:        187.18.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:be:c0:49:61:c9:a4:3d:a8:e2:fc:78:0c:c4:aa:28:be:6f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:20 2024 GMT
            Not After : Sep  8 15:00:20 2025 GMT
        Subject: CN=24AD928A84F6FEE85A76D2572F137BFF09556ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:9c:0b:90:d4:65:78:32:d0:f3:41:da:ab:
                    66:dc:68:3c:44:12:a9:8c:44:73:02:dd:b4:08:0d:
                    37:36:15:90:cf:f4:39:33:22:c7:a7:d9:27:f6:6c:
                    de:c2:82:b2:9c:fb:e2:80:90:c9:84:e6:b4:17:18:
                    93:b4:1d:10:76:61:44:44:fc:f0:2f:7e:dc:10:c6:
                    ab:41:6e:ce:b0:3a:5c:5f:bd:ab:26:be:7e:65:98:
                    ab:82:05:16:37:19:50:80:70:8b:76:1d:28:5f:40:
                    19:7e:67:6c:e4:aa:ef:e3:dc:3a:38:b9:d3:0b:06:
                    36:fb:db:ca:21:c5:7c:ae:22:38:9f:b3:f0:26:f8:
                    ad:27:a9:98:3b:61:da:50:08:f9:ce:61:03:c8:89:
                    91:52:41:96:8c:2f:20:06:1e:91:63:a3:ba:85:16:
                    79:86:16:bb:16:b1:29:ef:09:9e:10:79:97:86:1e:
                    0b:fc:63:39:f8:bb:f9:13:5a:c8:ff:c7:13:b5:33:
                    9a:ad:64:5d:a6:a4:d9:84:97:1e:16:b5:0b:27:2b:
                    42:8b:fd:52:a4:aa:f0:a3:ad:07:9e:c6:10:de:5b:
                    7c:1e:bf:c7:a9:0d:28:60:c4:39:62:aa:d0:ad:17:
                    f8:db:ae:3e:ea:7d:19:7f:70:23:58:21:26:c6:7c:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:92:8A:84:F6:FE:E8:5A:76:D2:57:2F:13:7B:FF:09:55:6E:CC
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:44:fa:39:1a:b2:b0:0d:0b:48:87:56:0f:99:96:32:6e:27:
         43:3f:04:80:27:01:d8:18:1a:c5:37:81:28:b3:db:01:80:74:
         9e:8d:ba:39:07:8e:fd:1a:68:11:ba:8c:97:b6:e1:30:ea:db:
         f1:99:71:92:37:8a:44:35:9f:5a:7f:c7:6e:75:15:1a:e3:97:
         e8:1f:a8:bd:e2:ad:65:80:84:96:24:26:ad:9f:25:cc:63:3d:
         98:f6:99:37:75:e6:d5:06:f4:9a:67:69:ee:c2:31:e0:ef:b5:
         de:9e:00:ce:62:fe:c8:d0:60:be:f7:f9:15:0e:da:c6:4f:84:
         a8:8f:d2:62:ed:2c:4b:53:18:41:d8:fb:39:63:42:dc:d4:17:
         d5:32:21:e2:bf:a1:07:5a:ea:ac:66:f7:2c:ad:de:e2:ad:9b:
         32:ac:8c:22:c8:b1:86:94:aa:1a:08:f0:30:6e:39:3f:68:8d:
         59:28:aa:fb:8a:9d:fc:34:43:7d:0f:5a:9c:59:54:2e:9b:dc:
         7c:ee:b0:74:64:ea:a4:e1:a5:11:c1:e9:ec:bb:81:1c:25:22:
         ce:be:60:28:b8:ab:09:e1:98:08:1b:6c:3c:94:4a:f9:64:58:
         1b:55:99:d4:b4:30:dd:a4:97:99:20:24:6b:2e:56:7c:a8:2a:
         4d:b6:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org