Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3230203d3e203238323730.roa
File:                     3138392e35302e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          uWa1t+cxOqpdRjP1RJAP4RY/rd9XI9oRigXHZGwgaig=
Subject key identifier:   D4:4A:0E:F8:13:BD:3A:C6:7E:87:88:C2:FA:67:F5:9F:4D:5F:49:B5
Certificate issuer:       /CN=97544BE1E037DEC68470E5CF05CB2966855E710F
Certificate serial:       18204E3B1F86D14FFE35695B2D11102638C61DD6
Authority key identifier: 97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:19 +0000
ROA not before:           Mon 08 Apr 2024 20:02:19 +0000
ROA not after:            Mon 07 Apr 2025 20:07:19 +0000
asID:                     28270
IP address blocks:        189.50.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:20:4e:3b:1f:86:d1:4f:fe:35:69:5b:2d:11:10:26:38:c6:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97544BE1E037DEC68470E5CF05CB2966855E710F
        Validity
            Not Before: Apr  8 20:02:19 2024 GMT
            Not After : Apr  7 20:07:19 2025 GMT
        Subject: CN=D44A0EF813BD3AC67E8788C2FA67F59F4D5F49B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:8f:92:83:08:b8:0a:04:d3:9d:96:ba:11:
                    0a:22:55:b4:6e:10:ef:56:64:cd:68:e6:13:8b:4c:
                    3e:9c:ed:43:2d:a7:1b:a0:65:a1:fa:ce:5c:0e:a8:
                    7a:83:5f:f2:e6:c9:03:b2:88:6e:04:9f:61:ce:3a:
                    82:de:84:14:d7:41:6d:1e:0e:e4:3c:96:07:e3:b1:
                    8b:f4:54:44:5f:d8:68:3f:72:69:75:1e:1a:38:e2:
                    9b:96:3e:c4:ed:2f:7b:39:3c:af:28:4a:f9:02:4a:
                    66:a5:a5:58:68:e5:e9:ce:d3:8f:70:48:67:7c:ab:
                    cf:1f:ed:75:5d:ee:6a:94:23:e1:61:0d:63:f9:fb:
                    da:6a:2a:c3:e9:67:75:de:1b:22:2c:b8:71:77:5f:
                    c0:40:71:c7:42:88:a4:6f:3b:64:07:90:f2:08:b0:
                    dd:7d:e6:64:38:c1:d0:8b:19:9e:a6:d4:87:02:ef:
                    ab:50:e1:bb:b7:b8:97:16:29:e0:4f:d5:27:35:88:
                    1e:e3:09:85:d8:25:ce:47:d2:d8:5c:62:29:9f:db:
                    8b:c1:7f:e6:8b:64:68:a0:4a:77:89:40:43:2d:f1:
                    8d:88:0e:10:15:f2:2e:78:a2:d4:2d:b6:f9:13:97:
                    1a:1f:3c:ef:2e:35:f4:82:bf:ae:b8:d0:48:66:83:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:0E:F8:13:BD:3A:C6:7E:87:88:C2:FA:67:F5:9F:4D:5F:49:B5
            X509v3 Authority Key Identifier:
                keyid:97:54:4B:E1:E0:37:DE:C6:84:70:E5:CF:05:CB:29:66:85:5E:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/97544BE1E037DEC68470E5CF05CB2966855E710F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97544BE1E037DEC68470E5CF05CB2966855E710F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138392e35302e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:93:7c:85:e6:c8:08:8f:24:e6:f9:78:05:2f:77:c9:a3:
         f8:ba:50:e9:80:8d:bb:af:28:78:90:e6:85:cc:e1:a2:32:8a:
         55:7a:a4:f2:92:d9:d3:46:29:06:90:d9:77:05:14:77:25:75:
         33:7c:2a:c5:17:be:6c:4f:b9:94:c2:5a:3d:2c:a2:eb:b2:c4:
         e5:49:8d:3b:63:f6:b2:6c:ff:a7:90:13:ed:b4:db:a7:46:c4:
         f1:7a:f5:52:f4:70:e1:d1:de:6e:ce:d0:4a:59:6d:7f:49:83:
         3f:8c:a8:c1:2a:8c:70:93:36:5f:1e:92:e8:78:cf:56:7f:ba:
         d8:de:47:12:7a:dc:ba:21:fa:85:97:e5:91:c1:8a:15:ef:cb:
         94:49:f1:40:32:49:68:81:d2:41:d2:b0:c6:cc:6f:6a:16:ae:
         e1:2b:db:a4:a7:64:57:ea:a1:d2:8e:a0:b3:34:63:c1:b8:02:
         aa:52:16:51:c8:18:a3:75:48:ce:5d:53:c7:8f:98:7b:a2:3c:
         99:4f:6f:90:44:34:fb:60:01:23:13:d2:46:14:ee:ad:09:f8:
         1b:99:9c:d6:9d:80:a6:af:e5:05:ba:f5:e6:74:95:f7:98:71:
         26:af:ca:7d:c7:4d:06:47:eb:46:b8:34:8d:b5:38:2a:01:bf:
         18:73:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:14 2024 by rpki-client on console-fra.rpki-client.org