Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/3138372e3130392e34382e302f32302d3234203d3e203533313133.roa
File:                     3138372e3130392e34382e302f32302d3234203d3e203533313133.roa (raw, json)
Hash identifier:          q4pSrFnxWwjb2tNxXIT7AO3djr0H2KhQLHBRoovtsfA=
Subject key identifier:   2B:12:AF:F2:8A:DB:29:CF:7C:0E:B6:C1:21:F9:E0:F1:19:F0:67:87
Certificate issuer:       /CN=D4A95BE48E4B84CA5C203C38B1BC90AF68262020
Certificate serial:       40A3C6B04D97F2297786824C879FE1CBC58B7619
Authority key identifier: D4:A9:5B:E4:8E:4B:84:CA:5C:20:3C:38:B1:BC:90:AF:68:26:20:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/3138372e3130392e34382e302f32302d3234203d3e203533313133.roa
Signing time:             Thu 04 Apr 2024 12:25:56 +0000
ROA not before:           Thu 04 Apr 2024 12:20:56 +0000
ROA not after:            Thu 03 Apr 2025 12:25:56 +0000
asID:                     53113
IP address blocks:        187.109.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.crl
                          rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a3:c6:b0:4d:97:f2:29:77:86:82:4c:87:9f:e1:cb:c5:8b:76:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A95BE48E4B84CA5C203C38B1BC90AF68262020
        Validity
            Not Before: Apr  4 12:20:56 2024 GMT
            Not After : Apr  3 12:25:56 2025 GMT
        Subject: CN=2B12AFF28ADB29CF7C0EB6C121F9E0F119F06787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:f0:ca:36:95:c2:33:68:5e:e0:ba:3e:a1:
                    6a:97:11:17:eb:19:7f:8f:75:39:18:5a:83:69:8e:
                    d5:bf:48:6b:19:3b:dd:fd:99:3a:85:8a:15:07:6c:
                    14:a6:f7:28:55:f9:ee:85:03:a7:23:97:15:78:3e:
                    6c:c0:f4:57:a8:2c:a0:54:b9:64:0c:81:79:1c:c5:
                    da:9d:4c:38:e3:e4:75:be:9e:ad:03:c9:18:8a:82:
                    b2:f9:90:08:8e:2a:9e:1c:82:4c:70:9f:f4:76:ef:
                    ff:34:a7:d3:e2:d7:82:f8:45:f4:c8:77:80:c4:0b:
                    0c:69:7f:f8:12:91:17:ac:c8:f9:6e:76:09:ae:70:
                    1a:e6:5d:e2:c3:20:c1:d6:b5:48:2c:4d:95:d3:4e:
                    3a:8a:9e:c8:8d:ee:6c:b1:96:47:7a:25:e2:25:01:
                    40:2d:22:87:5a:9f:84:13:45:93:d3:c6:10:e3:f9:
                    7b:53:dd:57:a2:36:af:ce:25:ae:e3:36:85:ff:fd:
                    8e:7e:8d:29:36:72:39:f6:53:f8:38:27:79:fd:0a:
                    a6:68:8a:3e:60:a5:e8:16:8d:52:40:f7:3b:cb:4c:
                    6f:60:db:23:9d:79:47:30:40:4e:ba:3b:06:47:15:
                    07:b9:ca:ed:68:c5:1b:0d:9b:db:6d:8f:eb:33:1b:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:AF:F2:8A:DB:29:CF:7C:0E:B6:C1:21:F9:E0:F1:19:F0:67:87
            X509v3 Authority Key Identifier:
                keyid:D4:A9:5B:E4:8E:4B:84:CA:5C:20:3C:38:B1:BC:90:AF:68:26:20:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A95BE48E4B84CA5C203C38B1BC90AF68262020.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/1/3138372e3130392e34382e302f32302d3234203d3e203533313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:f0:5a:cf:4a:1c:41:c8:18:07:7e:69:d7:ee:8a:e7:cb:c6:
         9e:7d:8f:da:4d:6d:8b:f4:92:3e:fc:7e:72:be:84:e8:5e:1f:
         cb:0f:10:fb:28:e3:eb:ec:a4:17:08:56:30:2a:27:f2:ae:0e:
         05:ee:df:88:da:e1:a3:16:2b:52:dd:80:81:85:8c:37:b0:fe:
         c6:81:9f:e6:9e:2e:20:3e:62:6e:6e:08:5d:c9:3c:4a:15:35:
         95:d7:f5:42:ee:44:91:80:c2:55:51:bb:f2:f7:e9:1e:0f:fe:
         c9:df:24:17:6f:47:e1:57:17:10:24:a6:aa:ef:89:b7:d1:7b:
         e5:06:89:13:23:45:05:1c:e8:6c:64:fd:f8:25:14:51:0f:bd:
         23:44:e3:4d:85:49:5d:7c:95:1d:11:00:39:e7:c3:cc:5f:20:
         49:ad:22:79:c2:f2:49:1f:cd:45:6f:a5:52:0e:44:a0:49:09:
         cf:d7:43:e5:d7:15:64:8e:2a:ee:e4:75:7b:fd:e7:9a:b1:0c:
         b4:a6:18:b0:22:df:b0:a3:92:2d:e6:40:8e:0a:4c:b4:b3:75:
         4d:c5:db:90:5d:f5:f0:dc:13:81:c0:f6:38:eb:79:57:69:cb:
         e1:c2:c4:ed:c8:0a:61:66:8b:3c:d0:75:ff:6c:26:16:36:18:
         1f:65:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:46 2024 by rpki-client on console-fra.rpki-client.org