Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e302e302e302f32302d3234203d3e203238323833.roa
File:                     3138372e302e302e302f32302d3234203d3e203238323833.roa (raw, json)
Hash identifier:          D9gmWgfCVhgv/oX9Msdp02opYaYs0GfzfyGppuPyFpE=
Subject key identifier:   C3:6C:9D:B2:0D:01:C3:EA:F5:87:5B:61:73:9F:96:15:B2:8E:42:8D
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       15E64524A37E576AB55B6DE6DFC81AFE676BDA0B
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e302e302e302f32302d3234203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        187.0.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e6:45:24:a3:7e:57:6a:b5:5b:6d:e6:df:c8:1a:fe:67:6b:da:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100BBC440B13020DC32BEFB545BD6033FF15556E9D0E4577207AE4E468098AE07FC731DB91914DD96DF1D6895C97067855A0902495BD63150BDEDF420FF267FB599A3097968DB61D2C133315BA17D91076C77D1ADBE291B7CA416961F3CB4CCA436B32CC1A5CB6F419CDCF533AED505EE223C1F57ACF60EA8E27E60D9F83DC7EA2B7C8949234F27BCC555F205529DF4751CED5DCA278331582D7C5D782A36D0369413AC1FD3F3A909529237F2CDD5F9ADF43A6FF5161F65912A72F2D4A1E78E56B65E76DC566661214F257B089C7EAF659A1DF0C023E0D2E944DA7BAE62183A88923D4E7CBCA752E0F59098E636D3EBBC897C100EEC8CF6FFFD334EF15CB0AE94850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:40:b1:30:20:dc:32:be:fb:54:5b:d6:03:
                    3f:f1:55:56:e9:d0:e4:57:72:07:ae:4e:46:80:98:
                    ae:07:fc:73:1d:b9:19:14:dd:96:df:1d:68:95:c9:
                    70:67:85:5a:09:02:49:5b:d6:31:50:bd:ed:f4:20:
                    ff:26:7f:b5:99:a3:09:79:68:db:61:d2:c1:33:31:
                    5b:a1:7d:91:07:6c:77:d1:ad:be:29:1b:7c:a4:16:
                    96:1f:3c:b4:cc:a4:36:b3:2c:c1:a5:cb:6f:41:9c:
                    dc:f5:33:ae:d5:05:ee:22:3c:1f:57:ac:f6:0e:a8:
                    e2:7e:60:d9:f8:3d:c7:ea:2b:7c:89:49:23:4f:27:
                    bc:c5:55:f2:05:52:9d:f4:75:1c:ed:5d:ca:27:83:
                    31:58:2d:7c:5d:78:2a:36:d0:36:94:13:ac:1f:d3:
                    f3:a9:09:52:92:37:f2:cd:d5:f9:ad:f4:3a:6f:f5:
                    16:1f:65:91:2a:72:f2:d4:a1:e7:8e:56:b6:5e:76:
                    dc:56:66:61:21:4f:25:7b:08:9c:7e:af:65:9a:1d:
                    f0:c0:23:e0:d2:e9:44:da:7b:ae:62:18:3a:88:92:
                    3d:4e:7c:bc:a7:52:e0:f5:90:98:e6:36:d3:eb:bc:
                    89:7c:10:0e:ec:8c:f6:ff:fd:33:4e:f1:5c:b0:ae:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:9D:B2:0D:01:C3:EA:F5:87:5B:61:73:9F:96:15:B2:8E:42:8D
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e302e302e302f32302d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:c7:07:5d:6b:83:ae:70:40:14:da:75:12:39:22:3d:41:
         d8:87:92:13:e0:0d:4f:d9:45:73:bf:8f:e0:f2:01:6f:bb:23:
         28:6a:b3:d3:10:93:5e:59:13:60:f6:01:18:1e:82:8b:5c:fd:
         99:d4:e8:c4:07:c3:a5:e8:fd:4a:19:0a:4d:9c:42:87:02:e2:
         69:e1:ab:45:e2:cd:5a:cf:15:71:f7:32:d8:a6:3a:59:1c:d5:
         c7:b9:63:89:c9:f5:40:f9:a4:ed:9e:b5:a3:30:af:6a:b2:08:
         47:e9:68:91:21:f2:f9:39:49:67:f3:44:8a:75:58:2a:80:2d:
         11:bb:87:e3:07:34:05:05:da:3a:9c:7d:90:ae:b5:28:87:22:
         a9:82:6b:d5:4b:bd:77:5f:b8:29:17:11:94:b1:36:25:9f:55:
         4b:1a:b3:41:2c:94:78:6e:c2:b4:07:9c:ae:14:cd:68:1c:99:
         7d:59:ed:fd:c6:8a:68:70:52:8e:f0:4a:e7:0f:49:3c:c0:61:
         10:c1:31:f0:ca:76:fd:9c:45:95:4c:6e:02:04:18:dc:a8:9a:
         cc:0c:5d:54:f4:05:9c:a0:ee:e5:9e:f5:ec:f1:f7:fd:c4:a3:
         db:1b:8a:ef:7d:2f:00:60:21:8f:0d:d1:9b:ff:f1:08:18:1c:
         5f:9b:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org