Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa
File:                     3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa (raw, json)
Hash identifier:          c0TaZwxh2Ll1uMGCyfYLzGHlxo7GmXWMeHX46xjinxI=
Subject key identifier:   3C:17:4F:B8:AD:0C:74:BA:51:DF:89:C4:1E:A6:DC:40:DD:2D:DC:83
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       1A873D1E4017E319A674B3ECDCFE6521FE87D83C
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        187.103.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:87:3d:1e:40:17:e3:19:a6:74:b3:ec:dc:fe:65:21:fe:87:d8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:ea:bc:5e:e2:fd:3e:fb:f6:7d:f6:96:eb:
                    4f:17:9d:b2:c1:33:64:a1:5e:95:2e:19:49:69:17:
                    97:3a:ae:7f:c3:4b:1a:ff:3f:de:d5:2b:b6:85:a1:
                    f1:33:45:86:6c:ba:af:34:81:09:37:95:c0:7f:64:
                    48:4e:f3:e3:f7:de:cd:63:f0:0d:38:62:3d:6e:20:
                    06:c7:37:16:38:c4:ba:53:45:41:c6:69:41:d4:9e:
                    56:f2:36:33:af:f9:9b:04:33:d4:b0:b2:fd:e7:c2:
                    0c:96:a4:45:9c:ca:15:bb:9f:bc:76:d3:ab:74:4f:
                    7d:30:1c:16:e1:e9:a5:41:c3:f4:fd:4b:ee:22:29:
                    42:66:9e:77:69:d2:01:a5:e1:fc:5a:e9:80:86:21:
                    19:2c:b4:dc:52:cc:d2:fd:d6:05:25:4d:55:c5:f7:
                    c3:fb:02:0b:c6:20:6b:ff:68:a9:64:90:cf:7b:db:
                    69:95:71:d9:7e:09:d0:5a:a3:bb:55:a3:4c:7c:50:
                    68:e7:2e:b0:ce:94:a5:f3:73:a1:15:af:3b:4e:35:
                    70:7d:45:d0:c4:50:6c:20:fa:4c:5b:fa:8f:17:ec:
                    fb:6e:39:d1:09:22:15:5b:f1:c1:a6:91:f4:13:e4:
                    7a:f1:fe:ba:a1:27:a8:c8:a9:4f:0c:0f:46:bc:db:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:17:4F:B8:AD:0C:74:BA:51:DF:89:C4:1E:A6:DC:40:DD:2D:DC:83
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:d3:90:c2:89:c0:e9:25:a2:d1:13:d7:9f:f5:81:f8:62:03:
         66:19:a1:42:cc:05:80:a8:ba:47:d3:4e:32:3e:26:83:3e:a4:
         48:90:de:d0:d7:5a:6f:49:20:c5:97:86:17:1e:11:94:b2:e0:
         17:40:1a:e1:88:92:9b:09:bf:3e:d6:3d:60:b6:89:aa:c4:cd:
         16:f8:64:05:b5:46:c8:31:29:67:0a:93:50:a0:c2:1f:12:9a:
         e4:3f:f8:f5:4d:fd:e1:86:39:5d:5e:0e:ea:2c:b4:f6:c8:e3:
         3c:25:6a:33:ec:e6:a8:73:07:e4:34:50:14:58:f2:01:29:d4:
         6b:19:77:71:76:c8:2d:33:d8:2b:9c:da:a1:55:49:49:77:bd:
         78:1a:13:80:3d:3d:44:42:b0:45:b4:2c:87:fe:44:d0:e9:d6:
         be:d2:9c:41:3c:0f:5e:04:49:a6:25:16:67:4b:b0:a9:d9:fb:
         4b:2d:3a:08:2d:b6:49:76:25:b9:ae:4c:38:26:e8:d7:43:4f:
         03:f5:ae:54:34:ed:6d:3f:d4:74:18:52:db:2e:64:7c:20:5e:
         9a:fc:39:af:a6:85:62:ed:65:45:de:23:8e:10:7e:f7:23:48:
         24:6e:6a:b9:2b:2b:56:e1:35:4c:d4:ac:88:86:a1:57:ca:dd:
         f4:1a:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org