Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa
File:                     3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (raw, json)
Hash identifier:          q2fF22X/TSPGBt1LJEyEdze8YA34RB9ZNPze0P/0hEM=
Subject key identifier:   01:B7:3A:BC:0C:67:A3:9D:5B:A9:5A:ED:2A:55:69:52:AA:2A:92:96
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       26B88695914585E21B0E72B3D18A2945088E2E7A
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa
Signing time:             Thu 04 Apr 2024 03:10:27 +0000
ROA not before:           Thu 04 Apr 2024 03:05:27 +0000
ROA not after:            Thu 03 Apr 2025 03:10:27 +0000
asID:                     28131
IP address blocks:        186.208.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b8:86:95:91:45:85:e2:1b:0e:72:b3:d1:8a:29:45:08:8e:2e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Apr  4 03:05:27 2024 GMT
            Not After : Apr  3 03:10:27 2025 GMT
        Subject: CN=01B73ABC0C67A39D5BA95AED2A556952AA2A9296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:6b:3b:f7:53:79:38:3b:c1:b4:98:e8:67:
                    34:41:19:86:d6:9f:d6:c8:9b:e9:28:85:50:8b:b2:
                    dc:f1:fb:d7:b4:16:29:c9:1e:db:5c:bd:5a:2a:0d:
                    e4:6f:f0:b7:64:66:f5:e2:12:29:62:31:09:6c:09:
                    ca:c4:e4:65:c4:9c:4d:6b:01:a7:11:06:23:13:e8:
                    7f:57:73:c4:8f:92:c0:7a:6c:81:b0:cb:3c:14:a2:
                    e0:9b:f2:24:45:6a:7f:79:5c:a7:66:70:f0:be:e2:
                    13:3e:20:ef:60:10:db:25:9d:f4:b5:7c:89:d4:6d:
                    84:12:39:88:b5:24:41:56:a0:fc:72:3e:ec:c4:88:
                    5a:b1:9a:33:9e:73:8e:38:75:79:04:07:d9:49:37:
                    4a:39:49:92:43:bf:ea:3d:23:48:13:77:5c:ae:b8:
                    e9:78:4c:05:49:e0:35:f6:2c:9a:2f:17:fe:d8:bd:
                    06:8a:a6:76:78:55:3a:af:27:a6:65:23:58:d8:cc:
                    e0:e3:62:b6:da:12:68:ab:62:b3:83:f7:da:56:20:
                    72:8e:df:03:a2:fa:f3:3d:36:58:1c:66:ed:72:47:
                    0c:7a:e3:22:a5:1b:4a:a1:d8:3d:5e:4b:29:6e:b1:
                    93:71:9c:d1:cc:6d:72:29:fa:d8:da:59:db:42:31:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:3A:BC:0C:67:A3:9D:5B:A9:5A:ED:2A:55:69:52:AA:2A:92:96
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:32:ac:56:df:a1:63:8b:d4:18:e6:c9:54:a8:57:53:d7:
         2c:b6:21:41:b7:88:a4:2f:ad:dc:17:20:28:4a:08:f4:14:a4:
         5a:14:8e:a4:99:2b:d2:a0:57:46:a8:e2:0f:2b:53:ce:1a:3d:
         a9:90:64:70:d4:81:b7:88:ac:93:36:d7:14:44:7d:74:94:44:
         93:1c:3a:a0:28:95:39:56:09:9c:4b:ab:fb:86:0b:71:41:dd:
         59:e5:2c:03:bb:3d:48:41:96:05:91:be:21:b2:7f:1c:4e:5e:
         9c:b4:76:9a:ee:a2:44:ab:5f:c0:e3:9a:e5:87:15:58:69:54:
         25:e2:45:83:de:6c:e8:5d:5e:a4:0d:a7:39:6f:62:6f:bb:97:
         c8:b2:f8:92:95:09:d5:92:c7:77:d6:33:9f:07:ff:dd:db:7b:
         11:ac:fb:b7:6b:d4:bc:6f:02:91:f7:a3:6e:5f:b1:d2:c7:b0:
         b6:a9:f9:5d:37:66:18:c7:57:4d:27:f4:bc:ab:44:8c:db:7f:
         a4:46:3e:07:15:b9:68:31:3f:5e:da:44:6c:db:58:30:a6:85:
         71:41:56:51:67:22:85:12:3f:06:11:27:64:b0:1f:35:59:b2:
         4d:4b:e4:8a:f6:84:7f:de:1d:90:09:db:77:54:c6:42:2e:22:
         1e:dc:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:28 2024 by rpki-client on console-ams.rpki-client.org