Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa
File:                     3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa (raw, json)
Hash identifier:          lR8SH9npabVMaUjnuyxuKvbkZYsVjGujMm2H0ksGc7I=
Subject key identifier:   2E:60:F6:D8:AF:DA:AA:29:F6:FA:01:44:1D:AC:91:77:36:3E:5E:29
Certificate issuer:       /CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
Certificate serial:       39424A7F158A7286047A0087865CD8C2E20CDD6C
Authority key identifier: FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa
Signing time:             Tue 30 Apr 2024 18:18:32 +0000
ROA not before:           Tue 30 Apr 2024 18:13:32 +0000
ROA not after:            Tue 29 Apr 2025 18:18:32 +0000
asID:                     53100
IP address blocks:        187.103.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl
                          rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:4a:7f:15:8a:72:86:04:7a:00:87:86:5c:d8:c2:e2:0c:dd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB00CA0598A73490EF0DBF449C1D7858B1B875CF
        Validity
            Not Before: Apr 30 18:13:32 2024 GMT
            Not After : Apr 29 18:18:32 2025 GMT
        Subject: CN=2E60F6D8AFDAAA29F6FA01441DAC9177363E5E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:85:c5:ce:37:db:56:1d:6d:85:db:3a:41:
                    72:7e:63:eb:c8:50:42:27:ab:18:67:48:05:c7:ad:
                    43:1a:02:d7:fc:9f:95:82:42:e6:18:f5:69:e1:d6:
                    36:2b:ab:26:c7:c8:2f:7c:e6:36:e1:f7:57:1e:16:
                    0f:90:5b:d5:ec:2c:04:c5:ac:9d:74:9f:59:f1:0e:
                    36:86:90:8f:7b:2a:9a:7c:0b:27:8c:f5:e4:61:3b:
                    6b:64:22:19:de:f0:f6:54:fd:28:2c:c0:77:25:4c:
                    11:3c:46:4f:2e:3b:c3:7a:25:b8:cb:25:91:18:01:
                    16:b7:58:f8:a7:2e:43:15:8f:bf:1b:b4:2f:56:04:
                    d9:88:57:87:f5:f1:6b:89:c3:85:41:d8:02:ea:e6:
                    1b:14:6d:03:e6:0a:3d:9b:39:58:2b:cf:78:da:fd:
                    97:c7:5b:f7:6f:c3:2a:b2:e8:4b:46:fd:85:a7:89:
                    4c:9e:5e:9e:ff:12:a5:58:b1:0e:00:a0:93:81:c8:
                    27:fe:92:89:a4:64:34:62:7b:ee:68:5b:e7:a4:f5:
                    58:6b:25:5f:d9:0c:75:8a:be:b2:9c:f5:76:75:41:
                    ed:2b:8e:fb:8b:47:24:11:c3:b7:6d:59:d7:f1:06:
                    5b:2b:80:0e:e0:a0:ec:71:2d:df:59:76:1e:45:d9:
                    36:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:60:F6:D8:AF:DA:AA:29:F6:FA:01:44:1D:AC:91:77:36:3E:5E:29
            X509v3 Authority Key Identifier:
                keyid:FB:00:CA:05:98:A7:34:90:EF:0D:BF:44:9C:1D:78:58:B1:B8:75:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB00CA0598A73490EF0DBF449C1D7858B1B875CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/3138372e3130332e3132382e302f32302d3234203d3e203533313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:f5:0a:f5:f3:b8:2d:7f:38:57:23:53:db:ba:ae:31:23:f7:
         8a:e3:36:d4:b0:9f:63:68:00:14:c1:d9:88:57:5f:15:03:d2:
         75:de:f7:2c:5f:ee:d5:3b:7e:b2:f0:b9:14:06:49:06:91:7f:
         58:a1:bc:20:e2:98:c4:d1:2a:e1:0c:98:9a:f5:f7:58:95:81:
         4f:be:34:c9:a8:d0:c9:a4:96:cb:c2:74:4a:05:cf:de:56:5f:
         0b:4b:b4:3b:16:d7:55:c3:29:88:51:2b:c1:76:7e:2a:75:ed:
         7e:7e:43:5a:57:eb:62:f6:60:b9:61:94:6a:23:24:19:a1:67:
         79:19:e6:26:58:5f:a8:6d:4e:80:18:2c:5b:d0:15:13:79:c1:
         cb:4d:a3:c7:e9:7b:a7:ca:a7:33:4d:81:3c:b8:3e:99:91:a5:
         f9:e8:96:9d:da:67:9c:af:23:36:f9:a2:de:3c:12:f8:7e:d5:
         f7:7d:e1:22:f7:98:e5:70:ba:5c:01:51:8f:48:99:de:c3:25:
         2d:32:4a:76:06:36:0f:e2:02:16:16:75:19:73:1a:37:2d:cd:
         96:72:1f:31:49:96:42:bb:16:3a:ae:43:95:ee:42:d9:8a:09:
         23:b7:38:ff:a4:37:46:21:03:d1:b8:f3:a5:34:5d:39:70:8d:
         87:88:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org