Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
File:                     3138392e37362e3230382e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          osNvA8QDsWrL93vBP9Vrt+XKaaxG0mAqDZAHbpccxpA=
Subject key identifier:   9F:B5:A2:AA:75:99:DE:79:1A:6E:D3:A7:02:2E:1C:A1:38:89:F9:9B
Certificate issuer:       /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial:       4E53B72D7DFB99016FBDB38AF4409F9B2482D6F3
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa
Signing time:             Sat 06 Apr 2024 03:05:57 +0000
ROA not before:           Sat 06 Apr 2024 03:00:57 +0000
ROA not after:            Sat 05 Apr 2025 03:05:57 +0000
asID:                     28360
IP address blocks:        189.76.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl
                          rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:53:b7:2d:7d:fb:99:01:6f:bd:b3:8a:f4:40:9f:9b:24:82:d6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
        Validity
            Not Before: Apr  6 03:00:57 2024 GMT
            Not After : Apr  5 03:05:57 2025 GMT
        Subject: CN=9FB5A2AA7599DE791A6ED3A7022E1CA13889F99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:d1:44:07:00:15:7a:bd:aa:a7:b9:e2:48:
                    2f:df:ab:05:e3:c4:17:74:e4:37:e8:c2:90:3f:53:
                    7d:26:38:1a:8d:ad:c0:af:9f:8a:b2:c8:01:76:44:
                    78:b3:80:dc:65:e6:6b:4d:0f:ed:e0:5d:bb:89:46:
                    80:4e:70:1f:0f:90:6e:3e:ff:8d:a5:37:4e:bb:01:
                    b1:42:cf:a0:fc:e0:ac:1c:0e:4d:2c:a9:9c:ba:9f:
                    61:a2:7a:f1:47:36:74:a0:2b:bd:dd:e5:c9:76:f0:
                    2d:34:97:75:e7:aa:f4:00:72:b0:05:4d:b4:ee:04:
                    c0:cd:b2:cc:c8:12:a8:84:2a:3d:27:77:7d:52:b0:
                    d6:32:74:60:ee:c9:e2:a5:84:31:cb:5f:8f:30:30:
                    04:4d:a8:29:ca:4c:8f:c9:5d:b1:68:a4:a9:f5:2b:
                    38:f3:ea:67:23:e4:4f:de:ce:b4:45:ac:e5:e6:b3:
                    62:16:54:fc:7e:11:8a:6f:18:1d:f9:ef:7e:80:02:
                    60:fa:90:80:dc:d7:25:47:be:12:32:a9:c7:7c:d9:
                    26:2e:d2:ad:e0:85:b8:a3:4a:e5:a6:03:b8:71:25:
                    cf:dc:28:da:b4:e0:3b:9d:d2:d6:04:95:30:6b:75:
                    45:b0:95:c9:e0:a2:7c:da:bf:a0:bb:a3:e5:32:27:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B5:A2:AA:75:99:DE:79:1A:6E:D3:A7:02:2E:1C:A1:38:89:F9:9B
            X509v3 Authority Key Identifier:
                keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3230382e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:da:3c:df:c8:7d:d5:06:44:75:9e:72:19:0a:80:47:a4:e1:
         5c:0b:2c:82:fc:ba:73:91:c5:8f:08:78:8c:f5:cf:6d:77:bc:
         5b:56:b9:70:5e:07:ad:65:a5:44:fd:a8:32:ea:15:ea:b8:8a:
         e5:ef:d7:eb:c5:c7:f0:fa:a4:48:42:ca:68:0e:8b:30:24:5c:
         2d:74:a1:9e:38:26:c5:08:c0:c8:f5:87:91:a6:37:27:b7:e2:
         48:32:bb:96:d1:fd:0c:e2:fd:6a:62:47:73:7a:83:8a:98:c7:
         ad:51:ed:79:03:c0:34:2a:d9:5a:42:5c:df:0b:ab:ef:92:d9:
         8e:b1:f5:4f:e9:a0:f7:e6:92:18:62:ec:07:12:5a:80:6b:d3:
         e9:c9:87:a8:b6:0c:27:92:ae:c5:86:b4:2f:92:2d:56:76:0e:
         c5:5c:2c:2f:7d:22:ba:44:f2:09:73:6e:02:f9:66:42:32:69:
         5d:7e:af:31:41:a8:d8:87:c9:b4:b0:5f:f8:fd:d2:3a:66:4c:
         e5:39:b5:18:d0:80:e3:5a:f3:36:e9:8f:a7:fc:1b:6e:bf:99:
         c5:64:47:65:16:b7:af:64:96:42:2d:1e:ea:58:bc:93:39:a9:
         6d:d3:7a:90:8b:50:25:b5:31:af:41:3d:ae:21:8e:1c:f5:6f:
         23:03:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org