Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa
File:                     3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          JKSMpYAe7xN6C5uO09lJb7FjJS4QTebuhnC1lNTX+1M=
Subject key identifier:   6C:CA:F5:EA:B8:A5:E2:10:4B:59:90:46:44:CB:4F:3F:0B:D2:BB:F2
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       612A829308FA018B164239B04143F5CAE1D0E36B
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa
Signing time:             Thu 04 Apr 2024 19:59:11 +0000
ROA not before:           Thu 04 Apr 2024 19:54:11 +0000
ROA not after:            Thu 03 Apr 2025 19:59:11 +0000
asID:                     262989
IP address blocks:        189.84.136.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2a:82:93:08:fa:01:8b:16:42:39:b0:41:43:f5:ca:e1:d0:e3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Apr  4 19:54:11 2024 GMT
            Not After : Apr  3 19:59:11 2025 GMT
        Subject: CN=6CCAF5EAB8A5E2104B59904644CB4F3F0BD2BBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:12:5d:20:c7:8e:15:73:a7:48:ba:bd:7a:
                    fe:52:b3:79:f8:2c:c5:2c:c9:74:11:08:eb:aa:ea:
                    c2:43:32:49:0e:db:5e:01:fb:ac:e3:b5:3b:eb:6a:
                    2f:6f:8c:86:16:3a:fe:0f:f9:e1:05:27:52:d2:77:
                    91:85:fc:aa:20:b3:92:3b:64:bb:b0:6a:67:ce:64:
                    a0:a2:c2:db:f0:6e:42:df:fd:0f:07:ab:dd:94:c2:
                    39:33:e3:ce:4c:81:ae:3a:f6:a0:d9:58:9e:40:00:
                    d9:94:0c:2b:8d:0c:36:14:e2:0c:b9:37:82:86:f4:
                    bb:b1:ff:dc:83:0e:2b:dc:9a:c3:6a:b7:ec:70:e1:
                    9c:de:b0:db:17:4f:d3:5b:20:16:2d:7c:ee:99:15:
                    db:01:fb:4d:fe:a4:9d:c3:1c:77:a4:37:c9:9d:d8:
                    83:96:6a:db:29:fa:50:21:77:9f:f1:ce:0f:e9:e8:
                    35:df:ad:de:e8:a8:cd:3e:b1:7c:7b:32:7b:ad:e5:
                    01:4e:aa:fb:24:8e:84:d1:fd:4e:c9:49:8b:80:dc:
                    b9:ef:86:ba:c7:02:8a:fa:d7:89:6b:f1:23:63:24:
                    62:69:83:27:15:82:98:87:8b:c8:90:89:cf:2c:e0:
                    5a:48:2e:c5:f9:87:3c:40:a2:29:72:c4:50:41:e3:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CA:F5:EA:B8:A5:E2:10:4B:59:90:46:44:CB:4F:3F:0B:D2:BB:F2
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3138392e38342e3133362e302f32312d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:81:d0:4a:b7:4f:40:58:06:35:7c:94:02:ee:1f:d6:3d:8d:
         e4:82:b6:3d:37:97:d9:6e:3c:10:b5:f5:69:85:38:f3:e4:91:
         a9:dd:79:48:92:01:4e:bf:20:f1:1f:dd:1c:3e:ae:38:8c:24:
         6d:81:f7:51:6e:e1:27:0d:92:01:73:4b:3a:a9:69:59:95:d5:
         c6:43:2e:9b:b1:72:e4:41:87:66:b9:ed:ed:94:52:59:c2:aa:
         4e:c4:9f:57:2a:1d:31:3b:b8:88:e1:71:d5:a1:3f:b9:90:89:
         76:23:51:f6:af:5e:d6:a6:b1:66:ed:ba:c9:40:30:34:89:78:
         78:3d:69:35:ac:41:68:e0:9f:55:ad:eb:8e:48:5b:8b:7a:89:
         a9:45:82:ee:b2:67:0c:ba:d8:c4:24:9d:f1:62:e0:4e:3c:4c:
         10:5b:81:f7:70:5e:5d:49:eb:e4:08:53:b1:95:be:3e:1c:3f:
         f4:50:6b:7d:22:78:89:13:d4:98:55:ee:78:29:7f:0f:91:1e:
         e3:82:3a:79:8d:ad:2e:5e:ba:15:e0:35:e5:66:61:78:c7:79:
         57:b8:50:da:6d:67:a5:57:53:49:8e:4b:3e:58:1b:22:51:de:
         2d:75:c4:11:e0:45:5d:b3:6a:b0:b6:e7:11:ba:95:72:7f:02:
         c6:fb:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org