Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa
File:                     3138392e38342e3230382e302f32302d3234203d3e203238313733.roa (raw, json)
Hash identifier:          wlZj+fY4Ra4538XABq5RoFMGn3WIqftc16CpAVmKokE=
Subject key identifier:   08:2D:BC:9A:5B:6C:43:29:31:5A:0A:B2:41:BA:F3:51:C0:52:84:10
Certificate issuer:       /CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
Certificate serial:       0ABE1557E1FC0C6B3CFBA5E2BDAE2785203FF429
Authority key identifier: 70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa
Signing time:             Fri 28 Jun 2024 17:02:50 +0000
ROA not before:           Fri 28 Jun 2024 16:57:50 +0000
ROA not after:            Fri 27 Jun 2025 17:02:50 +0000
asID:                     28173
IP address blocks:        189.84.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl
                          rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:be:15:57:e1:fc:0c:6b:3c:fb:a5:e2:bd:ae:27:85:20:3f:f4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
        Validity
            Not Before: Jun 28 16:57:50 2024 GMT
            Not After : Jun 27 17:02:50 2025 GMT
        Subject: CN=082DBC9A5B6C4329315A0AB241BAF351C0528410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:8d:fd:c0:cd:4b:45:fc:6c:b5:be:c8:b6:
                    47:98:00:4c:f5:e8:0f:56:37:45:fa:a8:ea:d4:1d:
                    d9:99:b1:37:07:1f:1e:e4:83:84:bd:82:e9:19:01:
                    32:31:08:7e:3f:93:95:0e:aa:42:50:44:cc:7e:0b:
                    64:04:87:f9:34:85:2f:2b:79:d6:17:e9:dd:21:c8:
                    55:81:25:85:28:fe:25:6a:25:b8:ba:32:c1:c0:8d:
                    b1:b8:7b:21:f7:1f:bb:16:ce:27:a7:7c:af:8e:b1:
                    8c:60:58:c8:7d:bb:dd:5d:22:e5:ce:2f:4c:94:f5:
                    16:e4:77:64:33:ca:32:4b:db:7f:99:b9:d1:6a:07:
                    61:88:47:cb:22:cd:3f:b4:b4:84:2f:0d:0c:ad:ab:
                    70:51:81:bf:28:2d:54:30:b8:57:84:44:c3:31:27:
                    aa:97:35:26:bc:40:e2:be:2d:5f:a9:61:e7:06:3d:
                    73:b8:e4:a4:ab:a2:64:01:40:a8:5d:4c:b0:06:2c:
                    03:ac:ec:0c:5d:80:f8:3f:1d:f9:4a:53:a6:ae:33:
                    d5:d5:cf:6b:4f:be:5c:22:9c:d1:79:9d:b2:67:8d:
                    1f:0e:89:94:2b:8a:17:76:86:2b:40:d2:5d:9c:35:
                    d7:29:3b:97:97:ef:10:5f:34:3a:80:ec:3e:f4:73:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2D:BC:9A:5B:6C:43:29:31:5A:0A:B2:41:BA:F3:51:C0:52:84:10
            X509v3 Authority Key Identifier:
                keyid:70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:a6:c6:e4:04:6f:f5:51:45:80:6d:47:d5:23:26:c6:96:
         aa:9a:e6:16:02:dc:0e:e1:f5:61:3e:22:23:13:3a:5e:7b:f5:
         62:3a:a9:c2:4c:65:6c:69:46:50:5f:c4:ee:4a:c7:d8:c8:9d:
         6f:18:6b:fb:f3:cd:5b:fd:60:c8:f7:ab:c9:8f:83:96:1d:46:
         4d:fb:04:32:88:cb:4b:c6:c1:a6:30:36:7a:95:cf:da:15:d6:
         42:a1:19:5b:b5:c1:2c:1c:c1:03:15:e6:ba:14:4f:d8:aa:bd:
         9a:1b:ef:85:38:14:44:8d:8c:89:97:a0:f8:1c:6e:90:55:c3:
         e5:c6:df:82:cb:40:3f:ad:8c:3e:0e:48:a8:4e:34:41:98:62:
         a0:a1:73:81:79:41:3e:3e:34:3a:be:cc:ca:ef:4c:38:ab:09:
         ec:9d:56:41:ab:8c:74:f1:a4:e6:ba:e9:2f:08:68:96:64:a5:
         d0:05:9b:ac:1e:1b:d6:02:07:f3:fd:bf:72:76:ea:66:51:78:
         19:b8:1f:aa:60:5e:0d:31:f2:9f:26:fc:98:c4:d0:ba:98:06:
         4a:d4:21:57:cf:62:51:e5:a7:7c:ab:e4:b8:e1:83:9d:fc:a8:
         88:29:6f:b1:56:a3:f1:90:38:49:42:c9:e4:9d:8d:c3:fa:ed:
         a5:e1:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org