Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
File:                     3138392e312e3132382e302f32302d3234203d3e203238363635.roa (raw, json)
Hash identifier:          co2GWVy0ZiDy/WYn8C3RMmolc2ndZJcnlatJsaghxW0=
Subject key identifier:   79:6F:94:CC:0E:D9:5D:40:E7:CA:CE:72:73:57:53:5B:7C:87:8D:86
Certificate issuer:       /CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
Certificate serial:       518EA19C9B43271B9544A4269F9321C6EDFD2987
Authority key identifier: F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3138392e312e3132382e302f32302d3234203d3e203238363635.roa
Signing time:             Thu 04 Apr 2024 17:57:20 +0000
ROA not before:           Thu 04 Apr 2024 17:52:20 +0000
ROA not after:            Thu 03 Apr 2025 17:57:20 +0000
asID:                     28665
IP address blocks:        189.1.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl
                          rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8e:a1:9c:9b:43:27:1b:95:44:a4:26:9f:93:21:c6:ed:fd:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
        Validity
            Not Before: Apr  4 17:52:20 2024 GMT
            Not After : Apr  3 17:57:20 2025 GMT
        Subject: CN=796F94CC0ED95D40E7CACE727357535B7C878D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:ae:bf:0e:4b:df:99:86:16:e3:86:69:51:
                    d1:9e:5b:65:c1:2a:17:ba:98:8f:90:ad:7f:46:3c:
                    51:42:68:d5:a1:a1:ce:34:ca:76:04:4d:5a:6e:c1:
                    ee:12:f4:37:f6:f8:28:c7:92:4e:f9:5b:87:a5:4a:
                    9e:a8:34:83:ca:ca:3c:f2:85:56:0e:2a:07:5d:e8:
                    90:4b:ee:13:1c:57:b7:7d:3f:0a:d0:ca:e7:87:13:
                    24:f1:97:5a:93:cc:39:ca:6b:25:eb:28:56:f4:3a:
                    3b:6d:a2:54:67:d4:ea:c9:7b:d6:be:85:f1:b9:b1:
                    b3:fd:15:d6:c2:d4:3b:a6:89:8d:32:17:92:8d:5f:
                    81:7b:84:b9:48:c0:0b:b9:96:df:de:e9:30:56:ac:
                    36:1a:fc:51:52:33:06:a8:6d:4b:b1:88:1b:0b:05:
                    64:5a:46:ac:ed:0f:b0:83:92:f3:c0:a8:bf:e9:e4:
                    a4:1a:6f:4d:4f:a1:41:b3:c8:47:fb:0e:86:a0:39:
                    f4:57:cb:9c:eb:ef:bf:a2:49:c3:77:db:05:4c:49:
                    38:90:2c:66:f9:eb:44:1e:55:86:28:72:ed:fc:83:
                    9b:5d:e5:81:0d:20:f8:e1:66:25:55:4a:17:72:46:
                    fc:0e:96:5d:18:1b:84:a0:a4:da:9f:b4:28:23:77:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:94:CC:0E:D9:5D:40:E7:CA:CE:72:73:57:53:5B:7C:87:8D:86
            X509v3 Authority Key Identifier:
                keyid:F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/3138392e312e3132382e302f32302d3234203d3e203238363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         da:b1:d4:bb:00:ee:ed:fc:1e:6e:83:72:23:2d:7d:0f:16:e9:
         87:18:4a:d9:b6:a5:99:fd:35:b4:b9:b7:09:17:6e:3a:c3:6a:
         f5:d4:6e:92:7e:d9:cc:03:78:f5:82:b9:cd:3b:f0:f2:67:31:
         0a:b8:72:77:4a:0d:d4:db:0b:73:78:38:85:58:4d:50:2a:a3:
         f5:01:80:5f:98:0d:95:b4:f6:54:cd:a3:55:81:2e:97:78:d0:
         bb:bb:33:57:76:8c:3b:45:13:e7:99:2a:53:57:e1:73:ff:7a:
         9c:17:d6:42:49:e7:9b:77:85:42:cb:89:cc:73:9e:f1:a3:56:
         0d:d7:d0:9c:37:e2:67:55:3e:61:60:98:47:62:0e:19:6f:64:
         f2:8e:18:cd:87:f4:d1:72:11:7f:29:3a:2f:6e:c7:c0:97:9c:
         f2:19:79:0a:19:6c:af:f7:ae:2c:bf:89:e5:c4:dd:26:6e:59:
         ad:95:7e:42:a4:4b:69:03:b1:c5:70:58:8a:ca:a1:c2:30:b2:
         4b:32:96:0a:9f:43:93:79:27:17:f8:3b:26:b6:a2:98:15:73:
         74:a9:b2:93:86:62:5a:b3:15:8e:e7:2b:18:34:69:4f:29:fe:
         1e:ab:bd:ef:59:d8:09:8a:f5:ff:2b:df:84:d2:d4:f5:5c:37:
         fa:fb:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org