Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/1/3138372e3130382e302e302f32302d3234203d3e203238323637.roa
File:                     3138372e3130382e302e302f32302d3234203d3e203238323637.roa (raw, json)
Hash identifier:          2TDBRKJn2Ya5kwEHAxJbcL62ITkflUpuFWnZ77RrkpI=
Subject key identifier:   D7:E0:23:26:A5:FC:F7:3A:5C:73:4E:7D:63:84:FD:41:A4:7E:D5:39
Certificate issuer:       /CN=BCDAEE56DECAD28422F8E711CE91CA2338205CF9
Certificate serial:       15C722B7CB4DAE117F62DF232DEAB03030EE1B9A
Authority key identifier: BC:DA:EE:56:DE:CA:D2:84:22:F8:E7:11:CE:91:CA:23:38:20:5C:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCDAEE56DECAD28422F8E711CE91CA2338205CF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/1/3138372e3130382e302e302f32302d3234203d3e203238323637.roa
Signing time:             Thu 04 Apr 2024 17:46:31 +0000
ROA not before:           Thu 04 Apr 2024 17:41:31 +0000
ROA not after:            Thu 03 Apr 2025 17:46:31 +0000
asID:                     28267
IP address blocks:        187.108.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/1/BCDAEE56DECAD28422F8E711CE91CA2338205CF9.crl
                          rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/1/BCDAEE56DECAD28422F8E711CE91CA2338205CF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCDAEE56DECAD28422F8E711CE91CA2338205CF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c7:22:b7:cb:4d:ae:11:7f:62:df:23:2d:ea:b0:30:30:ee:1b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDAEE56DECAD28422F8E711CE91CA2338205CF9
        Validity
            Not Before: Apr  4 17:41:31 2024 GMT
            Not After : Apr  3 17:46:31 2025 GMT
        Subject: CN=D7E02326A5FCF73A5C734E7D6384FD41A47ED539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:f4:b4:06:1b:36:cc:b0:79:78:4f:09:47:
                    d0:ef:07:ed:5d:f1:e2:4f:89:5a:e2:3d:23:20:26:
                    b8:17:e1:f1:f5:c3:03:85:fe:4c:69:fb:f7:7d:5f:
                    df:0d:cd:d8:0d:7e:ad:7d:3d:d5:18:09:83:52:d1:
                    2b:c0:22:1b:e5:f6:2e:7e:8e:02:a7:cc:11:a3:b9:
                    db:ba:4f:c8:e8:77:02:d1:ca:ff:ec:68:30:e8:25:
                    4c:ff:13:d9:0c:94:fe:ee:5e:f4:3f:cf:57:30:f1:
                    4e:80:5f:c2:11:5e:d4:f3:11:e1:d8:04:de:cc:78:
                    d9:0a:52:c2:34:d6:2a:ea:62:2c:39:8d:99:84:93:
                    bb:8d:26:06:10:c9:60:c6:c8:a4:ea:78:5c:8b:3a:
                    44:ee:73:54:28:c5:f6:e1:4c:44:47:f9:b7:24:6e:
                    98:ab:18:f7:7d:05:64:78:ba:79:40:49:11:69:32:
                    ec:c7:ce:21:ec:7e:3f:d0:2c:01:e9:84:d5:61:30:
                    34:6a:23:52:45:0f:74:ec:b2:74:ad:8a:34:f8:7e:
                    66:09:9c:25:9f:c3:72:12:13:d3:5f:8b:60:38:b4:
                    d4:28:28:c2:5e:5d:8a:d0:fc:29:1b:70:fb:ce:ce:
                    98:da:db:9e:e5:37:b4:7e:0b:b0:3c:8e:93:ac:d8:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:23:26:A5:FC:F7:3A:5C:73:4E:7D:63:84:FD:41:A4:7E:D5:39
            X509v3 Authority Key Identifier:
                keyid:BC:DA:EE:56:DE:CA:D2:84:22:F8:E7:11:CE:91:CA:23:38:20:5C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/1/BCDAEE56DECAD28422F8E711CE91CA2338205CF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCDAEE56DECAD28422F8E711CE91CA2338205CF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/1/3138372e3130382e302e302f32302d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:25:ee:96:07:38:15:1b:c1:6f:cc:d5:79:7f:51:04:55:a4:
         e1:35:d0:fe:cc:b3:4a:0d:dd:0f:ef:2e:ae:d8:ef:80:07:10:
         5e:ba:de:38:b2:e3:0d:af:83:70:37:db:c9:dc:bf:0e:b9:41:
         64:15:25:e3:96:96:49:9c:5a:59:f4:51:b5:7f:26:04:6c:28:
         74:2c:2f:ea:9b:e2:5c:2e:de:09:4d:31:b5:5d:14:d3:b6:96:
         cd:84:10:f7:aa:b0:42:16:8b:21:02:f3:1f:e1:2c:bf:92:79:
         cc:43:37:24:b9:82:4b:52:e2:0b:0e:23:f6:24:bb:c3:05:80:
         05:59:6a:de:5c:17:65:29:1b:ea:12:e1:44:74:8c:5f:50:3c:
         6a:cd:51:9b:f8:6a:dd:40:4e:e2:87:23:5c:f6:98:c7:55:83:
         d7:bc:e2:46:9e:b2:4d:d6:79:96:af:65:23:3b:9d:69:ac:4b:
         93:d9:98:91:1f:2d:64:eb:59:a9:82:d8:6e:d9:05:a2:87:c9:
         83:e8:cb:ad:96:a6:0b:7b:a3:4a:71:89:3a:d8:52:b3:16:76:
         23:3d:8c:b2:03:88:a5:42:ad:34:50:3f:2c:90:33:35:ea:14:
         bb:87:3f:1a:12:25:ba:f8:a5:0e:cb:30:0b:5b:c0:d2:82:26:
         17:56:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org