Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3230203d3e203237363933.roa
File:                     3138392e3132372e302e302f32302d3230203d3e203237363933.roa (raw, json)
Hash identifier:          RUn5vkqL6dac667zaS1q51gaMh1nzkxCFsH76JsM3Cw=
Subject key identifier:   67:31:27:E7:50:E0:B2:A1:A3:D8:16:15:E0:E1:91:B7:B3:53:55:D1
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       560B4ED362F1510F938F582908D65AD176F39D47
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3230203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:17 +0000
ROA not before:           Tue 22 Oct 2024 14:25:17 +0000
ROA not after:            Tue 21 Oct 2025 14:30:17 +0000
asID:                     27693
IP address blocks:        189.127.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0b:4e:d3:62:f1:51:0f:93:8f:58:29:08:d6:5a:d1:76:f3:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:17 2024 GMT
            Not After : Oct 21 14:30:17 2025 GMT
        Subject: CN=673127E750E0B2A1A3D81615E0E191B7B35355D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e6:4c:cd:9b:64:fb:0b:8d:49:f9:c2:0e:63:
                    4e:9e:8e:96:94:65:7b:2a:f1:5e:91:23:c7:fe:e7:
                    7b:53:cd:28:64:17:31:f3:c8:13:34:6f:57:c2:40:
                    f5:d0:8b:15:5f:87:6b:63:c4:bf:3e:aa:a8:22:4b:
                    2c:0e:d3:f4:bd:36:29:0c:42:e4:52:c2:3a:79:27:
                    1c:d5:21:54:f9:d5:33:c1:b2:a5:43:ac:09:d9:bc:
                    10:c0:62:ea:9e:25:e1:08:0d:fc:12:fb:83:24:29:
                    ef:6a:74:88:80:2f:f3:14:ab:c3:d9:bf:e6:d1:87:
                    41:47:40:a8:90:96:0a:27:51:b0:af:92:34:c9:a7:
                    da:73:f8:b5:a5:b0:1c:40:ab:fd:6c:c0:1c:9e:6a:
                    1b:e1:83:50:09:92:1e:c5:2b:bb:29:98:c2:06:fa:
                    61:9a:e8:d0:19:75:90:c1:32:eb:d9:1f:97:80:61:
                    86:3d:55:d4:5e:8a:71:b9:5d:12:57:57:68:e5:11:
                    c2:c5:72:bb:8b:96:a5:cd:ff:c8:a0:e5:5c:a7:50:
                    65:e9:8b:6b:33:2e:23:de:af:47:d2:bc:02:9f:69:
                    64:1a:33:1c:dc:f8:a5:a0:2e:d0:79:b9:e9:25:35:
                    29:28:24:75:89:12:c7:83:ed:a4:68:27:07:2b:2e:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:27:E7:50:E0:B2:A1:A3:D8:16:15:E0:E1:91:B7:B3:53:55:D1
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3230203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:e3:7d:4f:f0:4e:ca:8a:41:60:40:f4:79:cc:16:54:1c:f3:
         15:63:05:b8:4f:68:eb:b7:5c:32:c4:fc:c3:94:84:bd:c7:3d:
         a7:f1:0e:07:1b:91:49:8e:f2:7c:cb:b1:44:6e:ee:70:63:84:
         17:c0:f1:4d:f3:6e:74:46:64:86:e8:c1:af:1c:39:02:4e:40:
         3e:72:4f:67:1a:6b:ff:09:95:c8:96:34:0c:d8:d9:e4:5a:a3:
         16:ca:b8:15:0d:5a:35:e8:bb:4d:1a:09:69:76:1a:da:f6:08:
         06:5a:a0:2b:6e:f1:7e:e4:1f:7f:dc:ca:b0:fe:23:8f:3c:ff:
         a5:26:31:16:8f:18:71:1a:30:0c:ae:93:10:66:d8:95:27:22:
         b6:56:e4:fb:74:ec:01:b9:b0:aa:74:ab:20:83:c1:f2:dc:35:
         ec:c5:ee:9d:bf:8d:10:37:09:2d:ee:e2:96:34:67:28:26:3f:
         3f:37:89:60:cd:42:43:3a:f1:bc:04:53:82:6a:e2:6a:43:d4:
         1e:14:0a:94:eb:26:37:a9:e1:4c:5a:df:0d:3a:cd:16:9e:7b:
         24:5d:74:f4:58:ab:7a:18:bb:90:ba:c0:1b:59:d4:8c:82:f3:
         0b:7a:19:7b:95:f8:6a:ed:66:c6:de:9c:9a:1e:07:2d:9e:b7:
         e4:ee:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:07 2025 by rpki-client