Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3234203d3e203237363933.roa
File:                     3138392e3132372e302e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          VFh19ClX8yuKNQGDLlA7J9bAggjmQyN4VbKD6KIqSAU=
Subject key identifier:   18:47:9C:D6:10:CF:6D:39:F9:55:E0:7D:AA:F3:3D:25:75:4D:CC:34
Certificate issuer:       /CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
Certificate serial:       0EB35293AD8C4F070374BF3B725865A2E9EC0AD1
Authority key identifier: D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3234203d3e203237363933.roa
Signing time:             Fri 19 Apr 2024 20:20:55 +0000
ROA not before:           Fri 19 Apr 2024 20:15:55 +0000
ROA not after:            Fri 18 Apr 2025 20:20:55 +0000
asID:                     27693
IP address blocks:        189.127.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 10:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b3:52:93:ad:8c:4f:07:03:74:bf:3b:72:58:65:a2:e9:ec:0a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
        Validity
            Not Before: Apr 19 20:15:55 2024 GMT
            Not After : Apr 18 20:20:55 2025 GMT
        Subject: CN=18479CD610CF6D39F955E07DAAF33D25754DCC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:a4:d5:3c:d0:1a:34:55:ee:c9:be:87:c0:
                    d7:4e:00:5f:1c:39:b3:7b:fc:b8:25:47:12:3b:a3:
                    ce:2b:71:05:e2:e0:05:3b:f6:6c:ae:52:12:0c:d9:
                    c2:09:3b:fe:b9:6c:28:34:7e:e8:43:fe:aa:cf:29:
                    dc:77:5b:26:0b:46:19:b8:a1:68:d7:8b:97:c7:1e:
                    3e:8f:2b:a2:5f:7e:57:6e:5e:81:ab:90:44:3e:b8:
                    93:d1:07:04:ef:f0:d2:ef:a2:45:e3:66:53:5d:70:
                    08:7c:7a:ba:fe:46:8e:f6:24:ae:e1:50:f2:fa:3e:
                    85:23:95:bb:c0:19:dd:85:2a:4b:3f:bc:55:0a:50:
                    fd:8d:b8:10:d4:e3:8f:99:82:e5:e8:14:3a:c2:dd:
                    43:ba:a2:ba:19:a4:ad:d1:0e:64:38:6e:b5:56:c2:
                    92:ff:83:35:51:71:0a:57:6d:33:40:10:ec:3b:c4:
                    a3:9f:4b:95:02:27:70:99:68:90:d3:69:3d:5a:6d:
                    0f:9d:86:8f:7e:ad:90:f4:80:8c:0c:35:c5:8c:78:
                    2a:08:59:a6:0c:75:0f:7a:58:55:f0:f0:c5:59:4e:
                    55:a4:19:19:71:1d:dc:9c:0b:40:aa:c8:43:e4:df:
                    ea:f7:a8:fe:a1:d1:d7:8a:65:6c:bf:e8:b7:b8:13:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:47:9C:D6:10:CF:6D:39:F9:55:E0:7D:AA:F3:3D:25:75:4D:CC:34
            X509v3 Authority Key Identifier:
                keyid:D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:03:1f:94:d3:d8:41:e8:d7:a8:55:ff:78:fa:b7:7c:d1:
         46:7e:c6:45:8a:03:39:c0:1c:fe:34:b7:b3:ec:5f:e7:c1:9f:
         06:83:ee:7d:d4:49:cc:b2:38:ff:69:30:f6:32:85:bc:4f:ef:
         bb:1d:2b:bd:df:d3:9b:9a:05:29:9b:c7:c5:cc:d4:7e:63:5a:
         54:46:1a:cf:bf:ac:9e:3f:e5:4d:bc:12:cb:ea:c1:73:5d:8b:
         65:81:0b:2b:5b:e7:fd:e5:3c:8f:dd:ea:52:46:ea:66:dc:28:
         cf:61:26:de:ce:11:c4:17:05:4f:e3:cb:3a:ad:9c:e9:54:8e:
         2d:c1:b5:34:d5:7c:7f:ef:10:24:50:1c:ea:85:9e:78:8c:41:
         19:74:48:a1:57:e9:e0:d7:84:4e:ef:43:ee:a0:e6:6f:29:0e:
         7a:54:8e:03:78:af:2d:be:3a:85:b8:13:13:fe:a9:27:dc:e0:
         ef:f9:89:3f:72:44:0c:74:0a:ee:58:47:31:af:05:3d:72:56:
         cb:06:7b:6f:ab:c6:ca:70:5c:7f:fe:48:cd:26:be:56:f2:0e:
         20:62:4f:fe:ab:a5:12:ed:b9:f9:ca:97:be:e2:b0:a8:7a:c9:
         8f:7b:81:15:17:4b:5b:40:1b:11:84:95:5d:9f:84:ec:d2:6a:
         f6:e2:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:27:54 2024 by rpki-client on console-fra.rpki-client.org