Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e382e302f32312d3231203d3e203237363933.roa
File:                     3138392e3132372e382e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          m3oV7d2vNE6yx3FhRAraTvd/+EcfpxFIyTeoUw/L7pk=
Subject key identifier:   76:FD:E3:BC:7E:08:92:8C:5E:78:3B:87:99:A4:F6:00:6D:FF:B3:D4
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       1349010059CB166B45D84F6A6F4081320A800E3B
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e382e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:15 +0000
ROA not before:           Tue 22 Oct 2024 14:25:15 +0000
ROA not after:            Tue 21 Oct 2025 14:30:15 +0000
asID:                     27693
IP address blocks:        189.127.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:01:00:59:cb:16:6b:45:d8:4f:6a:6f:40:81:32:0a:80:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:15 2024 GMT
            Not After : Oct 21 14:30:15 2025 GMT
        Subject: CN=76FDE3BC7E08928C5E783B8799A4F6006DFFB3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:41:3e:06:ff:02:9e:e1:84:25:e8:21:82:
                    f7:cc:d8:c6:ac:c9:04:89:39:4b:82:23:f1:56:50:
                    37:a2:51:89:5c:ef:c7:96:58:51:9e:21:6b:49:79:
                    99:56:2f:c5:7c:ba:49:59:64:1a:76:b3:10:a9:5d:
                    81:10:e0:87:e7:32:86:96:ef:b6:e2:10:d8:dd:17:
                    21:a3:7e:1f:c1:5f:c5:e1:85:0a:c3:6f:2c:f2:82:
                    66:3b:a9:7f:59:dd:de:3e:8c:df:5f:ed:c1:da:ee:
                    4d:e0:6a:de:ed:12:44:25:b8:ec:e3:26:51:0f:88:
                    9e:ed:3e:6c:dc:16:3b:24:c6:bc:d3:5b:0c:bb:72:
                    71:72:de:6c:95:63:ec:c2:ab:18:17:19:36:37:63:
                    52:03:c1:02:c3:c5:80:a4:33:d6:94:56:06:09:b4:
                    2f:b3:23:21:9d:5f:59:23:c8:34:6f:34:05:6e:70:
                    d4:0c:18:c7:8d:5b:da:44:30:d2:be:39:3d:17:a4:
                    09:83:ec:06:be:78:0d:66:0f:45:cc:be:3e:36:36:
                    9c:4b:f8:e2:0f:32:4b:8a:58:84:5c:72:4e:f8:b6:
                    e1:1d:62:8f:e8:99:ce:51:ee:f4:45:86:ce:48:bf:
                    81:4b:f9:ca:68:f4:ee:b2:69:62:3c:6f:f0:a6:0b:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:E3:BC:7E:08:92:8C:5E:78:3B:87:99:A4:F6:00:6D:FF:B3:D4
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e382e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:fb:21:6a:f7:ba:95:d9:ae:0e:77:dc:d6:49:bc:52:ed:
         56:fa:83:bc:8a:7b:d0:54:58:85:b0:c0:a1:6f:78:34:64:c0:
         12:cd:fd:e1:b1:b1:f0:12:24:f0:bc:41:d7:d6:15:6f:5c:ae:
         34:75:47:fc:be:bc:7c:54:f1:f7:ad:a5:8d:ea:0f:0d:55:54:
         63:37:47:d6:87:35:61:15:b7:dd:03:39:66:d9:f6:27:2d:55:
         ed:50:56:7d:6b:1f:9c:97:9f:9a:94:94:ce:c7:43:b7:6a:1c:
         65:1c:16:7a:b8:5a:b8:fe:e7:2f:d9:d3:69:ca:26:33:de:83:
         36:71:6c:02:8d:51:1a:84:98:bd:e1:35:a1:0f:72:cd:c5:91:
         8f:09:80:e4:61:8f:56:10:e3:c6:67:e3:28:cc:62:2e:ad:b2:
         6d:65:b7:9d:52:7c:cc:58:0a:5b:15:97:df:58:d1:6f:d3:04:
         49:1c:75:bb:51:54:90:13:1b:aa:19:88:8d:ae:22:46:5f:5a:
         e7:02:4a:07:8b:2f:8c:67:7b:5b:68:ff:98:2e:92:0b:ca:3e:
         bc:a6:1b:15:06:2b:58:8a:c4:4e:e9:a6:13:03:1e:07:f7:65:
         c3:5c:94:57:8e:7c:d8:ef:5f:e9:e7:7f:9c:b1:0a:7a:cd:09:
         72:e6:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:58 2024 by rpki-client on console-ams.rpki-client.org