Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32302d3234203d3e203238353736.roa
File:                     3138392e33382e31362e302f32302d3234203d3e203238353736.roa (raw, json)
Hash identifier:          jOEJlnri5w2AmDgzm3vW15VTK7GiCDd4mmRnYqUsYyY=
Subject key identifier:   AF:D1:F0:43:BE:1B:E7:21:89:11:3F:73:A4:81:2E:5A:05:FE:56:BC
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       6A12E73DDF9AD7103054E59E8F8D66E53978EA8B
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32302d3234203d3e203238353736.roa
Signing time:             Fri 17 May 2024 13:57:57 +0000
ROA not before:           Fri 17 May 2024 13:52:57 +0000
ROA not after:            Fri 16 May 2025 13:57:57 +0000
asID:                     28576
IP address blocks:        189.38.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:12:e7:3d:df:9a:d7:10:30:54:e5:9e:8f:8d:66:e5:39:78:ea:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: May 17 13:52:57 2024 GMT
            Not After : May 16 13:57:57 2025 GMT
        Subject: CN=AFD1F043BE1BE72189113F73A4812E5A05FE56BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:59:2d:fc:6e:46:91:26:70:6e:2d:08:20:
                    da:58:df:9a:3b:db:b6:1e:2a:5b:4b:ad:37:d3:13:
                    a8:04:0a:cf:42:f5:12:5c:a7:68:d0:ec:18:93:81:
                    0b:10:69:2f:7e:e5:63:d5:29:88:41:c1:8e:2e:02:
                    75:b4:df:c2:73:15:f4:e6:5d:c5:92:e4:fc:4b:8f:
                    0b:95:74:ce:95:2f:c2:bd:20:ec:83:30:fd:a8:d6:
                    d3:fb:cb:da:d7:26:64:23:54:c1:2c:91:b4:2d:40:
                    4c:73:ac:94:02:de:ff:eb:8c:4f:89:2d:5e:49:5f:
                    83:09:bf:a6:82:9f:de:86:df:11:71:3e:b8:b0:bc:
                    48:76:11:24:90:2b:0f:93:06:88:88:a1:de:79:b2:
                    38:eb:24:c6:00:3c:28:c5:ec:db:ae:9d:7e:fe:d8:
                    8a:8f:cf:29:c1:36:5d:95:ec:34:6b:2c:e9:e5:4e:
                    64:c7:91:ba:03:a9:92:67:5f:8a:7c:f9:aa:cf:d3:
                    cb:34:15:c0:90:2e:80:ec:40:5f:d7:d2:0a:52:17:
                    20:32:e8:c7:ae:a1:08:77:e9:f0:60:4f:03:de:67:
                    76:a8:91:cb:9f:25:f1:ad:ad:d9:23:5a:21:cf:74:
                    c4:9e:11:f3:dd:7d:ab:4d:9f:31:ed:4e:6c:f5:69:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D1:F0:43:BE:1B:E7:21:89:11:3F:73:A4:81:2E:5A:05:FE:56:BC
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e31362e302f32302d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:d4:0e:ed:71:46:67:ac:af:9a:9e:0d:90:f1:2a:d4:47:6e:
         a4:5c:2d:96:0e:22:ca:05:86:c3:eb:6e:a6:ff:94:ed:01:5f:
         34:bd:c4:ac:58:87:ad:ac:d0:31:af:00:07:62:71:c1:bf:df:
         35:30:2d:61:de:5c:81:67:fb:86:c9:c8:1d:22:cb:bf:47:b1:
         39:c9:4e:18:d6:b9:7e:28:0b:8a:33:a6:33:b7:fd:d1:71:21:
         e4:a8:f0:50:21:18:7c:c2:34:ea:0f:66:d4:8c:ac:2c:76:45:
         d3:e2:98:b8:7b:88:78:c8:78:4e:f7:e9:c4:35:ee:53:71:c9:
         e4:c2:e9:46:95:56:99:61:c5:50:18:27:11:e0:5a:ff:f4:a6:
         e3:c5:4b:a4:3f:97:87:6b:ea:ec:b4:62:bb:fa:00:4c:c9:33:
         2e:aa:e5:11:b5:61:93:25:eb:fd:9f:a7:d7:95:12:fd:c5:67:
         cf:33:fa:af:cd:9b:05:8f:31:28:1d:77:d7:00:a1:57:7b:0f:
         a2:c5:78:38:95:cc:0f:d5:bf:ec:25:59:b5:8c:aa:ee:64:ab:
         f6:6a:31:e1:19:88:8c:e1:7d:5c:72:e7:fe:43:e8:85:14:ca:
         41:53:2f:54:f2:c2:bf:c0:a3:ef:97:f1:9a:a7:b5:87:ae:6f:
         c9:13:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:33 2024 by rpki-client on console-fra.rpki-client.org