Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e39302e302f32332d3234203d3e203238333036.roa
File:                     3138372e39342e39302e302f32332d3234203d3e203238333036.roa (raw, json)
Hash identifier:          mXc6ID12LTJU9YHrlStHM+XSZM8vX4Ag8e2iDO7btPA=
Subject key identifier:   3C:11:76:F9:A5:E7:E9:F3:FB:94:77:0D:95:0A:78:17:C8:14:A5:A9
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       07F81EF82E8559FB1EDC5933586E620843648B8F
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e39302e302f32332d3234203d3e203238333036.roa
Signing time:             Thu 17 Oct 2024 20:11:49 +0000
ROA not before:           Thu 17 Oct 2024 20:06:49 +0000
ROA not after:            Thu 16 Oct 2025 20:11:49 +0000
asID:                     28306
IP address blocks:        187.94.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f8:1e:f8:2e:85:59:fb:1e:dc:59:33:58:6e:62:08:43:64:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Oct 17 20:06:49 2024 GMT
            Not After : Oct 16 20:11:49 2025 GMT
        Subject: CN=3C1176F9A5E7E9F3FB94770D950A7817C814A5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:56:cd:e8:5c:13:c5:87:13:9e:92:fe:86:
                    4c:2c:26:cd:b4:04:a1:a6:84:7d:1f:c3:f9:8b:96:
                    49:0d:85:e5:19:c2:e1:38:45:dc:fd:03:27:34:6b:
                    ee:ac:14:fa:2d:61:3d:c3:f4:13:8e:fb:c2:7c:6e:
                    26:bc:c5:c2:99:60:7d:b8:a6:3a:ea:32:01:f2:e6:
                    8b:7c:c2:03:c7:68:b7:6b:ed:ea:50:a5:36:c3:b9:
                    00:e7:db:c5:c2:92:48:f6:74:70:f8:82:b7:44:88:
                    95:5a:32:3e:c8:35:27:40:91:85:62:64:a3:27:52:
                    05:b4:80:64:05:96:60:62:3d:da:3a:c0:d4:6f:14:
                    86:a0:fd:49:26:fa:af:54:4d:15:96:2c:08:3e:5e:
                    49:27:77:0e:70:5b:9c:40:74:e2:0d:84:30:ab:53:
                    08:93:00:2e:8e:1e:76:ba:32:8d:d3:7d:38:84:a7:
                    3f:4a:d8:94:8c:b5:19:1b:7d:39:88:60:99:fa:a5:
                    5a:93:8b:3e:d9:9c:0d:59:14:89:47:f8:13:55:c2:
                    15:31:8f:88:9c:f0:af:b6:6f:bd:42:61:b9:c8:c4:
                    a2:95:ab:c6:b2:a9:8e:c7:13:ab:62:cf:84:43:18:
                    bb:87:96:c1:0e:28:c6:87:1d:38:de:c0:dc:bd:d2:
                    16:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:11:76:F9:A5:E7:E9:F3:FB:94:77:0D:95:0A:78:17:C8:14:A5:A9
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e39302e302f32332d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:01:43:50:50:b2:a4:7a:88:1d:8b:81:ff:19:63:b3:69:
         d7:05:c9:0a:f5:6d:f9:d1:25:84:69:15:41:e4:8a:17:36:0c:
         6e:eb:d1:ea:a5:ad:cf:20:4a:b8:88:62:9c:da:04:f0:78:f9:
         09:75:9d:e6:76:95:64:4a:98:c0:15:41:db:94:fd:f5:e6:d6:
         40:68:f3:4c:8c:8b:77:c0:03:ca:76:34:7d:43:c5:17:27:23:
         97:f5:12:d8:e2:8a:2f:b2:4a:4f:f6:4a:64:c8:93:c3:49:ee:
         99:07:7e:24:46:08:df:4e:85:b5:ee:c6:49:ee:81:f8:1c:ac:
         7b:f1:40:c4:5d:aa:e9:f8:32:c0:8f:67:5c:b4:d3:e3:7f:54:
         4f:1e:ec:a9:e3:3f:06:fb:b3:e4:0b:2e:7d:ec:2d:a5:c1:5a:
         e1:e1:b9:3c:c9:61:8d:b6:34:85:20:c3:cd:f7:54:2a:51:ba:
         37:4f:62:4c:3e:0f:3a:c6:e2:d6:d6:88:b7:1f:13:31:07:02:
         f9:0b:1c:6c:c2:e4:4d:b2:20:d1:1e:f6:5d:ca:bf:2c:7b:96:
         7f:3e:57:08:ab:d0:7a:73:32:e5:14:29:3e:68:4a:81:62:5e:
         e2:61:1a:23:c2:49:f5:55:2b:e5:d8:99:4a:11:23:bc:3c:55:
         d6:9d:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:02:03 2024 by rpki-client on console-ams.rpki-client.org