Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e352e302f32342d3234203d3e203238333036.roa
File:                     3138392e33382e352e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          83709Ld82z5gaqQhNiBy7UCQHpBv9Ljbn9OwHqX2Vs0=
Subject key identifier:   77:35:92:1A:83:30:CD:19:F7:6E:54:81:A1:D2:8F:1F:ED:A2:6C:52
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       0DA775F2F4FB342D2CE1BC7EE72CE4A45785E730
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e352e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:16 +0000
ROA not before:           Tue 25 Jun 2024 15:16:16 +0000
ROA not after:            Tue 24 Jun 2025 15:21:16 +0000
asID:                     28306
IP address blocks:        189.38.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:75:f2:f4:fb:34:2d:2c:e1:bc:7e:e7:2c:e4:a4:57:85:e7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:16 2024 GMT
            Not After : Jun 24 15:21:16 2025 GMT
        Subject: CN=7735921A8330CD19F76E5481A1D28F1FEDA26C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:19:3c:ce:ac:70:fc:04:73:24:e1:4c:84:d3:
                    cd:59:98:39:e9:01:20:ed:a4:90:23:ed:39:4e:7b:
                    55:41:4f:3b:d2:31:2a:cb:c4:ef:06:6a:92:11:91:
                    0d:31:39:40:ff:8b:fd:c1:de:49:cc:43:34:10:35:
                    31:f3:bc:52:43:dd:ef:f7:5d:cd:aa:c7:83:49:30:
                    65:2f:34:2c:2b:a2:76:37:27:fa:04:ff:f7:ea:a2:
                    a8:dd:03:04:b6:ea:d6:40:fa:60:00:59:ba:a4:65:
                    c8:ce:71:a7:6a:a2:ca:ea:90:c8:a0:2a:68:4d:ca:
                    3b:ac:4f:c7:84:d4:34:3e:55:63:84:a0:30:9f:66:
                    20:bb:b4:b2:53:8c:3d:cf:d5:2e:66:cb:9d:c2:43:
                    ec:ba:ce:2f:de:30:f0:85:92:52:13:86:9e:ac:26:
                    f7:a5:bd:85:fa:04:b8:89:77:a2:de:58:9c:fa:99:
                    86:a0:e9:08:f9:86:5d:5e:a2:8f:90:d1:90:42:fe:
                    50:af:7d:c8:9c:d3:44:fc:a5:25:4a:26:c1:be:47:
                    fc:ae:a1:60:3a:ca:c8:e2:2a:38:10:98:17:34:de:
                    8b:4a:ea:3c:02:8a:f4:9a:fa:1d:75:b1:09:c7:87:
                    05:84:c8:f4:93:e4:47:28:5f:5c:c4:6b:5d:8c:d9:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:92:1A:83:30:CD:19:F7:6E:54:81:A1:D2:8F:1F:ED:A2:6C:52
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138392e33382e352e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:96:d7:03:a4:ee:23:c4:47:91:19:76:30:7d:c9:2b:31:b8:
         76:50:a3:77:76:24:c2:b9:46:8c:05:72:e2:78:3c:12:65:c2:
         28:ae:46:86:a2:75:d6:3a:02:76:ff:e9:32:17:78:88:54:7a:
         17:15:d5:a6:b0:96:ae:4b:c1:67:09:dc:46:64:c7:e3:0f:19:
         c0:18:27:9f:7b:eb:db:72:ab:03:63:ae:57:c4:df:43:d0:90:
         46:ec:7b:d6:1b:54:06:73:56:de:85:a4:63:9e:93:85:3c:d1:
         e3:9a:77:c2:99:60:bc:be:9c:d0:d4:f1:12:45:e2:6c:45:5d:
         bd:ef:44:3c:90:68:93:a9:3d:96:a9:74:de:b9:44:66:37:86:
         37:c8:e8:33:e5:75:d0:17:d3:78:bb:44:b1:8d:ab:50:fe:3f:
         d7:b5:f6:8a:4a:70:6b:82:51:9a:07:af:31:dc:bb:78:d7:9c:
         15:ad:43:09:22:70:58:1f:c4:59:7a:79:a8:e8:84:9b:63:d4:
         91:d6:d2:3c:89:5a:a3:45:e1:62:90:36:8c:80:e0:9b:da:08:
         48:cb:45:fb:cd:7b:ad:ca:7e:72:6a:6f:9f:4e:25:ed:37:6d:
         b3:e5:64:e8:2e:b4:b9:fa:4d:23:51:f8:32:9b:8f:f1:cf:cd:
         3c:76:5d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:04 2024 by rpki-client on console-fra.rpki-client.org