Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/3138392e3132342e31362e302f32302d3234203d3e203238323139.roa
File:                     3138392e3132342e31362e302f32302d3234203d3e203238323139.roa (raw, json)
Hash identifier:          wMbV5lQYsRAN114IRmcId1oLwb27a2xL0utwB53+tDA=
Subject key identifier:   9C:25:D9:8D:72:1E:3A:E1:55:9D:8A:2A:DC:3B:16:59:20:8D:29:63
Certificate issuer:       /CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
Certificate serial:       505FD1CD92A80ACBB5031F0C2C20BCC196B3B124
Authority key identifier: 80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/3138392e3132342e31362e302f32302d3234203d3e203238323139.roa
Signing time:             Thu 04 Apr 2024 00:07:06 +0000
ROA not before:           Thu 04 Apr 2024 00:02:06 +0000
ROA not after:            Thu 03 Apr 2025 00:07:06 +0000
asID:                     28219
IP address blocks:        189.124.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl
                          rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5f:d1:cd:92:a8:0a:cb:b5:03:1f:0c:2c:20:bc:c1:96:b3:b1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809D9FD2F741CD2C6EACA91BCA8D29582494856C
        Validity
            Not Before: Apr  4 00:02:06 2024 GMT
            Not After : Apr  3 00:07:06 2025 GMT
        Subject: CN=9C25D98D721E3AE1559D8A2ADC3B1659208D2963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:11:a3:f5:7f:a5:af:aa:22:d3:01:80:5b:
                    30:35:14:cf:a9:75:4f:84:89:e7:55:52:03:36:c9:
                    52:7f:b7:68:71:73:09:2a:62:99:46:f2:d2:60:33:
                    2d:98:12:c8:39:91:ce:69:45:f4:74:23:bf:4d:07:
                    df:07:a9:e9:ae:d4:99:f3:42:01:8c:d0:11:18:de:
                    62:7b:2a:cd:0d:c1:b3:ac:2d:d6:3e:c1:18:c9:d6:
                    82:2b:34:aa:37:28:f6:9d:7a:29:bf:9d:2c:97:1f:
                    b0:9e:05:79:8c:83:9d:61:c0:a2:b4:08:02:0e:41:
                    34:78:74:ff:ca:6e:0a:7d:42:7a:83:70:fc:ec:e4:
                    dc:67:2c:6a:0a:5f:09:3b:a5:0b:2c:61:a3:d8:7e:
                    59:52:72:33:32:04:e7:cf:fa:8d:22:bd:a5:87:05:
                    8c:2f:df:ac:0c:dc:81:50:07:57:83:48:45:9e:67:
                    8f:f2:1e:f4:92:ee:4e:b8:d8:03:33:f0:71:f0:71:
                    d9:6b:7f:36:84:96:3b:ba:fa:39:66:0d:34:11:97:
                    60:12:d1:cb:a6:44:3f:ff:74:d9:27:fd:4a:b1:90:
                    a7:52:65:69:ba:96:ab:b4:08:1b:32:12:71:18:67:
                    74:84:07:be:ba:19:56:d6:e2:0b:d3:57:af:cb:47:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:D9:8D:72:1E:3A:E1:55:9D:8A:2A:DC:3B:16:59:20:8D:29:63
            X509v3 Authority Key Identifier:
                keyid:80:9D:9F:D2:F7:41:CD:2C:6E:AC:A9:1B:CA:8D:29:58:24:94:85:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/809D9FD2F741CD2C6EACA91BCA8D29582494856C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/1/3138392e3132342e31362e302f32302d3234203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:5f:ce:93:05:a9:19:4d:f9:01:a4:49:98:2b:55:ef:8d:
         76:b9:d0:c4:0d:31:e0:7c:0f:b1:d9:6f:18:f7:96:6c:86:19:
         a5:aa:b7:74:d9:3e:90:d9:ef:ca:2a:36:88:87:81:ea:5e:79:
         a4:f6:ab:ca:13:99:94:8c:2a:16:c8:c3:9f:83:27:21:9c:12:
         cc:e8:7d:1c:bf:2e:d8:93:59:78:8b:39:3e:bb:a5:95:7f:78:
         e2:5b:14:af:19:9b:16:c5:4e:8d:29:89:8d:c9:e4:61:ee:b4:
         6b:e3:8f:6f:2b:ba:d1:ff:d1:6c:84:53:33:eb:87:6a:a4:3f:
         23:43:6a:a4:a8:f1:fc:a6:29:4b:12:57:0f:30:c4:8f:d1:cf:
         38:67:77:88:59:f5:de:05:1e:7b:6b:60:06:d2:71:0e:7a:b7:
         1a:6f:cd:04:bd:53:42:93:dc:ab:e2:83:82:f9:7d:17:69:db:
         cb:22:0e:bd:63:9f:59:23:7f:04:47:bb:85:fe:85:a5:d4:8d:
         26:e5:7b:ca:94:f4:ec:a0:5e:ae:03:bf:87:06:10:2d:84:57:
         bb:0c:23:0d:bd:10:ad:ce:eb:3c:e8:e1:23:90:23:20:3d:19:
         06:27:de:9b:41:bd:62:8c:eb:5c:33:aa:8e:3f:e0:e7:d2:d5:
         6e:93:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org