Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/1/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa
File:                     3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (raw, json)
Hash identifier:          jWxw5Lw6Aj/bsmqBOGRsdza6b4Y/BCiRIiQ0ihaW5MU=
Subject key identifier:   90:73:77:FA:0E:FD:65:F7:8D:60:A2:F2:BA:4C:DC:92:80:F9:0A:C8
Certificate issuer:       /CN=CF4BD03B70D46E99AC9AD668F53CF5DA38597420
Certificate serial:       45A7F8168E89E32FEDD84B7B2AA124B3F08D2CAD
Authority key identifier: CF:4B:D0:3B:70:D4:6E:99:AC:9A:D6:68:F5:3C:F5:DA:38:59:74:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4BD03B70D46E99AC9AD668F53CF5DA38597420.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/1/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa
Signing time:             Fri 26 Jul 2024 13:07:12 +0000
ROA not before:           Fri 26 Jul 2024 13:02:12 +0000
ROA not after:            Fri 25 Jul 2025 13:07:12 +0000
asID:                     28232
IP address blocks:        189.127.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/1/CF4BD03B70D46E99AC9AD668F53CF5DA38597420.crl
                          rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/1/CF4BD03B70D46E99AC9AD668F53CF5DA38597420.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4BD03B70D46E99AC9AD668F53CF5DA38597420.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:f8:16:8e:89:e3:2f:ed:d8:4b:7b:2a:a1:24:b3:f0:8d:2c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF4BD03B70D46E99AC9AD668F53CF5DA38597420
        Validity
            Not Before: Jul 26 13:02:12 2024 GMT
            Not After : Jul 25 13:07:12 2025 GMT
        Subject: CN=907377FA0EFD65F78D60A2F2BA4CDC9280F90AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:64:48:42:52:08:fd:2e:42:0d:c2:8d:86:
                    e0:15:48:4f:40:76:ad:ae:c8:ba:ea:df:19:72:b5:
                    46:f0:36:0f:a0:d6:3b:ac:30:c9:62:5d:49:8b:dd:
                    7c:ab:2e:1c:76:2c:e6:59:00:7e:3d:b1:5a:ef:1b:
                    7b:bb:ce:e7:98:32:3f:64:17:46:fb:62:e3:61:45:
                    8e:b5:43:d8:ed:73:88:eb:54:17:a7:9a:5f:9e:ad:
                    57:5e:55:20:66:75:8a:df:29:ce:68:81:95:27:0e:
                    b7:ad:92:74:53:89:5d:33:24:be:e3:06:33:27:11:
                    86:7d:aa:e2:d0:bd:dc:3d:35:5f:ad:de:de:d5:f7:
                    d8:4f:8a:20:67:2b:48:59:09:48:71:4b:ea:07:26:
                    0a:c9:e2:07:d6:b4:17:4a:09:b0:bd:d2:2f:72:45:
                    39:31:1f:62:a9:b6:e8:50:a1:31:99:2f:aa:93:45:
                    da:0d:f5:a3:7f:45:dd:1e:5f:e0:3a:94:56:be:04:
                    2f:72:13:8f:17:d6:83:05:d2:44:a0:a7:69:40:8b:
                    67:05:25:24:4e:0f:2b:f3:db:3f:68:e8:b6:77:ac:
                    5f:4f:06:13:a4:f0:78:73:dc:43:bd:0a:95:1d:3d:
                    cd:44:26:72:0b:59:da:1d:b6:da:a1:be:51:1b:fa:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:73:77:FA:0E:FD:65:F7:8D:60:A2:F2:BA:4C:DC:92:80:F9:0A:C8
            X509v3 Authority Key Identifier:
                keyid:CF:4B:D0:3B:70:D4:6E:99:AC:9A:D6:68:F5:3C:F5:DA:38:59:74:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/1/CF4BD03B70D46E99AC9AD668F53CF5DA38597420.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF4BD03B70D46E99AC9AD668F53CF5DA38597420.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/1/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:de:d6:96:a5:b5:cd:8b:c9:e3:e1:7a:d5:a9:be:d7:a8:20:
         66:0f:dd:3f:02:78:59:6c:54:79:9a:b2:da:9f:ad:3b:5f:9b:
         ee:9c:eb:7e:2f:5c:b0:f9:64:fb:4c:b4:9c:bf:6e:52:69:7f:
         7d:70:ce:19:53:0c:bb:f9:af:f7:8d:57:ba:fe:7b:06:f5:8d:
         3f:6b:3a:b8:d7:97:4f:39:37:50:7c:0b:c7:97:68:3e:c6:52:
         b3:c4:e2:24:08:93:c4:09:dc:54:ad:11:71:39:cc:dd:2d:be:
         f9:b1:7e:c0:6c:d0:8d:13:00:9b:14:15:1c:6a:f9:b0:af:fc:
         55:f9:5e:8a:37:c2:15:77:b4:5d:26:fd:1f:71:fa:46:4d:56:
         27:12:a7:16:cf:34:0b:d2:40:79:ca:8d:14:49:2b:7f:b2:c3:
         a8:f1:8d:92:c9:15:ed:38:a1:78:59:d7:66:cc:7a:f0:d0:52:
         65:03:d5:16:0c:74:bc:e2:13:69:dd:52:92:35:8c:06:41:af:
         a6:7b:84:ff:e7:04:4c:a6:3b:a0:30:c1:2f:ff:a4:5b:f2:0b:
         8d:30:16:7b:74:ac:3f:ed:c3:47:4f:0f:29:63:0f:47:59:e1:
         e9:a8:10:e3:26:45:06:ec:1a:c8:a5:9c:ae:be:04:ec:6b:34:
         ce:3d:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:02 2024 by rpki-client on console-fra.rpki-client.org