Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
File:                     3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          z59nhQB4f4mMDOP2BrEnSMpDrTIdO0coMc6Ayn3xBTE=
Subject key identifier:   70:8E:7A:7C:DB:FE:30:A5:28:0E:0D:C5:B3:54:94:17:12:BE:0A:2D
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       3AA0F1A38F22701CB11F8610AE68EB278330A150
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28292
IP address blocks:        189.124.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a0:f1:a3:8f:22:70:1c:b1:1f:86:10:ae:68:eb:27:83:30:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:ba:cb:67:75:c6:0f:33:15:3c:13:b8:23:
                    12:40:0c:92:75:5e:e6:20:50:58:7c:9c:03:22:19:
                    22:60:da:1e:01:83:3c:dd:07:7e:0c:d8:31:14:22:
                    84:1c:99:8e:51:fd:cc:a3:3f:6d:1f:e6:3e:e3:7f:
                    46:43:6b:61:f9:6f:31:53:97:1d:95:fa:7b:ec:f6:
                    32:6c:1e:3d:11:66:5d:47:83:09:a3:af:7b:91:26:
                    c5:74:61:5a:e3:aa:f6:bf:0b:ad:10:8c:75:4d:e5:
                    eb:5e:5e:a6:73:27:c6:0a:44:52:3b:07:45:58:d6:
                    f4:6b:e8:81:9d:24:b8:b5:13:3e:c2:c7:71:ea:63:
                    e4:cc:ee:37:50:d3:90:1a:60:f0:41:bf:b6:5e:5c:
                    46:a2:f4:fc:57:97:55:45:8d:d3:fd:88:77:20:db:
                    aa:6b:f2:03:96:80:5f:36:9b:a3:3b:6c:74:da:f5:
                    f4:92:4b:59:cd:bc:1f:1e:0a:ec:97:55:97:6f:80:
                    62:e5:15:15:5d:2f:6f:ec:54:e8:c8:b6:6a:1d:17:
                    4a:c2:11:8c:3b:e5:6c:27:cc:9e:1b:4b:fd:d9:cc:
                    27:21:cd:76:af:53:19:2b:83:fd:60:1f:cd:41:58:
                    7b:64:85:31:cd:65:53:2a:19:8d:76:04:a2:f6:eb:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:7A:7C:DB:FE:30:A5:28:0E:0D:C5:B3:54:94:17:12:BE:0A:2D
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:cb:18:41:1d:73:d4:59:93:64:d8:28:e1:b4:b4:28:12:da:
         cf:72:29:c2:da:40:42:5c:d4:7f:c8:d8:46:31:70:4d:b8:fe:
         9a:84:6c:10:88:c2:a7:b9:fc:c8:9c:2a:da:2c:ec:d3:b2:8b:
         fa:59:36:e0:b8:de:f6:ee:a2:18:0c:b2:14:41:3f:43:83:70:
         f7:96:d9:9c:c0:4b:6b:98:2a:f9:08:6b:a1:98:ac:b0:85:4c:
         b6:10:b6:5a:24:c4:b1:5a:c4:47:95:61:12:93:6d:12:70:91:
         56:5a:00:c0:09:bb:f7:90:9a:35:64:53:24:58:0b:53:79:9f:
         14:ec:5e:4e:ec:c1:14:7d:5c:94:0e:32:a5:d7:b0:c1:b4:0c:
         f2:13:f5:49:ab:f4:09:6c:47:f3:c7:f9:48:08:97:19:5e:df:
         9a:89:e3:89:4c:88:cf:d7:d8:86:6b:ef:a7:8a:24:04:49:fa:
         8e:27:b8:37:8e:52:d1:27:9e:f2:a1:40:4c:ac:5a:fb:c4:04:
         ea:20:f6:06:46:77:dd:54:c3:46:4e:e4:31:02:0f:8c:40:70:
         1b:a9:2e:78:43:e8:5a:d7:96:4f:b6:38:8f:23:68:c9:91:da:
         c9:8c:aa:ec:69:a1:60:c0:29:30:fd:f0:1c:3a:e3:a2:88:af:
         43:89:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:13 2024 by rpki-client on console-ams.rpki-client.org