Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
File:                     3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          W00NkdxEJL+J3jSUzWjzkzee8IAMN6TuZXiNa4yhJwA=
Subject key identifier:   AD:12:64:36:C4:10:1A:0A:BB:24:F7:E1:64:0A:95:E7:86:99:C8:06
Certificate issuer:       /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
Certificate serial:       79C0045A44B8CA91CB7B4A3F14D832E5C8A5E1EB
Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28292
IP address blocks:        189.28.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl
                          rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c0:04:5a:44:b8:ca:91:cb:7b:4a:3f:14:d8:32:e5:c8:a5:e1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:b2:3b:ae:9e:7c:3b:aa:4f:a8:51:b1:cc:
                    1e:8b:85:6b:3c:8b:90:2d:17:31:ec:10:9c:30:6a:
                    0d:02:0d:bd:eb:d2:42:cf:14:8b:87:17:8c:bc:b8:
                    44:24:7e:49:63:e6:20:87:bf:7a:ca:cb:df:b0:55:
                    8b:0d:05:4c:89:59:77:5c:45:6b:f4:b2:34:a7:14:
                    6a:3d:b5:e2:a1:7b:ef:be:de:99:c3:90:4b:f8:f2:
                    bc:6f:a7:e1:45:94:92:4f:ce:a1:cf:bd:21:ca:ed:
                    6d:94:8c:0c:c6:4e:c3:57:70:16:9d:14:6c:2f:d1:
                    d6:ed:9d:0f:6d:cd:09:66:e4:5f:ae:42:42:74:39:
                    3b:72:f1:a5:cc:e8:3e:9e:a6:47:39:69:61:e3:02:
                    99:32:b4:08:3c:64:dc:bb:f6:c2:7e:b4:90:d7:aa:
                    f9:c2:71:58:ab:4f:f5:78:37:6c:e8:43:79:d1:b9:
                    56:14:66:d5:a2:6d:f1:23:21:3e:2d:f3:6f:e8:fa:
                    cd:3e:e8:11:05:1f:eb:03:0b:cb:58:4d:0f:89:43:
                    45:fb:cc:4b:45:7f:dc:06:a7:bb:4e:9f:b9:d1:0c:
                    74:dc:36:a2:8b:e5:28:97:e8:bb:d5:eb:a4:46:e2:
                    64:9f:c8:39:7e:bd:d3:2f:d1:ad:ef:1d:22:94:4e:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:12:64:36:C4:10:1A:0A:BB:24:F7:E1:64:0A:95:E7:86:99:C8:06
            X509v3 Authority Key Identifier:
                keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/3138392e32382e3137362e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:ae:63:27:44:8e:51:a9:8c:57:9e:4f:fd:9e:b5:c2:6c:ed:
         72:1f:db:39:ee:d0:67:e8:a4:ed:85:ec:27:47:72:94:f8:0a:
         30:a9:63:fa:33:f2:7d:d1:29:bc:fa:c6:8b:48:64:5e:49:ec:
         7e:f4:cb:d9:d2:9c:2a:35:0f:a7:f5:88:6d:99:99:ff:e3:82:
         72:b6:ee:f3:03:42:a1:06:d4:3c:57:a0:ec:cc:e1:17:2e:0a:
         bb:3a:76:e9:ab:a3:f9:8b:1d:e1:e8:f4:94:06:e4:6d:e0:b7:
         9b:47:42:e6:c1:f4:62:ec:56:2a:c1:33:c9:e3:94:5f:5a:5a:
         b5:f2:35:fa:10:ea:2e:cc:83:92:70:82:f2:e7:13:7c:4c:21:
         46:cc:90:19:a0:fb:4a:37:06:99:16:ca:68:97:e7:76:69:df:
         29:f9:ab:a8:52:b0:94:01:68:83:66:94:a2:1f:8f:b1:65:a0:
         5c:3e:72:32:8d:7e:4c:bf:0d:b4:43:1a:8a:74:4d:a8:7f:e7:
         9d:d5:1d:6e:b8:67:3b:bb:5e:5a:85:5e:52:50:cb:9a:ff:a6:
         ed:f9:d0:68:04:b5:c9:a9:79:eb:45:5f:65:03:27:1a:fc:bb:
         59:91:5c:eb:b5:ab:49:bc:a0:82:ea:97:15:2f:97:a2:cf:83:
         2a:db:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org