Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
File:                     3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa (raw, json)
Hash identifier:          gDMUGbWqOnX3hSJBKKOjyBVfNkDwhu/JEUXk0EnQJ0Q=
Subject key identifier:   E8:B8:42:4D:8B:4D:DC:54:E7:53:FC:DB:30:75:1B:F0:ED:F1:11:24
Certificate issuer:       /CN=D099432381329A8B853BCFD609AEC204846D7EF8
Certificate serial:       72E0F1BA4D202389455672161B7FB0645128AC7A
Authority key identifier: D0:99:43:23:81:32:9A:8B:85:3B:CF:D6:09:AE:C2:04:84:6D:7E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D099432381329A8B853BCFD609AEC204846D7EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
Signing time:             Wed 28 Aug 2024 19:07:12 +0000
ROA not before:           Wed 28 Aug 2024 19:02:12 +0000
ROA not after:            Wed 27 Aug 2025 19:07:12 +0000
asID:                     262690
IP address blocks:        187.87.240.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/D099432381329A8B853BCFD609AEC204846D7EF8.crl
                          rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/D099432381329A8B853BCFD609AEC204846D7EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D099432381329A8B853BCFD609AEC204846D7EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e0:f1:ba:4d:20:23:89:45:56:72:16:1b:7f:b0:64:51:28:ac:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D099432381329A8B853BCFD609AEC204846D7EF8
        Validity
            Not Before: Aug 28 19:02:12 2024 GMT
            Not After : Aug 27 19:07:12 2025 GMT
        Subject: CN=E8B8424D8B4DDC54E753FCDB30751BF0EDF11124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:87:ef:33:46:40:22:ea:15:9f:de:41:71:
                    79:5d:f5:d8:c7:1c:13:aa:9c:2f:02:e9:01:31:fc:
                    9d:6c:4f:2e:36:2c:ad:1e:b0:58:7f:db:72:d6:9d:
                    55:5e:a0:0b:a4:0b:bf:4f:95:ca:56:3a:5a:d4:76:
                    5b:93:bb:45:3d:04:49:5d:9b:d2:dd:bc:3e:bc:c3:
                    a3:5c:df:1f:68:25:44:76:1f:5f:37:cc:48:56:1e:
                    cf:ba:32:fe:4c:1d:ee:98:65:20:af:1e:b3:a5:c0:
                    28:d9:01:3e:89:a7:18:88:93:65:c5:f8:01:af:b5:
                    0e:cf:62:69:4e:df:72:71:96:dd:e0:52:3c:9e:32:
                    80:9b:02:41:fa:e0:8f:55:bc:4c:5d:3e:b3:c5:6f:
                    c3:2a:88:b3:1f:28:1e:66:df:61:0c:5d:c5:f5:89:
                    a2:d4:50:6b:a5:f7:60:73:c1:7c:1e:87:ca:2e:0a:
                    9d:a1:53:14:f4:cc:ec:2f:b2:9a:ea:e3:dd:39:2a:
                    fb:97:39:88:30:5b:b7:e7:ca:a6:0f:1d:0e:da:a2:
                    89:c9:76:3a:29:57:5a:90:37:bd:d1:03:05:25:42:
                    ac:cf:0a:4c:45:8d:91:2a:ae:de:a4:4c:25:23:c3:
                    43:ee:1d:29:e8:3c:c8:4e:48:63:9b:63:7f:47:54:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:42:4D:8B:4D:DC:54:E7:53:FC:DB:30:75:1B:F0:ED:F1:11:24
            X509v3 Authority Key Identifier:
                keyid:D0:99:43:23:81:32:9A:8B:85:3B:CF:D6:09:AE:C2:04:84:6D:7E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/D099432381329A8B853BCFD609AEC204846D7EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D099432381329A8B853BCFD609AEC204846D7EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:36:de:e0:2b:dd:34:61:21:58:b7:de:d5:27:a5:7f:89:
         ab:50:d5:3f:3a:9c:fb:c4:5b:00:d6:11:ad:c7:c3:3d:dc:dc:
         aa:28:23:ff:65:70:5a:ed:87:e0:b9:86:dc:c7:e9:1f:b3:b0:
         ee:69:bb:67:8c:17:5f:e2:af:e9:aa:ee:fc:ce:b5:54:ec:f9:
         03:31:8d:46:a0:e7:82:f6:99:fd:86:11:24:c4:b7:e2:c9:6b:
         4a:84:57:f1:ae:7b:83:bd:f5:43:60:85:23:51:a7:99:25:42:
         8f:d7:c7:15:93:31:ae:48:d5:32:ed:6a:a4:03:90:93:90:57:
         b3:47:93:e1:68:6a:2b:5b:f4:5b:e2:b6:ec:b6:ad:4c:59:ec:
         d8:fd:7b:ae:76:03:82:ee:1c:31:75:44:ce:57:21:62:cb:71:
         fe:e7:89:49:c5:df:1c:ca:cb:dc:50:43:5a:36:0c:ea:dc:ca:
         b2:23:fe:fb:7e:ee:a2:d0:af:c4:67:24:47:62:19:23:ec:94:
         b2:df:9e:0f:35:c6:0f:4c:f4:9f:99:b1:2e:bc:14:6a:52:5b:
         85:a2:66:f5:40:b2:8e:57:ea:22:4f:03:9e:67:fc:95:c5:e9:
         65:f5:c6:b6:38:41:d2:4e:34:e3:0b:02:6e:fc:2f:04:55:4b:
         aa:0e:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:00 2024 by rpki-client on console-fra.rpki-client.org