Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa
File:                     3138392e3132362e34382e302f32302d3234203d3e203238323234.roa (raw, json)
Hash identifier:          Pda9GeJWaLbR1FKLDrL3dPMeGyqUbvzBh4xG2MRes1I=
Subject key identifier:   F4:27:E8:B0:2A:07:53:00:56:C7:20:4E:20:8C:18:FD:BC:38:E7:A4
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       6F9341279E0C2A4DDA769417C944BE4C162C88BA
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa
Signing time:             Fri 08 Nov 2024 18:37:27 +0000
ROA not before:           Fri 08 Nov 2024 18:32:27 +0000
ROA not after:            Fri 07 Nov 2025 18:37:27 +0000
asID:                     28224
IP address blocks:        189.126.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 04:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:93:41:27:9e:0c:2a:4d:da:76:94:17:c9:44:be:4c:16:2c:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:32:27 2024 GMT
            Not After : Nov  7 18:37:27 2025 GMT
        Subject: CN=F427E8B02A07530056C7204E208C18FDBC38E7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:1c:2c:78:65:d5:40:df:b5:70:8b:f7:c6:
                    d7:92:6e:10:2d:b1:b6:ee:9a:26:bf:84:9f:a2:e6:
                    e4:78:86:4f:50:17:05:d1:c7:77:fc:3c:8e:13:f0:
                    2d:d4:5b:99:bd:79:4b:e1:4f:77:2e:f5:d0:ce:f2:
                    51:13:df:f2:50:f7:f3:65:19:b9:31:61:3f:f1:9c:
                    6e:fe:5c:e2:c3:fd:01:f3:0f:da:16:ca:cb:8f:2e:
                    1b:40:b4:a0:cf:66:e8:6b:a5:12:5a:d9:bc:51:de:
                    cf:ea:f3:c5:f9:23:64:7f:24:f1:79:af:ff:79:fa:
                    7b:04:c2:ce:a9:32:36:40:6b:6f:42:82:f0:9c:49:
                    35:dd:bd:86:bc:d0:64:73:54:29:98:2d:67:7e:0b:
                    64:d2:c3:ab:27:2f:b4:17:f0:d7:ca:30:22:6a:ca:
                    67:c3:ed:16:30:79:83:64:7b:7a:3a:4e:8f:97:4f:
                    93:6d:c6:bf:43:f6:9d:54:58:a8:23:c5:f3:2f:b4:
                    e5:d8:39:64:20:59:2e:4f:25:42:16:2c:7b:c5:91:
                    3d:d8:8e:f6:24:af:d3:f5:fd:e9:7a:27:19:cd:9e:
                    52:6e:89:4c:54:7e:a6:d8:45:b5:da:98:6d:7a:98:
                    01:89:c0:58:3e:9f:d2:b1:88:a4:70:b1:d1:25:69:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:E8:B0:2A:07:53:00:56:C7:20:4E:20:8C:18:FD:BC:38:E7:A4
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138392e3132362e34382e302f32302d3234203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:58:50:ac:7b:67:e4:77:37:f7:23:6b:0d:75:7a:d5:2a:cd:
         d1:0f:b9:10:0c:83:1f:c4:85:00:0f:95:4d:57:08:97:92:c8:
         66:66:8e:82:71:7f:56:53:17:32:d9:86:82:4c:02:04:2e:75:
         bc:77:62:9b:7c:dc:59:1a:90:be:18:97:98:dd:34:74:35:69:
         06:90:b2:7f:f6:d4:c1:8c:9f:ec:81:80:ea:7f:57:dc:0a:71:
         2d:5d:68:04:4c:3e:9d:fc:d2:b8:e4:fb:87:68:58:15:d3:21:
         75:7d:1e:86:11:88:75:b8:f3:73:b8:5d:56:a0:db:f4:e2:78:
         4f:6b:1c:5b:36:6d:cc:43:19:1d:7f:eb:5d:ac:e5:39:d3:71:
         8b:cc:c5:da:a7:0b:50:4f:29:10:23:e8:5b:cb:52:78:87:06:
         00:35:3a:09:d3:6a:bd:06:52:9a:87:fa:5c:37:cf:af:42:b9:
         2d:ee:bd:ec:26:53:08:c9:ba:02:1a:1a:d8:d1:42:67:76:05:
         57:55:89:2f:13:ad:ea:48:f2:9c:a2:6c:3d:83:73:dd:d6:eb:
         f3:8d:db:35:21:c6:b1:01:e9:df:3f:ea:e7:de:65:13:2b:98:
         b6:06:d1:28:55:25:8a:3f:e4:d4:c4:32:b4:bd:7e:e4:7c:a2:
         29:54:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:30 2025 by rpki-client