Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e34392e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e34392e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          OXQ8/FXIT+TQRqYsfGjNBs/YdBuZGbeBuahgRyl5y5Q=
Subject key identifier:   BD:FA:B1:AC:27:85:82:BE:E6:04:04:DA:F6:D9:33:38:10:71:8F:81
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       5D157B67D96B99D4565B27A561C3A3F04765134B
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e34392e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:28:24 +0000
ROA not before:           Fri 12 Jul 2024 12:23:24 +0000
ROA not after:            Fri 11 Jul 2025 12:28:24 +0000
asID:                     28352
IP address blocks:        187.0.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:15:7b:67:d9:6b:99:d4:56:5b:27:a5:61:c3:a3:f0:47:65:13:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:23:24 2024 GMT
            Not After : Jul 11 12:28:24 2025 GMT
        Subject: CN=BDFAB1AC278582BEE60404DAF6D9333810718F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:04:b9:a6:b4:e2:0e:01:81:bb:eb:7c:eb:
                    16:f9:4d:79:89:d2:7f:b1:a1:08:34:09:76:c0:c9:
                    e0:bb:3a:aa:5c:24:be:d7:3e:fb:a5:9d:57:c1:d4:
                    8e:11:20:63:6f:22:ef:e1:84:cd:8e:e0:41:f8:ff:
                    e6:6b:7e:54:42:d2:80:86:64:c3:01:05:ca:88:27:
                    57:49:52:03:e7:97:e1:80:70:49:e4:89:a1:25:71:
                    00:d6:ad:a2:41:fb:32:6a:00:2c:a6:c7:8a:6f:68:
                    44:65:b2:41:2b:42:b9:c5:16:c6:e9:d2:ac:f9:4c:
                    42:a5:01:37:e9:61:9f:39:07:0e:8d:5c:cb:6c:e8:
                    e8:18:7a:47:21:05:c3:fd:1f:5d:a3:af:45:62:f8:
                    f4:57:03:34:3c:44:1e:b3:b3:1d:98:1e:98:08:fe:
                    d5:91:26:68:27:ff:4e:86:bd:2d:6e:3e:c1:e7:66:
                    62:e7:ad:13:7c:57:f5:ef:5e:42:2e:f2:e5:6e:c7:
                    b1:81:1d:6b:99:a0:c4:c3:f3:1a:ec:81:1b:38:c0:
                    45:33:ec:6d:39:c6:cd:48:2a:51:08:e0:26:75:7e:
                    0c:57:5d:ba:a8:d9:72:ac:25:17:a3:fd:0a:7f:83:
                    38:3a:d6:28:bb:f1:a7:7c:9c:8b:0c:ab:e4:cd:d8:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:B1:AC:27:85:82:BE:E6:04:04:DA:F6:D9:33:38:10:71:8F:81
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e34392e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:c6:ad:d2:c9:aa:ee:33:22:45:6c:73:07:aa:8e:40:ed:
         7c:73:55:31:04:6a:3b:e5:b1:8e:c3:87:b1:0f:72:c1:c2:ac:
         d3:61:53:c6:86:84:e8:49:94:f5:30:ce:05:fd:57:2d:93:a9:
         25:df:ee:fc:d3:28:53:18:e9:0c:69:44:f3:df:34:ae:4c:c7:
         53:04:fa:53:bc:13:55:ca:b0:12:bf:7f:53:96:b3:3f:db:78:
         8d:2b:91:ee:0b:a0:80:20:e2:7d:97:24:7b:e9:10:a1:3c:56:
         de:bb:af:4e:df:2e:e9:b7:f6:df:bb:4d:62:0c:68:67:a3:3a:
         ab:c0:82:43:4c:0c:89:9d:e0:75:44:9c:09:6b:4b:fc:74:a4:
         e3:76:fd:91:43:04:52:72:f4:a9:5e:a2:5c:6e:5e:c2:72:b4:
         e8:e4:3a:75:26:d8:9e:c4:5f:62:9d:b1:c4:37:7d:6c:e3:e2:
         70:73:a8:9a:6d:a5:01:c4:6d:22:f9:bc:a7:68:3a:08:9e:2c:
         7b:0a:6d:39:b3:87:55:4c:83:8c:a1:a4:9d:f0:f1:0e:97:74:
         f1:2b:a6:5b:70:86:dc:f2:87:93:09:7b:7d:15:ea:59:67:cb:
         01:90:1c:52:ff:bb:d9:c3:95:96:ad:83:c3:6f:f8:01:da:fb:
         dd:4c:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org