Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35302e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35302e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          bDQA6rnvdT8guJ6lWACNEMKGExF9UUlqRrP0YuBNO70=
Subject key identifier:   11:08:48:15:98:95:35:15:26:7C:74:20:70:CF:F0:AB:56:54:FC:AB
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       28719B59D7C863A6D8AE42C4D3EE0F17F411F42F
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35302e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:28:40 +0000
ROA not before:           Fri 12 Jul 2024 12:23:40 +0000
ROA not after:            Fri 11 Jul 2025 12:28:40 +0000
asID:                     28352
IP address blocks:        187.0.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:71:9b:59:d7:c8:63:a6:d8:ae:42:c4:d3:ee:0f:17:f4:11:f4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:23:40 2024 GMT
            Not After : Jul 11 12:28:40 2025 GMT
        Subject: CN=1108481598953515267C742070CFF0AB5654FCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:11:a1:b6:d9:35:67:cc:67:2f:70:5e:bf:
                    6a:4c:33:89:b4:0f:b9:c0:0c:23:35:5d:27:89:de:
                    55:72:8c:a4:82:93:b1:35:f5:77:04:42:97:80:dc:
                    d5:83:be:d5:16:7b:22:6b:53:e2:a9:98:c4:58:2b:
                    fd:b2:5e:a3:94:00:7f:73:9d:80:b8:58:1c:c9:35:
                    b2:91:f3:57:c3:5d:22:77:37:8c:b4:d9:1d:cb:44:
                    c2:9f:09:cc:19:c4:59:fa:d7:ad:44:69:2d:66:78:
                    6f:51:34:df:e9:90:42:a1:c8:75:b1:1c:f6:81:96:
                    ac:e1:2b:3e:7b:7e:97:b6:d4:82:e0:bf:9c:e8:d7:
                    ed:62:c0:d2:4f:6f:c7:1e:ec:f1:6b:a3:b5:22:87:
                    e7:fd:27:4c:fc:aa:80:f0:31:9a:f5:de:c0:9c:4c:
                    b3:5e:1a:82:c3:b5:05:36:b0:4f:33:b7:74:18:f5:
                    4f:72:a2:57:7e:97:36:a8:c4:94:22:cc:44:c2:48:
                    ee:66:96:30:6d:74:fe:1a:70:64:16:0c:94:34:c5:
                    97:cb:95:48:d1:0f:d1:0d:2d:57:af:f4:a4:59:40:
                    e8:9f:33:79:1f:40:63:a1:78:99:24:78:87:42:3a:
                    09:df:6a:18:f6:6d:45:c0:e3:92:99:c2:e0:b8:7a:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:08:48:15:98:95:35:15:26:7C:74:20:70:CF:F0:AB:56:54:FC:AB
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35302e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:11:f0:6a:8f:81:2a:90:7d:3d:52:ec:e7:73:93:a1:17:4b:
         f2:d9:73:db:14:d7:ba:a5:69:7d:4d:68:3a:1d:f7:67:34:10:
         96:b0:cb:42:ee:03:29:37:8a:b1:cb:a3:5f:a9:e3:65:3e:db:
         fe:26:2e:39:c1:0e:48:d1:32:d7:39:67:c0:f4:33:7a:97:6e:
         39:d3:01:d5:b6:50:fd:42:ec:7c:d6:2b:6c:18:7e:db:a7:83:
         38:b7:e7:ea:a1:4c:df:62:2a:8c:f0:80:4e:40:36:f8:c3:ca:
         5b:d5:13:b7:d8:e2:6d:78:b6:7a:3d:41:b2:df:20:7f:a9:ba:
         6f:05:ef:a0:77:0b:00:f5:e1:44:45:91:8d:85:96:38:15:82:
         9f:f4:57:65:09:78:69:bb:3e:70:1f:5c:86:89:51:3d:c5:21:
         f0:ed:71:b2:53:82:90:64:1f:8b:56:bc:36:f1:8c:20:3b:b9:
         9b:82:87:94:66:86:34:9c:54:17:e2:74:49:09:48:2e:07:12:
         bd:13:ea:ba:2e:92:f2:13:df:9e:42:f7:43:c3:1b:0f:1e:a5:
         52:7d:e7:0a:4c:fc:4f:50:79:c1:d3:95:aa:7e:eb:ff:85:a8:
         60:de:4a:63:0e:0f:f5:11:f2:5d:69:4b:e5:f6:25:e2:d6:e4:
         70:6a:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org