Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35312e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35312e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          KfHmt3pCddJuPs9bgg/+UKxYWre+ih8bct3m1uhz72k=
Subject key identifier:   24:78:19:1C:6E:55:5E:52:09:30:CE:0A:AA:A5:BD:A0:F0:38:16:A2
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       436B740C4D2112806887493011EAE6A358E87FA1
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35312e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:28:57 +0000
ROA not before:           Fri 12 Jul 2024 12:23:57 +0000
ROA not after:            Fri 11 Jul 2025 12:28:57 +0000
asID:                     28352
IP address blocks:        187.0.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:74:0c:4d:21:12:80:68:87:49:30:11:ea:e6:a3:58:e8:7f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:23:57 2024 GMT
            Not After : Jul 11 12:28:57 2025 GMT
        Subject: CN=2478191C6E555E520930CE0AAAA5BDA0F03816A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:8c:76:10:91:09:9c:b1:01:c1:a3:55:91:
                    3e:0a:71:ec:9c:9c:05:d7:b3:df:fc:37:cb:9b:5c:
                    be:a8:49:06:08:31:87:f5:02:ff:42:85:e4:5e:60:
                    a0:d7:50:8e:0a:01:a1:32:5f:33:3b:fe:11:51:0d:
                    c4:b5:b6:58:65:eb:81:62:41:d0:03:5a:43:72:68:
                    fa:ef:79:d6:26:b9:06:67:34:62:be:b7:c4:dc:3f:
                    63:9d:e3:12:1a:53:3c:1f:9e:f9:0a:3d:9e:c6:d7:
                    55:56:79:ff:63:e2:db:cb:30:69:38:e1:db:b7:fd:
                    da:33:74:44:81:71:3c:70:3c:50:57:79:b7:2d:c3:
                    9c:8a:6d:9a:e7:50:d6:d3:b9:18:f1:57:02:77:94:
                    f9:61:a5:c8:34:cb:0b:2d:1f:f2:0a:34:2a:c0:0c:
                    cb:bb:f2:ee:74:06:b8:c7:64:e1:7f:0d:35:b3:95:
                    f8:fc:66:ad:8c:43:d2:c7:dc:3e:3f:f3:f3:84:23:
                    8b:06:8a:96:df:ec:f4:48:26:40:de:e7:e5:9f:49:
                    37:ae:93:7b:97:3b:7d:e3:f6:23:6d:bd:a6:7b:8f:
                    70:02:76:de:71:dd:1d:5a:50:cd:77:3a:cf:15:aa:
                    0d:68:c7:17:75:d7:c3:3f:88:38:95:85:ca:aa:ee:
                    4d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:78:19:1C:6E:55:5E:52:09:30:CE:0A:AA:A5:BD:A0:F0:38:16:A2
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35312e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6b:77:8f:f1:58:e4:42:a8:4d:77:b2:52:46:60:d5:50:3a:
         bc:c2:96:ee:46:41:0d:0c:61:dc:6a:6f:0b:d7:de:d6:37:08:
         c2:a6:1c:62:db:72:d1:dc:59:b1:c7:bd:38:13:79:eb:8b:a6:
         b8:44:e7:e2:e6:9e:dc:23:69:7b:b3:b9:ee:b0:35:13:16:d0:
         55:06:50:f4:13:ff:7d:0e:b2:23:a3:70:4c:57:2e:11:04:ab:
         9e:f1:38:4b:1d:78:1d:71:6a:d0:55:9b:0f:96:56:4a:f4:57:
         0e:ad:44:c4:56:ef:c8:6a:19:ca:5d:6d:a4:29:fc:48:8b:1c:
         88:57:1a:b2:d5:92:96:49:a6:70:7c:5c:63:5b:9f:f2:b7:f7:
         43:9d:0c:0c:ed:15:33:81:b3:57:a4:54:3c:6c:39:1c:30:ec:
         e4:76:2b:d7:3b:5d:97:8a:6d:66:5d:55:99:69:10:9a:13:39:
         05:e4:23:66:84:f6:97:e2:5b:87:25:cb:b1:fb:e2:40:ab:e9:
         da:27:b0:af:71:4e:cb:bd:68:85:81:d7:6b:da:29:ef:ce:06:
         28:f3:9d:e7:f9:29:ea:49:8b:b5:32:10:35:b2:06:51:2f:8e:
         c6:f0:2e:d4:b4:5d:0e:9f:f2:25:42:e1:44:af:f7:06:02:7f:
         09:a8:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org