Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35322e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35322e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          jaSyeACnv/ddRbQYytHWe0cfi8bt2PRrLRq8DA3oTK8=
Subject key identifier:   62:A3:D3:0C:FF:02:5A:FA:F4:79:0D:E4:CF:98:98:34:E6:50:B1:52
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       21C2149ED6D69EF977AB9C40BEFFE6BD328DCF46
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35322e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:29:13 +0000
ROA not before:           Fri 12 Jul 2024 12:24:13 +0000
ROA not after:            Fri 11 Jul 2025 12:29:13 +0000
asID:                     28352
IP address blocks:        187.0.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:14:9e:d6:d6:9e:f9:77:ab:9c:40:be:ff:e6:bd:32:8d:cf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:24:13 2024 GMT
            Not After : Jul 11 12:29:13 2025 GMT
        Subject: CN=62A3D30CFF025AFAF4790DE4CF989834E650B152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:c1:19:21:b7:25:69:78:3f:53:47:9d:0e:
                    8d:d8:09:be:7f:03:ad:2d:f2:81:fc:f8:0b:47:e4:
                    00:dc:87:38:44:79:57:04:b3:68:4c:4b:c9:21:c2:
                    f7:45:76:44:aa:25:2d:75:0d:e7:b6:49:b4:d7:17:
                    e9:3c:a3:57:d9:fe:fc:c4:41:65:50:81:f0:da:e0:
                    2b:1c:a8:83:09:28:63:88:df:5b:0d:cd:7a:99:e0:
                    60:89:b3:1c:c1:9d:2a:9a:8b:56:e7:1f:88:fa:dd:
                    aa:d3:df:17:c6:40:08:35:dd:16:26:7a:be:a3:1a:
                    71:0d:18:1c:54:53:d3:b6:51:8a:a8:11:69:b1:b0:
                    2a:2b:5a:36:88:12:69:ee:df:3a:2c:5a:19:45:82:
                    8f:9c:f9:93:27:ff:fc:e3:c7:0f:36:2f:4f:ec:31:
                    f1:72:36:c8:35:c8:40:1b:ed:f4:d2:2a:a2:9c:75:
                    eb:0c:86:5a:7d:57:ae:ee:56:7c:27:28:ad:c2:0e:
                    b7:99:38:a8:8b:05:f8:1c:e4:ea:37:a8:24:94:3b:
                    ce:df:b2:d4:d3:de:e0:70:d3:48:61:15:cc:1c:a4:
                    6c:6a:fe:67:8b:30:7e:71:7c:2f:6d:b6:6c:70:2a:
                    c8:0d:c6:64:21:77:ff:dc:d1:c8:ad:f1:ad:b7:2c:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:D3:0C:FF:02:5A:FA:F4:79:0D:E4:CF:98:98:34:E6:50:B1:52
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35322e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:b6:2d:3a:bb:c5:2a:88:cf:aa:98:1a:e2:2a:c0:6b:b2:
         f2:e5:40:c3:2a:4a:83:d7:28:89:da:08:f0:c2:34:26:8b:a3:
         87:9e:11:2c:95:47:76:a4:fa:0a:0c:c6:6c:0d:22:aa:27:c9:
         f0:75:fc:fe:e6:9f:8e:34:78:34:19:1d:77:e2:ce:2a:3b:99:
         2e:39:23:34:45:d8:88:f1:3b:d1:c7:1f:73:6d:73:33:73:6d:
         d8:58:8a:8c:3f:d6:3e:80:f8:dd:83:69:66:08:61:ab:f7:45:
         b6:7c:f0:7c:68:01:2e:1c:27:60:ba:ca:84:1c:0e:4e:01:22:
         fa:14:46:9d:33:c3:b9:7c:54:a7:c9:8b:e5:e4:de:e2:b1:d1:
         e5:11:2a:93:28:ae:64:f5:12:c3:3f:ff:8f:a6:76:0f:cc:bb:
         cc:06:63:d6:fd:6a:4d:db:05:18:13:76:cb:f0:38:0a:46:31:
         5b:32:7b:be:2b:f9:be:07:f9:c2:8b:55:88:e1:55:2b:b6:5a:
         8a:31:76:fa:eb:6e:92:5a:47:80:0d:a4:c2:be:07:16:dc:91:
         f7:8e:15:fc:b0:1b:84:e2:ba:0f:f4:b8:8c:1a:e6:aa:67:3e:
         c3:8a:5f:88:00:d2:9d:97:bb:f4:c3:d3:7e:ca:33:33:6c:db:
         cb:48:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org