Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35342e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35342e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          /uiLUHe2EdqMG2SCzz+cGI5A9iKwDzlc3kS9eebOptY=
Subject key identifier:   76:20:06:99:B7:0A:10:B5:49:56:DD:9E:9E:90:B9:65:4C:F7:38:6D
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       4865D20287B6F76705DB8DAF0011A04BDE23A551
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35342e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 11:48:20 +0000
ROA not before:           Fri 12 Jul 2024 11:43:20 +0000
ROA not after:            Fri 11 Jul 2025 11:48:20 +0000
asID:                     28352
IP address blocks:        187.0.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:65:d2:02:87:b6:f7:67:05:db:8d:af:00:11:a0:4b:de:23:a5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 11:43:20 2024 GMT
            Not After : Jul 11 11:48:20 2025 GMT
        Subject: CN=76200699B70A10B54956DD9E9E90B9654CF7386D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:65:8e:bc:a2:18:ca:c1:95:04:3b:73:4c:
                    5f:64:eb:d4:23:e8:c2:6f:15:4b:e3:60:63:47:23:
                    eb:c9:61:fb:f1:91:11:e4:6d:58:41:8c:6d:d2:0b:
                    e2:8c:65:aa:a1:af:e4:7f:05:93:25:3c:85:f1:c7:
                    fd:0c:78:d4:3d:1b:0f:c0:52:4e:f1:3e:e1:00:d1:
                    b7:fc:13:a1:9a:8c:8a:80:2c:e6:02:43:65:34:fe:
                    c9:73:f4:e4:f7:c4:09:93:6e:9f:a6:f3:51:0d:28:
                    b3:49:93:e5:cf:d1:5f:4c:bc:e6:d5:f2:e2:19:b6:
                    8a:52:a9:78:64:22:2f:4e:ba:96:34:06:0a:31:db:
                    54:70:45:f3:c3:1c:84:b3:63:49:14:66:76:4b:47:
                    65:57:b1:9d:eb:ea:5f:d0:ba:6c:2d:45:ce:3a:ce:
                    a8:07:7b:17:24:e0:2f:3d:d7:f3:48:9e:5b:59:14:
                    d5:00:52:ef:44:a4:35:72:6c:63:7e:e2:fa:2a:cc:
                    02:40:f8:36:8a:98:c4:52:96:46:56:28:f4:84:b5:
                    57:b9:59:2d:3a:16:11:fa:0b:10:47:45:12:29:ae:
                    4f:73:21:0e:1c:b7:aa:25:42:a4:e7:7d:14:14:d3:
                    78:81:e2:3f:cb:5d:35:a4:f2:8e:4e:a6:08:7f:40:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:06:99:B7:0A:10:B5:49:56:DD:9E:9E:90:B9:65:4C:F7:38:6D
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35342e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e6:e3:51:cb:e1:b7:7e:e7:b0:fd:47:50:5d:41:cc:28:54:
         ac:86:29:09:d7:42:ba:72:72:55:31:c4:9a:df:f7:1c:36:b5:
         ee:6e:25:87:88:0b:b6:c0:fe:e9:ee:b2:46:fe:14:e1:81:1d:
         ea:bf:16:5d:be:8a:ac:33:48:30:fe:30:0c:27:64:c7:80:79:
         85:be:63:e5:0e:78:3b:43:81:66:86:d5:d6:e0:e4:ef:b8:f8:
         e3:8b:4a:ca:ca:d1:6c:51:0d:dc:3f:7e:58:6b:38:aa:f2:4a:
         96:e0:b3:ea:36:25:28:ef:22:98:0a:b6:cc:d9:79:48:d4:ba:
         2d:63:5c:8a:c9:c2:49:4c:07:19:0e:43:3a:3d:09:21:92:bc:
         32:90:d9:c4:7d:f4:e4:de:e7:8c:99:8c:96:eb:56:a6:e1:e7:
         e0:f1:3e:62:92:81:62:70:6e:bd:4e:61:17:65:aa:8a:c0:5c:
         0b:de:d7:2e:d8:b4:dd:0c:16:41:a5:10:38:48:16:78:e4:28:
         2b:16:cd:5c:68:a3:99:01:32:e8:21:22:3e:99:77:66:76:23:
         26:67:db:51:d5:d4:70:eb:ed:08:38:10:07:56:aa:1e:37:58:
         a1:f8:22:ab:2f:8d:09:db:15:f1:32:fb:25:36:b0:99:d9:97:
         16:51:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org