Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35352e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35352e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          OPoFJw3feYsW/AVI4tgWcyKoaatcSSYJA8c4D5WRlT4=
Subject key identifier:   03:1A:79:23:F3:63:50:3E:F3:43:61:8C:3A:E9:42:97:4B:C1:7C:E1
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       44C9D0D64C88D1EDFE5D8021EE6298E4BC0F7985
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35352e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 11:48:35 +0000
ROA not before:           Fri 12 Jul 2024 11:43:35 +0000
ROA not after:            Fri 11 Jul 2025 11:48:35 +0000
asID:                     28352
IP address blocks:        187.0.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c9:d0:d6:4c:88:d1:ed:fe:5d:80:21:ee:62:98:e4:bc:0f:79:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 11:43:35 2024 GMT
            Not After : Jul 11 11:48:35 2025 GMT
        Subject: CN=031A7923F363503EF343618C3AE942974BC17CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:da:5f:aa:6b:96:7c:a3:d6:b1:a8:c6:2c:
                    f9:58:45:cb:31:44:ef:b2:a8:c9:32:0e:fc:7b:50:
                    87:b1:31:f2:3e:fd:ac:a5:3b:ff:77:6f:6e:f8:0e:
                    da:ee:44:bb:0b:89:07:bd:71:ae:5c:f4:c1:a4:09:
                    12:54:cd:e7:70:b1:93:ff:87:51:25:8c:1b:d3:1a:
                    79:66:b5:32:d9:0a:03:92:52:72:05:dd:ef:73:36:
                    b1:3f:37:cf:09:7a:f5:95:7a:58:8a:5c:8f:5f:02:
                    6b:75:8b:21:39:bd:10:c3:41:11:45:1a:3d:4f:18:
                    e1:92:e9:15:93:9b:c4:94:6f:d4:1a:87:24:86:17:
                    42:7f:72:10:91:cd:7e:b3:be:c4:47:de:53:c6:e4:
                    98:c7:15:8e:7f:47:76:25:d6:13:61:ed:ef:57:c8:
                    71:cc:cb:1d:e6:92:81:ca:e4:f5:f2:f5:bc:db:c8:
                    7b:50:a7:95:7d:e6:76:65:6c:e3:d0:d4:88:46:4e:
                    51:70:16:33:13:95:4c:3f:80:c9:94:b8:f4:5d:0c:
                    41:f2:59:d6:15:6d:5d:38:e6:88:07:1c:0b:b1:b7:
                    33:0c:f9:12:f0:d3:9e:50:c4:cc:5a:6b:b0:0c:a3:
                    ec:ab:71:bc:d8:b7:86:50:9b:c7:76:95:cb:8a:4b:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:79:23:F3:63:50:3E:F3:43:61:8C:3A:E9:42:97:4B:C1:7C:E1
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35352e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:15:e0:40:60:ba:2f:98:0a:50:97:16:3c:79:fb:a6:7a:f9:
         0b:e8:44:ac:17:39:cf:a9:b6:cd:70:b7:0f:51:0f:5e:ad:46:
         cb:93:bc:37:b1:ee:8d:3a:f9:13:a7:0a:59:cd:1f:0a:89:dc:
         17:f7:6a:da:6f:ae:8c:2b:0f:c9:c3:d5:b0:0b:32:6d:08:ac:
         e7:54:c3:ba:36:92:94:cf:d5:60:7c:86:95:26:2f:d0:1d:6e:
         88:52:2f:a8:6d:ae:ce:51:c0:69:af:ac:86:af:c6:a6:7a:56:
         a9:42:70:6a:26:85:b9:66:99:b4:e2:a3:e7:16:05:2e:45:0e:
         b8:11:41:c4:7c:84:cd:82:6b:7b:dc:a5:26:5e:10:f3:a2:d7:
         09:b8:6b:39:7b:9b:69:be:44:58:49:5c:b1:ca:64:6e:a1:5a:
         64:61:17:c7:0d:28:d6:21:c4:26:07:77:69:ae:ae:da:d8:e5:
         34:d2:57:da:05:d3:87:25:f2:71:cf:91:6e:11:c0:a5:56:3f:
         83:4a:43:8d:f2:95:84:67:03:4d:19:95:1c:6d:cb:ff:cb:e2:
         00:10:ac:ec:c1:3b:75:b0:65:75:b2:39:5c:2c:cb:84:1b:a7:
         ec:6c:ed:2f:77:42:a5:c2:4d:ba:f5:ff:0e:ee:0d:1c:5d:92:
         83:10:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org