Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35362e302f32312d3231203d3e203238333532.roa
File:                     3138372e302e35362e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          89E4LCJCe1YUNNM5CgK7kZd7o81RP6FLZx1JrTjioGE=
Subject key identifier:   6D:77:72:A7:B8:B5:3C:64:1D:95:97:39:C5:8E:EA:11:3E:07:D9:6C
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       104CF357506CAE8EC42873B8E967EF1292BD0943
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35362e302f32312d3231203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:46 +0000
ROA not before:           Thu 04 Apr 2024 10:11:46 +0000
ROA not after:            Thu 03 Apr 2025 10:16:46 +0000
asID:                     28352
IP address blocks:        187.0.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4c:f3:57:50:6c:ae:8e:c4:28:73:b8:e9:67:ef:12:92:bd:09:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:46 2024 GMT
            Not After : Apr  3 10:16:46 2025 GMT
        Subject: CN=6D7772A7B8B53C641D959739C58EEA113E07D96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:2d:03:aa:1d:cc:f1:f8:1b:f6:05:e2:ec:
                    00:23:47:1e:33:5c:c7:74:9b:fa:e7:e5:70:57:96:
                    14:32:81:39:17:6c:f3:37:96:82:19:08:11:63:7f:
                    18:38:ff:dc:fb:67:57:c5:4c:d5:05:c8:46:3e:20:
                    80:ac:36:5a:e6:1e:68:00:4a:d1:5d:6a:07:64:6e:
                    b8:a1:24:21:1f:1a:96:36:4f:04:fe:7b:6f:db:72:
                    a6:57:bd:99:a6:53:fe:d2:55:f9:26:f1:d0:7e:3e:
                    26:8c:8a:7e:71:ad:88:7f:cf:79:2a:a5:89:58:92:
                    43:2b:cb:2b:26:da:44:b4:2e:f5:15:2c:90:0f:4a:
                    af:84:5e:4e:8f:ca:ac:28:b8:a2:97:62:8a:d4:c1:
                    13:81:a0:c3:cb:bd:ea:00:b7:21:16:04:d8:1a:6d:
                    1b:bc:f5:26:ac:3e:0e:db:57:4d:fe:73:b9:28:b2:
                    a9:85:09:44:57:bc:36:84:70:18:4d:1e:40:79:97:
                    0d:a9:60:88:ba:ef:7a:7a:84:08:46:67:70:e5:2a:
                    65:08:45:aa:ce:85:0f:94:2e:23:35:41:af:09:6a:
                    98:76:52:92:7b:59:74:e1:e6:fe:38:02:e6:cd:62:
                    2f:d2:1a:45:54:5f:67:4e:c9:e1:05:ff:2c:ee:b3:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:77:72:A7:B8:B5:3C:64:1D:95:97:39:C5:8E:EA:11:3E:07:D9:6C
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35362e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:f6:32:ed:25:ab:1a:9b:af:96:3d:ef:0b:1a:a6:fd:b1:
         e5:bd:02:e2:9f:a2:d8:eb:ed:b2:71:df:ba:2f:47:a7:45:83:
         6c:cf:c0:99:ac:5d:95:f6:4c:07:e1:f7:45:ac:b2:aa:bd:9f:
         28:ed:75:8e:d7:e4:c6:ad:db:62:af:92:1c:41:6d:8d:1d:57:
         d6:ad:ca:97:f5:b2:4b:ab:e8:25:ed:0e:74:2b:ff:7c:8d:91:
         55:91:ad:bf:1f:04:c4:a1:e1:ee:57:12:59:db:c4:55:10:d2:
         83:72:5a:18:59:14:ce:73:c6:d1:f6:0a:ae:55:da:3d:a2:20:
         6c:af:1e:83:40:b1:67:7f:4f:06:e8:9c:e5:3d:e8:fb:0c:00:
         ae:6e:b9:97:cb:3b:10:ca:60:bd:71:0c:71:a2:03:28:07:a0:
         58:a6:7f:13:a4:64:13:f2:d1:b6:e8:45:1c:7c:71:ca:30:92:
         97:66:f6:43:68:19:70:05:d1:3d:a3:52:f2:4f:47:6d:07:15:
         0e:17:a9:06:f4:2c:d8:09:14:69:48:90:e4:8d:3e:b8:c7:06:
         e4:80:55:aa:5f:a7:e0:1f:b5:c9:e7:5f:ef:f7:38:d9:43:d5:
         6c:da:87:92:4a:73:e3:be:dd:8d:34:4b:e1:0b:d7:5b:14:7d:
         2f:38:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org