Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35362e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e35362e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          e6BWoiFrfjOK+TIzE0cLvLCK961wvavHQeWhHAeAGaI=
Subject key identifier:   97:B1:1D:2E:33:FE:EA:88:6E:89:3E:0A:4F:45:25:E1:B6:A3:EF:D7
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       29CDB5B5765573A358F4EA2B7C875C6112B67C18
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35362e302f32322d3232203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:48 +0000
ROA not before:           Thu 04 Apr 2024 10:11:48 +0000
ROA not after:            Thu 03 Apr 2025 10:16:48 +0000
asID:                     28352
IP address blocks:        187.0.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cd:b5:b5:76:55:73:a3:58:f4:ea:2b:7c:87:5c:61:12:b6:7c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:48 2024 GMT
            Not After : Apr  3 10:16:48 2025 GMT
        Subject: CN=97B11D2E33FEEA886E893E0A4F4525E1B6A3EFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:dc:12:27:60:c5:b4:fc:e9:91:51:83:7e:
                    86:7a:7d:ae:5a:cc:ea:a1:7a:74:6b:52:1f:d1:dc:
                    f2:5e:ac:8c:41:0a:ee:7e:b8:3c:75:86:3b:1d:9f:
                    1d:73:6a:aa:c6:84:83:bc:63:cd:82:6c:60:5a:83:
                    fa:1d:77:1e:e6:c7:76:fa:a5:3a:27:5b:f8:91:0f:
                    6d:54:dc:9e:90:42:bb:15:20:6b:57:a7:7d:b0:80:
                    24:e8:ab:6b:c6:b6:3d:95:d6:6c:c0:33:b9:27:76:
                    00:93:33:ed:a3:9a:5c:c7:0f:2b:32:0e:bc:b3:b0:
                    96:aa:cc:0e:3d:81:c5:c6:c4:e0:3b:21:96:20:48:
                    c3:b7:0b:3e:78:45:7b:78:b3:50:c3:4a:39:b6:ea:
                    9c:52:15:a7:bd:0d:62:78:ae:7f:a3:f3:b7:3d:7d:
                    8b:ed:95:07:4e:59:9a:04:30:69:e5:4a:71:ac:19:
                    6e:40:ba:be:ba:58:e4:de:3e:29:a0:f3:f0:10:9a:
                    00:96:b6:cf:33:c1:d5:94:b6:e5:bd:52:fd:55:4c:
                    97:26:89:43:e8:ea:cb:9e:94:b4:80:e8:d5:34:e6:
                    21:5d:b8:be:0c:af:1c:78:bf:5f:65:af:5b:39:e6:
                    6f:43:60:23:b5:c9:0a:74:fc:5a:a3:e7:e5:82:0b:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B1:1D:2E:33:FE:EA:88:6E:89:3E:0A:4F:45:25:E1:B6:A3:EF:D7
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35362e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:30:ef:09:b8:5e:23:f1:c9:d2:4c:db:3a:06:00:a8:8f:db:
         04:2e:4f:24:65:69:6c:83:15:4a:e5:b9:f3:45:02:90:46:ca:
         3d:ca:ef:f4:0b:a4:51:b7:2d:f1:2b:c1:14:dd:e1:d2:c9:1c:
         75:e5:c9:9c:82:59:c7:83:ad:ec:74:ff:58:d5:b9:b3:41:fe:
         17:09:ae:63:48:0b:27:ee:c3:73:8b:c8:93:19:06:e5:58:de:
         60:96:80:77:76:99:e5:ac:48:4c:b3:c3:6b:03:1f:a3:2d:3f:
         51:fd:6a:44:3b:61:fa:a4:25:b1:c4:90:39:90:4a:99:de:08:
         d8:5c:95:40:dd:63:81:78:78:ed:50:96:50:d3:36:0f:0a:4d:
         6c:35:e7:d1:59:d1:f2:c4:6d:a5:a3:bb:aa:c9:bf:1c:7e:79:
         ea:c2:9d:55:c1:e8:2d:3b:e4:ef:2f:88:47:49:01:24:43:91:
         94:a5:39:68:28:83:2f:0f:8b:13:38:19:a6:62:27:72:c2:41:
         16:96:a2:09:1b:52:bc:e0:53:99:4d:4b:41:53:49:3c:9b:53:
         83:ef:69:01:cc:a1:e7:4e:8a:ec:cd:45:03:1b:cd:ec:27:e7:
         39:2b:56:7f:77:bf:21:99:fe:24:61:0b:c8:d3:b9:93:3d:31:
         d3:b2:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org