Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36302e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e36302e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          cYojzKg+cEG7PG16yTAmlWODYu7r7Apbv5mXD1pPSxI=
Subject key identifier:   E1:C9:73:9B:DC:F5:E6:4A:00:D4:58:C2:90:5C:5D:67:44:75:D3:6B
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       7584C08E20A7B2A7659A7A4FFABA7B00F8CA35D3
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36302e302f32322d3232203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:48 +0000
ROA not before:           Thu 04 Apr 2024 10:11:48 +0000
ROA not after:            Thu 03 Apr 2025 10:16:48 +0000
asID:                     28352
IP address blocks:        187.0.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:84:c0:8e:20:a7:b2:a7:65:9a:7a:4f:fa:ba:7b:00:f8:ca:35:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:48 2024 GMT
            Not After : Apr  3 10:16:48 2025 GMT
        Subject: CN=E1C9739BDCF5E64A00D458C2905C5D674475D36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:53:ad:cc:1c:ec:03:a6:0c:66:84:00:4c:
                    5e:e6:45:dc:19:af:df:d5:d5:94:e5:8c:02:34:57:
                    a5:58:4c:3e:3e:9b:6f:f8:b4:f6:97:23:3d:f6:ac:
                    f1:50:7c:57:8b:30:b9:69:85:f8:1e:1f:1b:42:4a:
                    e2:f0:bb:b9:2b:e6:b1:18:98:76:8c:3c:1b:f9:fe:
                    80:5d:12:80:b2:9d:42:14:44:87:ea:08:c1:e3:29:
                    1e:08:0a:1e:eb:10:16:b4:15:b7:26:ed:61:d5:e1:
                    fa:3c:21:ef:0d:2b:d6:f5:70:09:82:1e:c2:d0:fe:
                    fa:6d:40:d8:98:b1:70:2f:fc:ba:62:7c:ab:8a:63:
                    5d:08:22:6a:19:e9:b2:61:58:4a:a5:ce:ae:77:39:
                    26:2f:54:1e:9a:0e:0f:4b:b9:7d:88:42:96:f6:8c:
                    d6:26:5d:de:62:d4:30:35:c3:c1:26:2d:44:c1:b7:
                    ec:4d:bf:d6:4b:0d:fe:82:e6:5c:87:4f:32:fc:34:
                    00:4b:eb:95:34:33:7f:f8:f3:c2:bf:ab:ca:92:86:
                    93:d9:99:00:0b:aa:98:11:10:3f:61:73:c5:00:36:
                    38:2d:dd:3a:57:9e:89:9d:7d:2b:62:3d:20:4e:9a:
                    77:29:65:e6:cd:be:a0:28:f7:85:6e:4e:ec:d6:10:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C9:73:9B:DC:F5:E6:4A:00:D4:58:C2:90:5C:5D:67:44:75:D3:6B
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36302e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:dd:8e:23:d6:8c:cf:ce:b4:ca:04:63:76:f8:2f:18:18:32:
         f4:f1:8e:93:b7:73:30:c2:75:38:96:5d:c9:13:4c:7a:ae:87:
         4d:20:0b:44:01:22:e1:56:5e:22:63:ee:a6:bf:5e:4d:db:83:
         cf:c6:4e:69:c9:80:68:58:b3:2e:90:f9:1f:ee:88:00:e1:f3:
         d5:cd:10:80:be:68:bb:2a:78:a3:cd:7e:62:d4:49:fc:b6:9d:
         ee:c9:9b:7e:94:83:c7:9f:46:6c:3a:4d:ac:13:74:2d:91:68:
         fc:6c:2a:fc:dd:bd:d7:96:d0:5a:4d:18:b4:19:35:fe:de:d8:
         67:9b:52:f3:ec:67:5c:d6:70:f3:e9:17:f9:68:46:2a:64:3c:
         8c:25:72:ce:1e:05:19:3a:9d:82:f1:ef:38:22:75:8a:fc:d2:
         e1:43:7a:b5:96:d6:3e:15:e3:d8:5c:3b:30:a0:80:37:1a:f5:
         b7:90:8c:2f:d1:65:99:0b:ae:44:25:51:d3:f3:15:7e:2b:40:
         aa:11:88:d2:92:db:ea:2a:2b:c2:e3:e3:ef:51:34:9c:ce:1a:
         5c:68:bb:a3:05:6d:04:92:24:0b:77:15:6d:5b:a4:29:a9:e3:
         07:24:c0:a9:09:d7:ca:48:f3:19:43:10:8d:e5:9f:ae:ca:e8:
         6d:e8:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org