Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36312e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e36312e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          Spyn6gwKUhPAFn4KQlEB6brAYUaVUyaSYFvEzUD85Jc=
Subject key identifier:   13:0C:E4:13:BD:9A:30:BA:FC:DA:15:B4:88:95:2B:8C:53:38:DE:57
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       2FD0B65FCDD97827052BB6E842500259A6A5EEB6
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36312e302f32342d3234203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:47 +0000
ROA not before:           Thu 04 Apr 2024 10:11:47 +0000
ROA not after:            Thu 03 Apr 2025 10:16:47 +0000
asID:                     28352
IP address blocks:        187.0.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d0:b6:5f:cd:d9:78:27:05:2b:b6:e8:42:50:02:59:a6:a5:ee:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:47 2024 GMT
            Not After : Apr  3 10:16:47 2025 GMT
        Subject: CN=130CE413BD9A30BAFCDA15B488952B8C5338DE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:31:f4:21:7d:80:c4:73:f4:d6:ba:96:b9:
                    e7:41:72:5c:a2:c6:a2:99:6b:18:ac:e6:f7:bb:96:
                    3b:ba:ce:a9:a1:db:13:85:c9:65:d1:d7:f1:89:c9:
                    67:9a:c6:0b:ed:c3:0b:66:76:74:31:d4:6f:50:a8:
                    24:01:25:83:b7:15:86:28:a3:74:f6:5d:4c:46:a9:
                    97:04:03:ff:3f:6b:c1:6c:15:6e:83:3b:ee:aa:60:
                    9f:19:58:47:5d:44:79:84:f9:3e:e8:8c:48:a4:73:
                    c3:c0:ec:7a:9a:c6:20:34:be:3e:b4:53:8f:2b:88:
                    47:58:c6:f2:f1:c1:97:c7:93:4d:99:25:d4:c9:58:
                    21:7b:73:18:bd:c9:d6:6f:f0:13:92:37:e8:bd:6d:
                    79:10:f9:1a:ab:ad:fe:18:26:f9:cf:47:ca:1c:30:
                    e6:65:8a:ed:63:cc:2b:1b:2e:8e:ca:a0:c3:64:3e:
                    3a:b5:32:52:98:49:5d:89:9e:d1:b3:d7:9f:ab:0c:
                    ce:3e:fa:61:0d:2a:29:f6:cd:3a:5d:94:1a:42:0d:
                    85:26:78:56:63:7d:7f:65:47:67:84:02:5a:b6:62:
                    8b:26:b0:bf:19:d1:7a:20:e9:0f:4d:0b:97:bc:89:
                    e8:61:2b:02:9e:87:fd:4e:94:84:da:bb:31:0a:f0:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:E4:13:BD:9A:30:BA:FC:DA:15:B4:88:95:2B:8C:53:38:DE:57
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36312e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:9a:19:b4:31:43:d3:e1:09:ea:63:66:55:69:87:c2:d5:a2:
         37:c7:35:3a:b9:1b:aa:a6:a0:bd:53:4a:0e:33:b9:9c:c6:f1:
         13:38:34:b6:1d:f1:83:68:0d:09:a2:b6:88:10:4f:5b:e8:fe:
         f8:b5:f8:8e:2d:2e:10:df:93:a6:be:af:37:17:22:08:c2:4e:
         e8:4f:0b:03:bc:db:e7:41:1c:94:e2:86:a1:56:d9:41:5c:97:
         22:8c:45:d4:47:21:b0:2e:09:b0:41:d7:16:2f:7e:26:7d:63:
         fe:6e:fb:57:13:b1:c3:80:bf:03:2b:d6:b0:de:1c:c8:66:6d:
         91:ea:7e:8e:eb:fa:9f:e7:22:b1:dd:5c:33:8e:91:14:0b:5f:
         39:04:60:76:7a:62:15:e6:0e:ab:1d:87:50:a7:d4:a3:16:a6:
         0d:48:e3:7f:1a:50:b4:ab:77:d6:62:fb:fd:29:15:bf:87:e2:
         6b:6f:23:04:7f:86:d7:2a:8d:9c:0a:9e:c3:69:69:2f:6a:0e:
         51:9b:b7:0c:00:ff:c4:a3:da:c5:d2:d6:1c:e0:58:59:af:df:
         e9:54:73:29:66:c7:1c:45:aa:87:c7:3f:cc:8f:bb:d3:2a:b8:
         a8:04:c0:69:02:a9:f9:5c:86:42:51:2e:fd:4a:be:6d:b2:88:
         02:09:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:06 2024 by rpki-client on console-fra.rpki-client.org