Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36332e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e36332e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          AbPqRUJN6VEne79EKBJM/rC/Hm+jps75oKbMzpED47o=
Subject key identifier:   61:74:61:43:01:FC:D1:CA:7C:1A:0D:DC:34:44:B9:06:36:C3:02:D1
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       0697DA9F007442735ECC668886C70EAD5F38502E
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36332e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:27:12 +0000
ROA not before:           Fri 12 Jul 2024 12:22:12 +0000
ROA not after:            Fri 11 Jul 2025 12:27:12 +0000
asID:                     28352
IP address blocks:        187.0.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:97:da:9f:00:74:42:73:5e:cc:66:88:86:c7:0e:ad:5f:38:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:22:12 2024 GMT
            Not After : Jul 11 12:27:12 2025 GMT
        Subject: CN=6174614301FCD1CA7C1A0DDC3444B90636C302D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:2d:91:a9:6f:99:e5:1b:97:48:06:80:e6:
                    f3:3d:d5:e2:a6:cb:64:df:2c:25:99:69:11:d2:6b:
                    6f:bc:a8:c3:79:5c:3f:00:18:a3:e9:37:8d:f9:09:
                    8a:6e:60:87:90:41:60:cf:d3:74:b7:60:4e:15:fa:
                    e9:ee:44:d6:4c:9c:84:58:2a:22:f9:39:57:04:38:
                    22:f9:b1:0e:67:1a:b5:3f:71:df:2b:25:35:d3:47:
                    9c:8f:48:b0:a2:22:7e:94:74:43:e5:39:b8:e9:0b:
                    b6:4a:e5:aa:9c:26:d3:2b:28:47:80:54:2d:ea:7d:
                    f4:9d:d4:7c:6c:06:5b:66:d5:2a:f5:4d:49:6b:8a:
                    6a:e7:14:d9:62:47:9f:b4:95:3d:25:bd:b3:d9:5a:
                    79:70:30:38:bd:22:ce:d4:eb:79:66:1b:32:ee:6f:
                    9e:66:48:c0:44:0a:3e:34:44:14:3a:43:b5:0f:88:
                    1a:45:1b:fa:42:78:07:75:03:b1:39:01:e4:cf:1f:
                    97:e4:a3:45:0d:a0:89:12:5d:c5:c7:05:26:13:b3:
                    86:b3:dc:9c:51:00:7b:60:cd:98:e4:07:87:b3:24:
                    34:97:c9:93:2d:7f:68:89:07:7f:69:5f:e8:c0:74:
                    53:cf:fc:de:7b:0a:6c:a8:73:05:2d:4c:c2:3b:80:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:61:43:01:FC:D1:CA:7C:1A:0D:DC:34:44:B9:06:36:C3:02:D1
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e36332e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:2b:cf:48:c3:ec:dc:7d:23:fb:ef:29:24:15:86:45:6d:
         b6:76:63:24:c3:08:69:50:52:e0:7f:84:fa:31:8f:85:f3:69:
         d8:a4:a1:eb:db:3b:c2:f9:b3:fb:69:3a:01:90:49:2e:a0:c5:
         2f:d2:89:55:df:3d:95:46:51:ea:a0:7f:7f:e8:49:93:4b:1c:
         2f:5f:b9:85:7b:b1:31:14:cb:31:8a:b6:60:30:5e:86:f2:a8:
         b3:40:6f:f8:df:55:fd:77:93:5c:7a:64:3e:e5:f3:b7:66:83:
         4f:e9:e6:d2:e7:4c:32:ab:57:36:3b:aa:37:d3:06:53:fe:48:
         d5:ea:db:6d:b0:76:c6:42:70:66:36:5e:ab:2a:10:ab:1e:41:
         b4:a0:51:e5:84:42:89:e0:99:4d:70:9b:69:84:54:c2:da:9f:
         2d:81:b5:b3:61:f1:1d:3b:99:3b:9e:25:70:a4:c3:86:15:60:
         ac:ff:3f:9a:76:b2:f5:e9:f9:a3:61:52:48:71:5f:ef:02:ce:
         4f:a7:12:3c:43:ea:a4:e9:0e:0b:30:ae:3a:3a:c6:ea:b5:6d:
         db:13:a4:92:a6:3a:55:cc:13:a2:95:0b:54:11:4b:45:5f:07:
         23:67:ae:9a:2c:cb:e9:b6:14:4f:f6:6e:cb:53:3a:9d:75:b1:
         59:01:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org