Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          V8DfdSDr0GTax+ZQUUzAO0AcEYx179opfmRXBPdZxP8=
Subject key identifier:   0A:86:E6:1E:28:50:A6:AE:4B:AC:C8:3C:62:07:08:5D:BA:2E:11:06
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       0DF16298002EF6B8D0FA3F7860FF9B1FF53ADE57
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:48 +0000
ROA not before:           Thu 04 Apr 2024 10:11:48 +0000
ROA not after:            Thu 03 Apr 2025 10:16:48 +0000
asID:                     28352
IP address blocks:        189.51.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f1:62:98:00:2e:f6:b8:d0:fa:3f:78:60:ff:9b:1f:f5:3a:de:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:48 2024 GMT
            Not After : Apr  3 10:16:48 2025 GMT
        Subject: CN=0A86E61E2850A6AE4BACC83C6207085DBA2E1106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:13:6f:0f:e7:d7:16:ac:b5:f6:a5:08:09:
                    85:e6:d8:33:f2:00:8a:88:b5:34:0c:9d:47:73:fd:
                    d9:05:a0:fa:c6:ae:79:77:1a:cd:f3:c3:58:44:4f:
                    d5:b2:de:9e:9e:92:7e:d2:bd:4d:d3:e6:75:a6:b3:
                    c2:6a:25:44:15:6b:f8:a3:ae:39:e4:0a:c3:86:57:
                    e6:bf:99:da:1c:8a:e5:2f:12:6c:33:51:81:2c:8a:
                    d0:60:e4:4f:01:d3:c8:01:24:0c:5d:0b:06:00:5d:
                    79:6d:e2:6e:f8:54:e2:d2:9e:36:20:1f:19:94:0e:
                    06:29:48:29:04:ce:5f:b8:02:e1:38:b7:88:3b:89:
                    f8:9f:f2:83:f0:09:8d:c1:f3:5c:ae:f6:df:5c:58:
                    86:cc:da:f0:62:16:9b:34:f7:a6:03:95:51:e2:72:
                    cc:08:26:e7:f9:c6:88:dd:7d:29:be:dd:10:b4:ad:
                    1a:75:21:d6:3b:1d:04:43:ce:ad:e2:81:f9:b8:07:
                    7f:1d:61:36:25:c1:f8:97:59:4f:26:fc:08:60:7d:
                    00:67:fe:32:75:02:23:bb:d5:ae:10:eb:3f:0c:bc:
                    cd:5c:da:7b:05:70:26:80:6c:bc:ad:80:00:1f:05:
                    6d:f1:49:ea:b2:25:be:e7:95:1d:5d:ec:fc:96:38:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:86:E6:1E:28:50:A6:AE:4B:AC:C8:3C:62:07:08:5D:BA:2E:11:06
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:7f:c1:b1:de:19:bf:d7:d4:16:c7:aa:1d:f9:c9:1a:da:
         fd:76:99:80:2f:b0:67:98:ff:cb:ef:38:2d:5b:f2:2a:fa:7a:
         4c:e4:41:a5:95:43:b2:d2:b8:f5:ce:dc:10:18:1f:0a:93:0d:
         c5:97:03:9d:df:ee:bb:77:77:7c:2d:90:8f:23:7e:f5:91:5d:
         52:8c:b9:17:d5:c2:be:da:62:56:65:28:e4:d8:df:94:6a:4e:
         ed:7c:14:46:06:44:2d:08:ad:5a:d2:02:42:6f:72:43:f3:d5:
         b4:8c:17:5f:ea:46:a8:4a:6a:0f:cd:b7:14:db:6e:1d:11:eb:
         4a:be:0b:19:c1:74:17:91:01:8b:60:b8:88:24:c2:66:6e:e1:
         e0:ad:81:b6:83:80:26:eb:d3:23:f6:c0:1a:a9:56:80:56:ad:
         e2:a8:7e:4b:9b:e7:0f:48:71:bd:17:3d:05:b0:8a:5f:39:bd:
         6e:10:3f:88:f3:14:42:36:fc:ae:a7:c3:39:a5:d7:10:1d:99:
         3c:4b:5d:da:9b:a7:7a:c1:6f:b2:fb:d1:90:3c:72:97:3c:24:
         7a:2b:f9:b2:5e:c0:02:3d:e2:8c:00:3e:f6:aa:63:7b:61:d2:
         13:74:72:20:0e:0d:bb:d5:a2:e6:15:ee:6e:0b:f4:11:8b:67:
         a7:9f:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:06 2024 by rpki-client on console-fra.rpki-client.org