Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32332d3233203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          5fLwZHWgGqHgFSX7uCO6x7X/lJYuc3f8YHMnphN6CKA=
Subject key identifier:   29:A8:27:BD:F6:53:FF:91:BC:4C:A5:B4:5D:CD:6A:35:A6:E6:4B:58
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       3BD2CA64EF1E2B10E093C44780ADBDC9D1C255C8
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32332d3233203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:48 +0000
ROA not before:           Thu 04 Apr 2024 10:11:48 +0000
ROA not after:            Thu 03 Apr 2025 10:16:48 +0000
asID:                     28352
IP address blocks:        189.51.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d2:ca:64:ef:1e:2b:10:e0:93:c4:47:80:ad:bd:c9:d1:c2:55:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:48 2024 GMT
            Not After : Apr  3 10:16:48 2025 GMT
        Subject: CN=29A827BDF653FF91BC4CA5B45DCD6A35A6E64B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:c3:14:ba:f7:74:e1:53:7e:c1:b9:82:ff:
                    51:d9:f7:45:e3:fe:8e:cd:14:7b:ee:9e:69:91:92:
                    bf:b0:2d:3f:ea:b2:19:d6:26:3a:37:b0:13:0e:a7:
                    75:6f:28:04:c3:c0:52:18:5f:79:23:bb:49:d7:78:
                    15:e7:bd:5f:b1:b6:28:ca:e5:c0:a8:f5:d9:75:be:
                    fe:f9:93:ff:d3:29:e1:c8:f8:29:6d:c5:06:1a:e1:
                    cf:fc:00:8a:a3:46:c4:1a:34:81:15:df:21:28:6c:
                    da:ad:11:18:de:7a:cf:47:a9:af:08:4a:51:ed:d5:
                    55:23:9d:be:e2:7c:72:14:6e:ad:1a:7b:29:0b:30:
                    b8:06:19:de:21:35:dd:8c:5a:1c:c4:d8:b4:74:cb:
                    f6:1d:7f:e8:cf:cd:22:fb:76:08:af:52:29:70:6a:
                    54:1f:d1:0c:d9:b4:8b:a9:18:63:50:99:34:3a:96:
                    ce:a0:f5:dd:c4:4a:53:5a:7d:c4:4b:be:9e:ab:35:
                    33:15:89:d3:56:b0:cf:f2:5b:e8:ec:3e:c6:da:3b:
                    e7:49:00:4d:d4:56:3b:49:8a:38:f4:1c:a1:6c:1d:
                    3b:3b:f7:e6:fb:6f:3c:1c:9e:76:ac:59:a7:d4:6d:
                    9d:0e:11:6c:be:78:2c:3c:e3:96:8d:4a:34:95:0d:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A8:27:BD:F6:53:FF:91:BC:4C:A5:B4:5D:CD:6A:35:A6:E6:4B:58
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:44:4e:ce:f6:e2:8e:8b:0b:d4:38:6c:ad:d9:3f:7c:b2:01:
         f6:13:ba:d6:da:81:98:14:9e:a8:33:c6:8f:ad:e0:7b:84:ea:
         67:81:cf:0b:43:2e:32:7a:d2:d7:ff:32:ab:94:fb:8b:b4:c0:
         43:c4:e4:df:0b:fb:b0:1d:a8:4a:b3:9b:15:16:8a:dc:f9:fc:
         d6:6b:00:df:93:62:7a:4e:0b:95:e4:fe:db:15:3e:cc:61:93:
         33:a1:da:ab:33:cf:9e:2d:a1:9f:a0:6d:c7:27:88:c6:7c:86:
         9e:e1:b0:98:3f:f4:a6:e1:63:5c:16:56:b8:ad:70:c2:de:cb:
         9d:42:a6:e6:fc:78:af:cd:1b:25:77:63:bc:8c:fc:56:26:8a:
         57:c2:5d:91:32:43:3a:57:8d:ed:26:69:2c:46:a0:40:0d:46:
         93:3c:af:a9:58:c7:a8:43:b8:9f:42:7e:3b:b1:2b:38:96:b4:
         84:83:37:9e:0a:3f:5c:27:5d:9c:6f:e7:a7:e5:d1:13:47:21:
         5c:1d:68:28:b9:7b:3a:08:f2:0c:d1:ef:03:45:18:b4:19:a4:
         00:eb:f2:58:02:9b:df:f9:0e:47:aa:fe:1e:36:16:e3:82:12:
         51:ac:5a:a2:fe:0f:9a:46:08:6b:bd:d7:aa:7d:58:80:e4:2d:
         2a:8b:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:34 2024 by rpki-client on console-ams.rpki-client.org