Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          KeYTVCFtaC9Mp5pqXw7mfvwyt3ChmiUeH5O+cr9z5us=
Subject key identifier:   22:3B:4B:44:01:E6:0B:7C:4A:C8:73:DD:93:03:A1:64:B9:08:F6:FB
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       5F1B4FA6F4117530B18A3B530E3D82F204D2DCFA
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:27:30 +0000
ROA not before:           Fri 12 Jul 2024 12:22:30 +0000
ROA not after:            Fri 11 Jul 2025 12:27:30 +0000
asID:                     28352
IP address blocks:        189.51.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1b:4f:a6:f4:11:75:30:b1:8a:3b:53:0e:3d:82:f2:04:d2:dc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:22:30 2024 GMT
            Not After : Jul 11 12:27:30 2025 GMT
        Subject: CN=223B4B4401E60B7C4AC873DD9303A164B908F6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:c6:04:48:4f:3c:ac:bc:cf:7d:ed:bf:0e:
                    11:86:a6:4e:e6:82:8e:c3:44:75:c8:45:d9:0a:35:
                    07:29:a2:f3:b8:2b:b5:68:1c:1a:28:a4:c3:dc:35:
                    fd:e0:26:3f:83:6d:66:ca:b9:8f:27:26:46:f9:bb:
                    1a:e2:4a:41:90:6c:23:85:fb:4f:13:ad:83:bd:7d:
                    f5:81:96:79:ef:6a:24:5a:6c:54:7a:78:cd:84:83:
                    54:35:f9:78:77:36:69:fe:fc:69:48:d5:09:1f:6b:
                    7d:c8:8b:0f:fa:d9:2e:9c:0a:82:36:c0:00:47:8e:
                    43:aa:db:ef:0b:88:df:69:50:99:b4:3e:32:fe:49:
                    2c:0c:81:be:5d:33:23:7f:b9:30:4e:b2:b5:4d:00:
                    f3:1d:be:17:f3:55:fb:b6:1d:6b:1e:8c:c9:50:4f:
                    0a:9f:81:77:1f:a3:b0:e8:3b:97:59:7e:35:be:b5:
                    25:6f:08:26:76:64:a3:1d:5f:bc:0b:51:2d:81:34:
                    24:e0:6c:c8:e1:16:05:03:ce:61:c0:e7:e2:8d:ea:
                    b2:96:a8:84:39:ba:a8:e1:6f:92:03:da:87:f3:cf:
                    fe:38:0c:69:a3:7b:6b:88:9d:8c:37:24:9e:11:d7:
                    3f:57:3f:a7:d4:5f:94:58:2c:ee:d0:6d:d9:b6:1a:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3B:4B:44:01:E6:0B:7C:4A:C8:73:DD:93:03:A1:64:B9:08:F6:FB
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:9f:9a:18:c9:ca:84:1f:4a:36:bf:71:9b:f5:a2:c2:47:ed:
         0e:1e:cf:dd:17:e2:49:a1:b8:f9:d6:a3:73:b0:9a:cc:0e:57:
         4b:34:fd:a5:5a:ae:8c:5c:22:ba:8f:2e:1f:bb:0e:f9:dc:c8:
         9c:e3:97:fd:3f:71:2f:90:de:64:64:a5:0a:8b:1a:5a:6a:5e:
         c0:48:27:ea:88:af:fd:4c:56:3a:76:40:8d:66:ff:cd:8e:f0:
         59:39:d2:c2:69:72:77:1f:5d:c3:5d:85:fa:ed:32:84:bf:35:
         f9:b7:dd:8f:50:13:24:2e:55:72:22:fb:d5:94:63:7d:8b:0c:
         86:e0:34:44:38:16:9e:4a:ec:76:e4:b9:5e:4e:0c:c6:66:bd:
         20:94:6a:15:59:bd:cc:f4:b2:fd:8c:18:96:91:bf:08:83:76:
         cd:a1:2f:23:00:d2:91:bc:6e:79:08:49:93:f3:68:a2:5a:e4:
         0d:2e:76:be:d3:75:21:fb:85:f8:62:f0:cb:a2:27:e5:6f:7d:
         fc:be:cd:81:80:ca:a0:33:89:a6:ed:58:03:b7:39:dd:fb:67:
         e0:8a:e4:a7:ec:7d:94:5b:ba:8f:66:0c:dc:7a:42:19:1c:49:
         75:1e:b7:3f:e5:0e:4f:2f:3a:f1:f5:89:c7:8c:64:47:c4:f4:
         31:d4:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org