Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139332e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139332e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          VOtH1E3rV84KqrD1lzZld6JoKDgZD02J06C+yBso0kA=
Subject key identifier:   88:00:5F:2E:6D:6E:9C:01:2C:83:6C:DB:88:79:7A:D7:CD:AA:89:BF
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       4FEAEE12CD4AA9CE15E2019E753C01C92DEE1788
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139332e302f32342d3234203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:50 +0000
ROA not before:           Thu 04 Apr 2024 10:11:50 +0000
ROA not after:            Thu 03 Apr 2025 10:16:50 +0000
asID:                     28352
IP address blocks:        189.51.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ea:ee:12:cd:4a:a9:ce:15:e2:01:9e:75:3c:01:c9:2d:ee:17:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:50 2024 GMT
            Not After : Apr  3 10:16:50 2025 GMT
        Subject: CN=88005F2E6D6E9C012C836CDB88797AD7CDAA89BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:8c:93:6c:4a:5e:99:4c:97:b7:a5:05:22:
                    55:a4:00:95:9d:03:30:2f:72:67:c8:af:6a:6a:82:
                    5a:fe:dc:cb:5a:9c:50:60:f3:2f:ce:b7:43:b1:11:
                    d1:a8:53:80:b4:7c:40:7c:de:c3:d0:79:51:56:79:
                    3d:23:07:47:07:98:e7:ad:9a:e4:23:0e:c4:d9:85:
                    c8:d7:9a:aa:2b:3d:2c:97:b5:67:d6:3d:61:65:e2:
                    05:12:2c:d8:e5:79:0c:32:61:cf:7b:09:b2:0e:6a:
                    58:9b:68:dd:72:e0:20:1d:f5:26:17:b7:80:cd:45:
                    67:42:c3:75:2c:8f:4f:50:cd:87:ec:3a:dc:a0:2a:
                    da:88:7a:2f:e8:b9:73:29:9d:c6:e7:7d:3c:8c:01:
                    a4:65:0a:b4:5e:c8:51:24:cc:6e:0d:88:c7:31:ea:
                    0c:00:f7:7d:05:4f:70:7b:9f:09:47:0b:f0:12:c2:
                    bc:4b:1a:b9:2e:bd:00:93:c5:fa:37:5e:48:cf:b1:
                    f8:2d:b3:49:28:74:d1:c2:61:82:98:c3:f5:0b:76:
                    e0:ee:de:a7:3a:26:62:8e:5d:25:e8:fd:77:cd:ed:
                    4f:34:65:f3:5c:9c:b4:e1:4a:dc:28:97:9e:52:4f:
                    92:3c:49:9d:2b:f0:de:11:a2:d0:cc:0e:e0:4d:a9:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:00:5F:2E:6D:6E:9C:01:2C:83:6C:DB:88:79:7A:D7:CD:AA:89:BF
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139332e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:b3:1e:21:ae:c8:98:25:05:a0:8f:10:ee:2b:3d:8c:d6:
         94:02:54:c7:33:e2:ce:29:7b:3c:e8:e3:f9:d5:6a:ff:7d:eb:
         fe:66:25:8d:ba:7c:cc:a7:fa:86:50:6c:0b:a9:1d:5b:b0:07:
         76:24:d4:3d:6a:12:f0:32:48:f1:b7:a9:dd:7b:95:9d:bd:d9:
         41:3e:63:c6:37:46:a8:55:26:ad:47:36:66:07:1f:4a:ec:b9:
         7e:2a:c2:52:ec:36:9e:c7:82:4c:de:3d:ea:d0:c3:9a:e3:7d:
         19:1d:fb:dc:b5:db:0c:eb:e8:67:4a:08:ed:e8:4b:6c:35:76:
         c2:43:54:a8:00:e7:76:7d:83:8d:b0:92:e4:e2:e3:60:78:63:
         fc:6b:c2:79:60:ed:e9:a4:a2:4e:7f:d5:3d:6b:d9:c8:50:eb:
         bb:46:db:91:d8:b4:06:8c:b1:2a:98:c6:7f:8c:bb:c4:14:da:
         ba:07:63:cc:91:92:50:ef:fa:09:76:b3:6d:09:95:5d:62:56:
         63:c8:7a:54:40:e5:81:d7:e3:1e:47:c1:9f:ca:eb:79:55:d2:
         79:14:8a:cc:e2:c5:e9:cb:98:92:e2:e1:e2:e9:61:24:50:8a:
         b1:12:c9:f9:47:06:ea:4b:f5:14:7c:12:66:56:04:d4:90:da:
         a5:11:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org