Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139372e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139372e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          G23aWAuEHxqMs0Wc7+Qqtyh9QGJwlEaJfmTZkNTnmjU=
Subject key identifier:   41:04:F9:DE:CD:B6:1C:86:72:C1:A7:D0:30:C8:EE:8F:9F:ED:0A:73
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       7D0B8333C5071D5D3561457AB2C20C46C36BBA02
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139372e302f32342d3234203d3e203238333532.roa
Signing time:             Mon 22 Jul 2024 18:27:35 +0000
ROA not before:           Mon 22 Jul 2024 18:22:35 +0000
ROA not after:            Mon 21 Jul 2025 18:27:35 +0000
asID:                     28352
IP address blocks:        189.51.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0b:83:33:c5:07:1d:5d:35:61:45:7a:b2:c2:0c:46:c3:6b:ba:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 22 18:22:35 2024 GMT
            Not After : Jul 21 18:27:35 2025 GMT
        Subject: CN=4104F9DECDB61C8672C1A7D030C8EE8F9FED0A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:70:7d:dc:4d:3c:f1:e3:87:ba:10:84:f4:
                    5f:58:24:1a:11:d7:c6:f6:34:3a:e3:6b:b7:e7:16:
                    a2:fb:ad:b2:f6:5a:d2:a4:80:49:ad:9a:fa:5e:e5:
                    b5:83:98:8f:ad:96:4d:3c:d2:59:e4:92:94:ad:1d:
                    bd:c7:32:43:f7:47:61:fd:07:9e:d3:d4:a5:6e:94:
                    96:43:77:f6:bd:2e:25:9e:8b:c2:9d:09:f9:b4:89:
                    16:83:cf:ed:2b:6a:67:60:7b:59:fd:d1:3d:c9:96:
                    9c:cd:e8:88:5f:50:07:dd:8a:e4:cd:8b:25:f3:c3:
                    0b:00:4a:cc:1a:5d:b9:90:be:81:9c:77:3c:53:12:
                    7b:d0:85:90:3a:64:a6:56:5f:e8:9d:8b:1f:2a:ba:
                    d8:0f:c2:ca:b3:80:7d:2e:f4:11:92:11:0d:91:4a:
                    1c:2f:18:4a:4e:70:64:00:0b:78:7d:8e:e4:e8:94:
                    65:aa:00:4e:19:fc:d7:86:48:6d:9d:d9:bc:60:9f:
                    25:3f:a6:17:e3:3d:8d:8f:e5:0b:3a:b4:44:9c:c8:
                    06:6f:c8:43:c8:ae:74:59:6f:cc:ef:18:af:c4:8e:
                    37:79:52:e0:22:69:ba:a7:6b:de:e8:68:ed:29:64:
                    0b:d1:79:b7:f0:12:ee:e3:32:fd:d6:96:97:f1:4b:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:04:F9:DE:CD:B6:1C:86:72:C1:A7:D0:30:C8:EE:8F:9F:ED:0A:73
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139372e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:60:13:47:ee:0f:d0:e5:7a:0f:d0:d8:42:80:f3:4e:29:
         3a:91:14:a4:95:71:f1:e9:74:42:af:c8:8d:c7:ae:45:5b:19:
         97:7b:28:0c:65:47:c7:fb:a0:a7:9d:57:19:32:4b:b0:67:94:
         73:a0:1c:d2:58:bc:7e:55:65:2d:7e:ba:62:9d:14:a4:09:42:
         75:6a:04:e2:e6:b5:94:f3:52:bf:5c:76:db:ba:32:30:21:d5:
         89:9d:bb:9b:ba:05:23:86:27:07:fd:de:0a:c9:a7:0c:8b:5d:
         31:11:a4:5c:48:24:76:0b:3f:ba:4d:96:16:ad:85:72:84:60:
         60:fa:78:1a:7e:d5:9e:a1:7b:36:85:29:0b:c3:c2:2d:b9:f7:
         d0:2c:f1:87:ae:29:ee:11:8d:c5:c3:7f:00:a6:e1:09:15:e3:
         d0:35:70:78:39:40:ff:15:1b:ea:d5:f2:99:47:07:94:ae:6f:
         a6:e7:7b:7b:e5:73:cc:3b:a7:ce:ad:cb:3e:be:0a:24:45:35:
         3f:e6:c6:41:02:47:ea:73:a1:fb:42:8b:ce:02:51:f2:0a:0e:
         31:48:fb:3f:ef:1d:32:12:9e:86:86:e4:ec:e6:d0:4c:e2:00:
         9d:e9:dd:7e:58:f3:8b:58:b3:c0:47:4f:23:b4:cf:05:e5:30:
         61:76:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org