Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230362e302f32332d3233203d3e203238333532.roa
File:                     3138392e35312e3230362e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          pfqc8YtMTs+b02jx6GbIPnKHwYmgz6R1Rj4Ja965STs=
Subject key identifier:   22:1F:D2:4D:03:4F:81:44:AD:5F:EC:53:01:3F:FA:D1:01:40:B6:34
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       6DB2DE91E466D9C5ABD45909256838DB2433A554
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230362e302f32332d3233203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:46 +0000
ROA not before:           Thu 04 Apr 2024 10:11:46 +0000
ROA not after:            Thu 03 Apr 2025 10:16:46 +0000
asID:                     28352
IP address blocks:        189.51.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b2:de:91:e4:66:d9:c5:ab:d4:59:09:25:68:38:db:24:33:a5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:46 2024 GMT
            Not After : Apr  3 10:16:46 2025 GMT
        Subject: CN=221FD24D034F8144AD5FEC53013FFAD10140B634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:db:21:7e:ee:c7:71:1a:06:07:66:df:40:
                    23:d9:b8:13:3f:60:c8:cd:4a:31:71:55:be:35:1b:
                    49:49:2b:16:e0:1e:d1:70:fd:48:e1:5f:e2:1c:ab:
                    52:7e:4b:6a:37:38:19:9a:25:5a:70:73:37:37:e3:
                    c4:97:32:15:ef:54:ee:69:5d:8f:a5:d2:a2:c4:8c:
                    30:67:7c:de:26:36:4d:05:56:fc:99:83:25:79:e1:
                    30:50:ed:17:8a:c8:0a:9c:7d:ec:59:a7:cf:b6:0d:
                    08:bd:89:37:be:f3:48:1b:66:d7:bb:b0:70:b7:a3:
                    80:e6:a5:02:0a:27:50:17:ed:6a:1b:d7:6f:43:7a:
                    c4:0f:65:b1:9c:38:9e:33:a3:b8:04:d8:4c:45:9a:
                    63:94:d2:e2:ee:4f:d6:19:ac:d0:6f:7b:10:6b:f6:
                    ad:4b:1a:1e:b1:42:8a:22:44:a3:8a:19:83:8c:a6:
                    79:01:81:4a:40:19:44:49:d1:9d:cd:26:3d:b9:6b:
                    fc:87:59:06:48:17:00:4a:50:fa:d5:ae:8b:71:86:
                    f5:0d:c5:1d:91:48:b1:30:00:d7:2c:10:90:6d:6c:
                    50:94:62:f7:7d:75:84:e5:05:f6:53:30:64:2b:de:
                    dd:5c:90:70:55:e8:79:81:d3:4d:ee:7d:c5:11:37:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:D2:4D:03:4F:81:44:AD:5F:EC:53:01:3F:FA:D1:01:40:B6:34
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230362e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:f9:b8:19:ce:9d:e0:f9:f6:0d:b1:d5:3b:71:c0:bc:26:
         2d:20:58:96:bb:99:ff:b0:34:6d:72:b6:e9:ba:71:a9:b6:31:
         3b:1d:17:a6:38:47:ef:8f:c5:b2:44:97:8e:25:87:83:4e:62:
         1d:bd:71:f3:b1:72:c4:91:68:83:8b:6a:1c:53:8d:41:d3:02:
         01:2a:b9:de:a4:ba:a2:f9:d9:21:d5:37:c6:12:fe:37:36:54:
         2b:e1:ee:63:4e:0f:74:3d:f2:be:a5:3f:fa:da:b1:79:91:c8:
         26:f6:15:d7:ff:df:e0:d8:fc:78:4d:e4:ec:f8:67:21:44:b0:
         d9:e5:88:f5:e3:46:3f:ab:04:79:c4:52:a1:d3:4c:9f:cc:d3:
         8d:a6:03:1b:de:c3:cf:fd:9e:0c:ed:e4:e3:6c:ff:c6:fa:03:
         03:e2:0d:c1:b6:77:89:b9:35:92:6b:51:89:bb:ef:61:04:ca:
         2b:98:8b:54:0a:90:86:43:16:2b:e9:b6:d6:c4:9f:b8:69:28:
         5c:99:bf:36:a4:cb:8b:e4:16:81:30:3e:73:72:6d:c6:44:c7:
         74:b2:ef:98:f3:8f:dc:9b:0c:eb:0e:8a:d1:07:82:89:37:22:
         c9:90:f5:7a:ae:a7:fa:de:7d:58:21:8d:f8:df:fb:ec:70:f5:
         e9:0b:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org