Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
File:                     3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (raw, json)
Hash identifier:          qBVARldTtKCcp9mDxY47YIfh3qW7D1iRiLXiY8LIlpg=
Subject key identifier:   32:D8:38:0D:15:2E:2E:F2:87:90:65:A4:D1:1C:22:81:1E:33:CD:31
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       5A4DC784EC04AF01D440BAD281B6E09BDDFB7428
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270770
IP address blocks:        189.127.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
                          rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4d:c7:84:ec:04:af:01:d4:40:ba:d2:81:b6:e0:9b:dd:fb:74:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:dc:b2:6d:5a:17:ec:7a:3a:de:24:80:56:
                    07:ac:2f:ab:f4:0c:61:16:05:44:c6:45:40:00:0c:
                    96:1c:fa:8f:53:b9:96:43:e3:c4:c1:75:f5:8f:d4:
                    0f:df:8e:47:a6:d3:be:3d:0f:a4:71:5e:25:64:3a:
                    cf:90:df:e6:11:38:da:f3:33:26:6c:c8:b1:bf:13:
                    38:bc:e2:0c:be:7e:88:33:53:e7:6b:36:b0:35:4c:
                    e5:29:d9:20:b0:4e:74:86:35:7f:4b:00:f2:0a:cf:
                    c8:c1:8b:4c:90:f5:91:71:53:5a:02:34:3e:2d:ed:
                    02:1f:b0:d2:1d:1a:d0:18:ee:e1:fa:92:ac:a4:7e:
                    05:4c:fd:69:d0:d9:48:cb:8c:8b:22:24:ae:14:bf:
                    fe:72:b6:8b:06:c0:6a:f3:15:ce:3f:d1:09:d8:ab:
                    ee:70:33:f5:b9:28:47:50:38:be:a2:04:8d:74:fb:
                    2e:17:a0:e2:20:d1:c5:22:d3:8a:e7:a8:16:bb:f5:
                    27:0e:17:8d:ca:e1:93:7f:18:dd:a8:8f:8c:18:6f:
                    3f:b4:36:88:d8:cd:7a:fe:89:bb:54:6c:90:16:64:
                    11:23:79:91:82:c9:71:2c:3e:f2:cf:9f:55:d3:ad:
                    42:51:2e:7b:dc:a5:65:76:5b:2a:ff:0b:02:c2:97:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D8:38:0D:15:2E:2E:F2:87:90:65:A4:D1:1C:22:81:1E:33:CD:31
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:c3:21:62:41:32:35:45:9b:6c:2a:fb:2c:25:a3:fc:44:
         9f:fa:31:da:ea:30:fe:4e:10:54:2c:5f:1c:46:0b:d5:c9:21:
         9a:a0:50:3f:5f:5c:18:ed:2f:ef:9c:79:ed:5a:45:e3:34:9e:
         b9:84:11:fc:e1:96:49:f9:6d:3f:c5:0c:c0:92:b6:ee:d0:8b:
         bc:b9:47:1c:94:90:9d:44:8f:96:ce:86:8e:eb:e0:a5:42:64:
         f1:6c:09:1f:d6:7a:93:0a:58:df:e9:61:1e:50:01:db:6e:58:
         91:4d:75:9e:53:e2:68:56:01:30:f2:45:88:22:b2:99:14:57:
         ca:c7:14:21:9d:3b:c5:96:14:27:ac:9d:72:a1:6c:d9:fb:3c:
         bf:b1:32:35:bf:a9:86:a3:9e:04:10:9d:fd:5a:bc:b0:6b:1b:
         19:92:98:df:f1:8d:66:3e:a9:ae:0c:45:01:34:24:1c:b0:0d:
         1f:49:34:a5:bb:db:0e:8a:c1:35:93:49:3b:76:cb:c9:dc:46:
         56:02:a2:4c:98:7c:9c:a4:b8:68:01:ed:49:08:8a:92:73:c5:
         31:a8:db:02:2c:af:cb:3b:44:b1:6f:ec:50:f2:6b:ba:81:a7:
         ef:13:3b:b8:53:e4:5a:c6:05:48:72:ad:02:84:59:b3:5a:fc:
         76:c5:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:49 2024 by rpki-client on console-ams.rpki-client.org