Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
File:                     3138372e312e31362e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          GGFVseKdQsCH+4ocwu5nj9+KQRuEYdcsijhMtMKoiOs=
Subject key identifier:   77:C1:3F:D3:E6:00:58:4E:8E:E3:F4:53:2C:6F:B4:D4:78:D0:1C:4C
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       22BBDCCEEC1CB4D8CC781B0906292C26B77BEC17
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
Signing time:             Mon 25 Nov 2024 17:04:30 +0000
ROA not before:           Mon 25 Nov 2024 16:59:30 +0000
ROA not after:            Mon 24 Nov 2025 17:04:30 +0000
asID:                     262272
IP address blocks:        187.1.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bb:dc:ce:ec:1c:b4:d8:cc:78:1b:09:06:29:2c:26:b7:7b:ec:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:30 2024 GMT
            Not After : Nov 24 17:04:30 2025 GMT
        Subject: CN=77C13FD3E600584E8EE3F4532C6FB4D478D01C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:d5:4e:c1:4f:c2:46:88:d7:be:c7:b5:79:
                    2c:0f:c0:00:b9:c1:e8:57:d9:41:5d:f8:28:49:66:
                    ed:7a:51:98:67:90:96:7c:27:b3:20:a3:13:a0:07:
                    94:dc:83:4b:a8:3c:8e:22:a8:b5:79:15:3d:32:e4:
                    7c:cb:7d:50:8a:70:d4:77:c8:ba:3a:64:23:11:bf:
                    37:3a:f9:04:a2:e3:91:79:eb:58:45:de:a6:de:e1:
                    3a:b9:5d:e4:4e:14:8c:ad:6c:5c:eb:16:94:24:4e:
                    6b:a2:05:03:4a:53:11:81:a0:94:8d:ad:70:58:10:
                    3d:80:a4:56:ab:87:6e:b9:6e:89:3c:87:1d:a9:36:
                    e5:6a:30:56:82:a9:7e:ae:ef:b0:7d:45:68:0e:34:
                    e6:1e:75:c8:84:3a:7c:c9:3c:6d:f6:c9:c7:b0:68:
                    7e:60:9e:ca:0e:61:b7:6b:75:7a:84:c8:86:96:1c:
                    b6:1c:e2:69:06:27:02:16:c2:43:8d:8f:94:fe:3f:
                    8a:80:38:e5:f0:18:91:f3:77:4d:9c:df:48:f5:73:
                    fa:83:13:85:2d:87:9d:f3:49:69:ad:cb:ac:2c:4e:
                    e2:c6:91:e5:49:f2:d7:b1:3d:28:2e:14:d6:84:10:
                    2d:ee:d9:b9:c3:c6:28:a8:ff:2f:7a:6e:fa:15:1f:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C1:3F:D3:E6:00:58:4E:8E:E3:F4:53:2C:6F:B4:D4:78:D0:1C:4C
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e312e31362e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:25:53:ad:62:37:b5:dc:96:8d:89:33:7a:ee:10:ba:1d:65:
         30:dc:4d:d1:de:bc:d7:39:8f:00:73:c2:08:b7:fd:2e:29:c6:
         a4:98:e1:e9:46:d7:1c:0d:32:9f:28:3c:00:6e:29:ff:31:9c:
         da:4b:e8:f6:e1:8b:5b:ee:10:7d:41:1d:1a:7e:da:15:e3:0e:
         bd:e1:af:b1:c1:ee:65:61:0d:16:8d:ee:5b:4f:fd:22:e2:d9:
         12:c4:9d:50:18:44:c5:7c:a5:dd:1c:99:51:35:08:14:c5:89:
         44:cf:21:8b:33:e0:73:f9:68:5b:b4:0c:77:a5:58:37:46:50:
         d3:f4:5a:e1:10:87:b1:32:95:1f:ce:79:31:63:54:8f:77:41:
         a8:0d:0f:76:b3:53:f3:2e:6a:7f:6c:83:cc:15:0c:c9:d3:4d:
         95:05:50:1c:f3:fc:95:c0:fc:1a:60:67:9f:18:02:3c:b6:30:
         2d:27:f3:d2:af:2f:63:f8:31:15:66:f4:0e:89:51:6a:f7:ed:
         9d:b5:c8:78:02:f3:09:da:26:ab:6a:3a:39:fd:80:e5:1d:6c:
         68:ee:ef:d4:c0:72:fe:d8:f9:b3:7f:94:2a:18:cd:03:ae:3f:
         7b:89:d4:8b:a7:af:e2:0c:68:97:84:77:5e:f5:f8:5c:e2:12:
         f5:de:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org