Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e312e36342e302f32302d3234203d3e20323632363539.roa
File:                     3138372e312e36342e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          gToDaurbEcCMLW692LRL+6tHERLXrXh5OTsRkiq/r+E=
Subject key identifier:   48:E6:F5:80:EF:7F:65:3D:A7:03:8E:25:20:89:6E:25:28:7E:76:A4
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       7BF4A44C18BF1B322D640FA7FC492099341CB61D
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e312e36342e302f32302d3234203d3e20323632363539.roa
Signing time:             Mon 25 Nov 2024 17:04:04 +0000
ROA not before:           Mon 25 Nov 2024 16:59:04 +0000
ROA not after:            Mon 24 Nov 2025 17:04:04 +0000
asID:                     262659
IP address blocks:        187.1.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:a4:4c:18:bf:1b:32:2d:64:0f:a7:fc:49:20:99:34:1c:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:04 2024 GMT
            Not After : Nov 24 17:04:04 2025 GMT
        Subject: CN=48E6F580EF7F653DA7038E2520896E25287E76A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:f2:97:ef:ba:37:af:be:a7:80:1d:16:e8:
                    4f:1f:0d:72:6b:3d:6c:33:68:7b:bf:f4:ce:aa:cf:
                    a5:ee:80:52:2d:2d:11:f7:4f:91:c3:71:ea:af:36:
                    a2:6e:35:76:f2:0b:a6:06:a1:8a:09:a8:cd:68:d2:
                    f4:91:11:8b:f8:7e:de:0f:8c:f8:7b:0d:a4:89:ec:
                    f5:7f:d9:ea:44:95:9b:70:ae:97:de:39:17:34:49:
                    a6:66:0a:28:47:88:56:f2:e8:c5:27:ee:4b:7b:e6:
                    93:e5:bb:b2:09:89:f4:8f:81:22:32:31:07:39:e1:
                    71:8a:07:e4:01:a2:a5:66:44:8e:b0:d8:5f:99:d4:
                    9d:2b:40:68:e7:7c:07:2f:b7:d1:9a:08:cf:4d:76:
                    33:5e:5d:31:f2:da:f8:1e:9c:46:ad:55:3c:0c:6c:
                    f7:74:12:61:d6:d6:d0:b8:32:29:a2:fd:6d:fc:34:
                    86:07:e7:32:95:e9:f1:45:01:4a:09:7f:71:f9:bc:
                    a8:cc:dc:f8:d6:df:1c:7d:ab:57:a9:04:1a:0a:e7:
                    41:55:df:81:85:de:c9:c3:78:35:24:02:1b:22:5a:
                    ea:f5:81:7b:a2:88:a5:71:d3:0c:17:32:8d:fc:21:
                    18:2e:16:d9:65:6d:17:23:47:5f:c2:49:10:d2:46:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:F5:80:EF:7F:65:3D:A7:03:8E:25:20:89:6E:25:28:7E:76:A4
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e312e36342e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:d5:24:2b:80:6f:44:9a:ea:75:5d:42:92:91:30:6d:a7:
         d5:25:c1:d7:e9:ed:51:e5:c2:0d:fc:32:7b:a3:06:88:a6:68:
         18:a5:2b:de:5d:a2:97:83:83:d6:c0:01:b8:ba:a4:84:cc:19:
         34:8d:4c:2f:fc:23:e2:ba:b2:ab:e0:5d:98:da:88:b8:e2:50:
         45:1b:55:0f:4a:59:35:13:75:1a:61:34:b4:4c:7c:41:38:01:
         e8:2d:5f:c0:d6:47:87:02:a2:f4:3c:2f:ff:df:78:c1:dc:5e:
         7f:32:09:aa:56:86:a6:f8:6f:39:df:5b:cf:52:40:74:4d:e6:
         d4:cd:e9:b3:3b:43:78:50:cb:15:fc:7d:42:0e:0c:d4:22:d9:
         46:0d:6c:7e:24:46:9f:1b:f4:9a:eb:11:96:76:07:bf:00:d8:
         0c:80:d8:4c:09:df:70:8f:a4:09:95:86:69:fd:20:6c:d6:44:
         03:4c:f9:7c:0c:dc:ac:4e:15:dc:fc:7e:10:62:c5:20:fe:0e:
         0e:b2:89:fa:24:0b:c2:9f:64:71:94:7d:aa:0e:b4:ba:b3:98:
         16:69:53:b4:25:dc:7b:e0:e7:78:8d:2a:7c:af:15:b9:46:ae:
         b0:cf:11:cd:3a:6a:37:e6:a9:f5:16:a6:b5:5a:73:5f:11:73:
         39:d9:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org