Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3130382e33322e302f32302d3234203d3e203238363639.roa
File:                     3138372e3130382e33322e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          RCZHNBWppR09jdCOLmfVo2RxhrbXqw5ElJ7HrWVQWgM=
Subject key identifier:   2F:B6:06:A8:A6:D1:E8:B7:F1:28:53:CF:1D:B1:7F:B1:47:9B:F3:54
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       5B3F97B5F90C4BDEC98D949EBB5811A11C200619
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3130382e33322e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:09 +0000
ROA not before:           Mon 25 Nov 2024 16:59:09 +0000
ROA not after:            Mon 24 Nov 2025 17:04:09 +0000
asID:                     28669
IP address blocks:        187.108.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:97:b5:f9:0c:4b:de:c9:8d:94:9e:bb:58:11:a1:1c:20:06:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:09 2024 GMT
            Not After : Nov 24 17:04:09 2025 GMT
        Subject: CN=2FB606A8A6D1E8B7F12853CF1DB17FB1479BF354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:71:7e:0e:4f:bc:8f:5a:83:98:01:0f:9f:
                    02:00:fe:d6:b1:e5:6f:27:21:bd:6f:da:f3:02:fb:
                    4f:a0:b6:31:0e:ce:70:73:21:84:85:f9:4b:13:e3:
                    7e:dc:01:ff:1c:b4:ba:99:5c:2b:8f:85:61:2c:0c:
                    92:81:6a:f6:3a:92:60:0c:5d:0e:82:ce:7f:84:c6:
                    a5:58:fa:ff:ad:1f:12:57:1f:8a:8a:20:e2:df:04:
                    3b:55:67:fb:b9:bc:93:f2:c4:09:ae:10:50:c9:1d:
                    e5:1b:03:fa:24:34:9c:ed:50:69:0b:49:78:62:d9:
                    b7:51:6b:47:84:fd:70:7c:ed:c9:89:0f:f9:69:38:
                    05:8a:f4:cf:45:3f:18:79:8a:95:79:b5:34:eb:72:
                    40:e0:e6:d7:5b:13:e1:20:92:e5:c0:ae:57:61:05:
                    ba:70:de:9a:46:36:9f:93:05:59:65:a0:db:97:0f:
                    80:c3:59:27:8b:b9:26:bb:0a:3f:63:d9:b6:bd:f5:
                    57:33:ae:01:85:7f:0a:12:cb:ff:dc:33:34:81:46:
                    4f:3a:94:d1:64:0c:0e:6e:6a:19:56:45:1b:17:db:
                    66:b6:69:f6:06:47:58:d7:21:41:a4:70:6e:d4:5c:
                    e8:9c:01:49:39:99:3d:f2:34:32:61:a0:2b:24:04:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:06:A8:A6:D1:E8:B7:F1:28:53:CF:1D:B1:7F:B1:47:9B:F3:54
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3130382e33322e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:cb:eb:7c:2a:fe:18:bb:45:13:63:18:60:c7:2e:5e:ba:
         36:ea:06:86:66:1d:1d:8d:e0:c5:ff:ad:0a:77:86:56:4b:92:
         26:a5:94:5a:97:f0:77:c6:a5:e1:0d:09:11:15:1a:9e:27:ea:
         3a:84:9c:60:65:88:5f:ae:a4:64:7d:7c:cf:93:dd:bf:a1:8d:
         d9:9b:90:f7:a9:a5:47:a5:48:29:f3:10:8d:80:15:e5:8c:22:
         e7:19:16:12:14:6f:79:6b:b9:d3:60:60:79:00:e3:fd:10:03:
         65:65:3c:38:e6:27:e5:c3:a6:aa:20:6c:63:5f:1f:fc:ad:04:
         d5:48:d0:48:30:73:79:f9:ac:c3:23:1a:79:af:76:fa:99:ed:
         77:93:b1:49:ac:4d:34:b5:ec:6c:2d:1b:b7:19:0d:2e:e5:5b:
         5a:bb:1c:a0:96:2c:27:17:8a:e4:bc:3b:d1:24:64:dd:f2:5b:
         c1:c4:fc:35:18:31:d6:a7:76:45:ac:dd:6d:0e:26:08:ed:e0:
         52:4e:9f:da:58:7d:4c:9d:f2:29:ef:44:18:ca:37:02:ca:23:
         f4:49:dd:5e:cf:62:e4:d4:2d:2b:df:08:39:09:18:78:1e:fc:
         77:12:19:3e:68:ae:21:ca:c0:b3:ae:b9:ef:04:51:87:c2:46:
         fc:e6:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org