Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa
File:                     3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          uyyx8drXqI5tEGKNC9165TbwVzWG/y6b/5DLmhycA7s=
Subject key identifier:   CB:7F:AA:81:D6:7F:E4:9B:3C:A9:5F:F9:90:38:6F:AE:23:2A:65:29
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       18986375F094F9F0F894582208C95D2044978859
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:03:44 +0000
ROA not before:           Mon 25 Nov 2024 16:58:44 +0000
ROA not after:            Mon 24 Nov 2025 17:03:44 +0000
asID:                     28667
IP address blocks:        187.110.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:98:63:75:f0:94:f9:f0:f8:94:58:22:08:c9:5d:20:44:97:88:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:44 2024 GMT
            Not After : Nov 24 17:03:44 2025 GMT
        Subject: CN=CB7FAA81D67FE49B3CA95FF990386FAE232A6529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:f1:c0:50:eb:30:f2:90:71:ed:f9:40:a8:
                    d4:a0:ec:ee:c4:b5:61:81:00:37:5a:7e:89:b4:87:
                    99:95:6c:6f:5e:66:53:9c:88:69:70:0f:b7:7d:f4:
                    e7:e4:d2:8f:a5:76:23:f1:4a:0a:06:00:41:0d:04:
                    c5:11:b9:cd:05:41:bb:09:f1:a0:8d:92:2b:82:c5:
                    9e:57:1b:e5:bc:44:d5:a3:41:46:d9:a7:b9:e6:35:
                    b4:5e:db:10:02:e5:3b:7f:02:a8:39:ce:8d:ba:61:
                    a8:90:48:c4:ac:f2:a6:5c:c7:d3:59:0c:c9:0d:19:
                    87:0d:cd:15:d7:d0:60:09:ed:01:a0:85:6a:db:e0:
                    90:03:60:40:d5:b4:92:ff:c0:25:5e:de:30:6f:76:
                    1a:1c:10:60:97:b1:31:e5:42:93:f6:bf:1c:58:69:
                    cc:04:5d:fe:ad:cf:5f:32:40:8a:c9:6e:57:f2:10:
                    5a:ef:19:b3:bb:1f:0f:8a:15:05:d5:1f:60:1f:4a:
                    c8:4d:d6:da:b4:86:96:fd:b8:7a:25:65:1f:29:ec:
                    01:1c:09:7e:2b:fe:2c:12:e5:8a:8c:7a:03:16:9b:
                    86:b3:aa:b4:b7:8f:8e:7f:b9:54:dd:71:e9:df:f7:
                    8f:6f:c8:38:d3:7d:58:9b:be:3f:7d:f9:2a:87:b9:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:AA:81:D6:7F:E4:9B:3C:A9:5F:F9:90:38:6F:AE:23:2A:65:29
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:df:28:66:35:d7:93:04:30:d8:77:b5:7a:7c:a4:c8:ba:
         00:10:19:e0:97:7e:9e:90:c1:ce:a7:24:70:72:58:b7:45:cd:
         7c:ca:08:41:20:3d:6d:20:d0:bb:f4:2b:e1:85:86:b6:7c:91:
         ad:59:00:84:42:bf:ae:e3:91:2e:13:d7:a1:5b:5a:9d:54:e1:
         ef:a0:65:1c:45:bf:03:e2:89:9b:ce:c2:eb:42:59:fa:1d:60:
         f9:9d:a5:82:e2:98:ef:09:0a:6e:0e:3d:8a:c6:8e:01:e0:67:
         91:dd:81:06:00:e6:9f:aa:c9:f7:92:92:53:a9:13:4e:6e:b2:
         99:ff:5e:01:ea:a7:9d:7b:6d:5b:c3:e1:e4:8b:96:11:31:9c:
         2f:4d:77:e7:f4:4f:ba:96:9c:82:db:9c:89:d5:0b:0f:69:91:
         1c:b6:97:a9:ff:0d:8f:6b:cf:94:ec:de:b0:96:9f:ed:7a:e8:
         a9:9d:fa:3c:8e:31:a9:a9:d3:77:23:a3:81:60:9a:76:86:52:
         1e:66:f0:80:e1:fb:3e:aa:77:ae:76:e4:95:73:71:3a:57:a5:
         3f:4d:73:49:f6:4c:9c:20:64:47:c7:f8:80:c9:cf:e0:8b:7c:
         c4:d6:db:26:4f:58:ae:76:d3:87:92:9e:28:4b:fc:f7:a4:1d:
         04:7b:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org