Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
File:                     3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          uUV15HV8WsAvWDAGIj3xz5up8ePTW3EOpK+zK2AkYS0=
Subject key identifier:   F9:AB:71:91:26:24:B4:3E:3A:48:93:C9:03:26:17:D2:32:94:1F:06
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       32F5085685EDE6B2D9BFAA79C7199C698337074A
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:06 +0000
ROA not before:           Mon 25 Nov 2024 16:59:06 +0000
ROA not after:            Mon 24 Nov 2025 17:04:06 +0000
asID:                     28669
IP address blocks:        187.111.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f5:08:56:85:ed:e6:b2:d9:bf:aa:79:c7:19:9c:69:83:37:07:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:06 2024 GMT
            Not After : Nov 24 17:04:06 2025 GMT
        Subject: CN=F9AB71912624B43E3A4893C9032617D232941F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:6f:03:aa:90:86:e4:32:b9:e8:81:c6:bb:
                    ea:70:70:3a:5e:7a:49:43:af:5f:64:42:75:d1:37:
                    58:ee:9c:9e:ec:0c:f0:b5:ff:13:d4:05:9f:dd:9f:
                    3e:8a:f9:fa:3f:a4:bb:69:4b:30:09:c7:7d:4d:a5:
                    e4:ea:58:54:62:01:51:24:16:a9:65:79:f9:ab:a0:
                    58:1c:e7:a1:02:76:4e:a8:e3:d7:20:30:3b:47:fb:
                    6d:88:8d:fa:37:9d:50:82:d8:b5:5c:9e:0b:40:01:
                    8d:98:e9:1e:9c:95:dc:68:30:55:29:34:fb:e9:2f:
                    c9:57:ae:60:94:63:60:db:0f:2b:48:b2:12:53:f3:
                    a5:e5:f7:7f:86:2f:c1:4e:2f:70:14:54:ff:16:75:
                    cd:c4:98:ee:e3:03:09:05:83:54:25:a6:a5:ff:cd:
                    ad:40:64:17:0e:2d:0a:32:cd:e9:85:4d:0e:c8:0a:
                    d8:39:89:35:90:e1:c4:bb:6d:24:2f:69:47:bd:e5:
                    50:7f:c6:1f:3b:5a:c8:41:46:77:cc:ff:1d:c5:75:
                    fe:64:c8:fa:a7:77:93:61:8f:54:ae:e0:74:49:d0:
                    1e:2d:46:be:d7:de:3a:11:ca:5f:b0:ae:58:79:a7:
                    3d:bc:a9:78:f1:a6:2e:03:ce:3a:47:d6:e1:7a:2a:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:71:91:26:24:B4:3E:3A:48:93:C9:03:26:17:D2:32:94:1F:06
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:37:23:11:b4:f1:f9:28:d4:9d:fc:ce:c5:85:e4:e8:b8:
         42:b7:2f:43:a6:72:29:63:e5:79:8f:13:00:5c:85:91:b6:a1:
         c0:54:2a:e0:95:be:93:90:21:d7:d5:82:d4:93:18:50:3e:14:
         c7:f3:ec:d0:33:56:06:87:56:0e:bb:48:42:d1:57:17:ff:ba:
         62:05:f8:cb:46:30:d6:d9:32:96:3c:07:c4:89:67:3a:f8:3f:
         92:f3:cd:68:62:00:e7:bc:36:fc:09:47:2f:dd:69:6b:ea:7d:
         4c:1f:5b:2a:bb:d0:0b:cd:91:13:11:c0:68:88:f9:95:3e:3c:
         48:96:06:31:5c:19:75:52:7f:6b:4e:70:b0:f0:bb:18:79:85:
         af:3e:a7:1a:d6:a5:22:64:cd:f6:ff:db:15:2f:6f:61:bc:fd:
         8c:17:92:ca:24:83:ed:c4:b2:55:68:d4:4b:36:50:d2:29:56:
         cd:c0:dc:d2:04:e6:2b:77:0f:6d:3e:d4:7c:26:68:b7:c0:b4:
         bd:db:5b:0a:dc:ff:18:cc:9a:5b:7c:fa:4c:f2:ce:f0:98:da:
         3c:2e:f5:81:12:af:cc:a1:82:e4:43:3c:5e:16:11:e8:f2:7c:
         9f:a1:b9:c8:9d:ee:c3:dc:28:74:c5:fa:9a:46:cb:2b:e5:7e:
         8a:34:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org