Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
File:                     3138372e31392e38302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          MOYNoNxTeW7qyInxZnejjmgMFrtWE8z8tsReLpk8Wks=
Subject key identifier:   7E:FB:34:38:BA:29:80:F2:6E:C5:F6:2D:B2:09:81:1A:B3:99:2E:B9
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       7C0ABD51C6DEBD6DB2E53AE8B0C7F60F15850568
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:04:12 +0000
ROA not before:           Mon 25 Nov 2024 16:59:12 +0000
ROA not after:            Mon 24 Nov 2025 17:04:12 +0000
asID:                     28667
IP address blocks:        187.19.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0a:bd:51:c6:de:bd:6d:b2:e5:3a:e8:b0:c7:f6:0f:15:85:05:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:12 2024 GMT
            Not After : Nov 24 17:04:12 2025 GMT
        Subject: CN=7EFB3438BA2980F26EC5F62DB209811AB3992EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:0a:50:dd:8a:33:c1:b1:93:a0:6b:11:35:
                    6d:ca:f6:2d:d8:be:ed:7d:e3:66:c3:ae:66:aa:a3:
                    54:b5:af:4b:43:9e:b9:63:03:20:b2:45:7d:71:c6:
                    bb:51:90:57:a7:17:6b:c6:91:82:20:c4:b5:00:d9:
                    20:d3:6b:ed:7d:33:82:b0:3e:77:9a:54:ff:7c:c6:
                    ad:e0:42:79:4f:c5:83:0a:da:bb:fe:95:01:ee:be:
                    e6:1c:67:aa:c8:42:18:c9:ab:43:c6:19:74:45:77:
                    8d:27:ce:b6:50:d9:18:c3:93:69:aa:0d:aa:01:c1:
                    9d:52:f7:0c:94:cb:a5:1f:03:03:64:f0:cc:7e:10:
                    17:1e:96:e9:31:2f:a5:86:e1:59:dd:6f:00:11:17:
                    31:86:ab:b9:2d:2a:30:a1:a3:57:d5:36:db:69:14:
                    06:95:8f:92:ca:2f:12:83:4f:11:36:37:a5:c1:c3:
                    f1:8d:73:08:1a:b1:e1:6c:0f:38:7a:30:b2:8c:41:
                    08:fb:8f:87:7a:c4:88:79:92:c2:f9:69:fe:18:62:
                    d2:97:c9:19:e8:29:f8:7e:fc:95:5e:c4:4d:c5:76:
                    98:d2:55:65:c6:48:06:38:d2:a9:b8:1c:32:d6:ee:
                    8e:ea:18:74:25:7b:a8:c7:bb:2c:0c:be:31:17:3f:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FB:34:38:BA:29:80:F2:6E:C5:F6:2D:B2:09:81:1A:B3:99:2E:B9
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138372e31392e38302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:08:f9:27:a3:1e:19:1c:40:71:1a:11:9b:2f:5f:51:02:
         8d:3d:b2:8f:5a:0b:8e:a3:6b:8c:b9:57:f8:93:60:73:0f:55:
         c2:b6:c7:24:d8:2c:09:36:5d:ff:e3:a0:50:66:2b:ef:4f:3e:
         56:fb:4e:24:6e:b9:19:29:5a:3c:0a:a3:6d:a4:d2:0a:18:56:
         5f:28:1b:b4:bf:52:79:09:50:24:8c:55:23:4d:80:95:d5:9d:
         33:c2:84:a5:f3:96:a8:21:61:f4:d5:2d:d0:5d:46:5c:53:3a:
         ff:43:67:40:b9:27:54:58:93:e3:19:d3:25:77:d7:37:d9:83:
         87:76:78:45:18:0c:41:93:b4:96:4c:9b:45:37:7c:1c:80:6f:
         41:27:84:8d:c6:3f:2d:57:ed:f4:44:bb:a3:de:04:af:53:37:
         60:1a:79:96:35:b4:1c:fd:8d:01:5b:66:6e:8c:09:f4:6f:ed:
         22:2b:f2:82:9a:a5:6e:ab:83:05:89:61:9a:fe:33:38:d6:e6:
         54:15:96:46:ae:f3:29:5d:84:2c:f5:21:fa:85:7c:0a:9c:27:
         af:f7:c4:73:75:f7:52:53:5b:27:aa:a1:a6:ab:02:d5:9a:2b:
         a5:3d:c7:60:89:a3:1b:58:fe:eb:cc:70:2d:0d:89:45:9f:0d:
         a6:67:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org