Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          Ut963Hp4iNggt9qN9Me6hSgvpuDdzN19llwWOzJsXGQ=
Subject key identifier:   4C:2C:78:BD:79:84:3F:8E:F7:F2:9F:88:E7:AD:EE:90:48:E6:37:B5
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       60F7849D9AD2A0D011B7615282BB9DFF515C6B2C
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Mon 25 Nov 2024 17:04:01 +0000
ROA not before:           Mon 25 Nov 2024 16:59:01 +0000
ROA not after:            Mon 24 Nov 2025 17:04:01 +0000
asID:                     28669
IP address blocks:        189.28.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f7:84:9d:9a:d2:a0:d0:11:b7:61:52:82:bb:9d:ff:51:5c:6b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:01 2024 GMT
            Not After : Nov 24 17:04:01 2025 GMT
        Subject: CN=4C2C78BD79843F8EF7F29F88E7ADEE9048E637B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:d4:6f:34:99:f9:ee:48:4a:b3:01:8d:b7:
                    24:e7:4b:86:c8:69:21:c6:f7:7c:7e:9e:b3:ce:3a:
                    ef:8f:19:8c:54:87:8f:d3:ee:33:b7:f3:21:05:48:
                    3d:c8:b9:dc:03:b3:a0:24:3e:7f:e0:76:50:46:10:
                    35:ad:e8:98:bb:1e:bb:9b:4c:36:04:30:4c:05:7e:
                    2e:0e:c7:19:7b:1d:49:fb:33:2b:87:8a:58:ef:65:
                    6d:09:85:87:58:9b:6a:37:40:d3:c9:fe:ce:a9:51:
                    5e:2c:04:e9:c0:b0:8d:ac:eb:82:fc:46:aa:ba:8e:
                    44:af:a5:87:b4:cc:f4:e1:fc:c5:e7:5b:22:77:32:
                    e8:29:fe:da:b3:1a:5b:17:83:84:13:11:17:75:aa:
                    f4:ba:e8:b8:90:b3:3a:1f:59:8d:e8:83:f3:4e:88:
                    b8:d9:ed:b0:ec:ad:b6:ae:9f:6e:dc:e0:de:60:fc:
                    3a:bb:89:7d:83:a6:ef:0a:39:9a:8a:e7:27:af:77:
                    8b:12:94:41:ba:e2:3f:2a:18:22:78:3a:43:66:c9:
                    f5:93:da:82:d7:99:f7:a0:e4:e6:f9:66:1e:bc:c9:
                    c6:e2:6e:25:e5:b3:ba:d1:78:4b:52:3c:19:08:49:
                    db:ff:40:81:70:85:50:f7:5c:a4:ae:25:7f:9c:71:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2C:78:BD:79:84:3F:8E:F7:F2:9F:88:E7:AD:EE:90:48:E6:37:B5
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d3:c3:9b:eb:75:96:aa:cd:f5:57:7e:c5:25:ba:a2:f1:7a:ab:
         47:cb:97:c0:20:4d:0b:ce:7f:4a:0f:81:73:e9:eb:62:4d:2d:
         71:41:d4:c6:ad:75:c7:ba:aa:e7:07:17:e6:0a:d9:7a:d0:2d:
         86:fa:ff:7a:86:e0:cf:ec:0a:ab:81:a2:5c:01:16:de:38:bd:
         22:78:71:05:42:e8:07:1b:1f:fd:3e:03:42:77:8d:20:fb:8d:
         11:bb:98:b0:ad:e7:19:39:00:58:4b:db:ba:3e:db:e3:cd:2a:
         03:53:92:62:93:f9:64:de:83:cb:2d:9c:16:53:aa:36:14:23:
         2a:b8:fc:ed:6d:13:4f:4d:93:b1:fd:16:ce:88:a4:a5:97:8b:
         ac:be:57:b2:aa:aa:53:e4:a8:17:90:f7:b0:e4:01:b2:f8:8e:
         48:9c:90:33:80:67:1a:cb:05:dd:85:e3:3a:94:fc:9d:9a:c7:
         b2:13:09:1a:38:17:02:2d:da:1f:25:62:36:16:6d:ea:46:8c:
         7d:41:64:b8:29:22:69:8e:fd:43:29:d8:63:d4:f7:67:84:f4:
         94:21:96:b8:c1:26:d1:f9:b0:79:8a:db:c2:7f:60:c1:23:61:
         68:e0:7a:5a:c2:00:75:47:32:c4:35:64:1c:34:8c:e5:50:58:
         3d:f8:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org