Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32332d3233203d3e20323730353234.roa
File:                     3138372e3130332e3230302e302f32332d3233203d3e20323730353234.roa (raw, json)
Hash identifier:          254zc0Cbx6KIGMeB9VTPGBwJUr6sjnPZSULNIStxRV4=
Subject key identifier:   8B:C5:E9:68:06:2E:2F:3B:E9:A8:D9:C9:E1:95:02:0E:61:77:0D:2D
Certificate issuer:       /CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
Certificate serial:       D4B7EF5C1B4447A2AD217F5B2415994CA4C289
Authority key identifier: E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32332d3233203d3e20323730353234.roa
Signing time:             Tue 13 Aug 2024 12:57:45 +0000
ROA not before:           Tue 13 Aug 2024 12:52:45 +0000
ROA not after:            Tue 12 Aug 2025 12:57:45 +0000
asID:                     270524
IP address blocks:        187.103.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d4:b7:ef:5c:1b:44:47:a2:ad:21:7f:5b:24:15:99:4c:a4:c2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
        Validity
            Not Before: Aug 13 12:52:45 2024 GMT
            Not After : Aug 12 12:57:45 2025 GMT
        Subject: CN=8BC5E968062E2F3BE9A8D9C9E195020E61770D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:ba:d7:28:11:c8:b2:04:ab:21:4f:fa:7b:
                    04:fb:41:80:eb:da:5f:7f:bb:7a:c4:b6:90:25:8e:
                    f5:02:0d:15:77:15:99:1f:3f:a9:a2:0f:96:3c:54:
                    b5:1b:d3:4a:b4:1e:50:70:0b:ad:84:28:1e:8a:06:
                    e1:bd:2f:02:16:06:b4:b4:ef:58:5a:e0:16:ff:cf:
                    3d:1e:b0:4a:89:a5:fa:c5:dd:22:53:09:18:0c:cd:
                    2d:7f:9e:a8:37:63:8b:b1:ed:dc:b3:52:c7:77:e4:
                    ef:86:b1:d3:41:2b:26:24:09:08:b4:ab:54:31:5a:
                    0f:e6:e7:f0:ec:fb:7a:70:c6:9a:60:4b:eb:f7:74:
                    69:5e:c0:36:19:d7:2f:d6:8b:d6:6d:65:15:1c:1a:
                    25:4b:2c:b0:53:a9:47:24:9e:cd:e8:48:8e:19:4e:
                    f8:45:6e:84:78:6c:61:30:a8:1c:a3:dc:8a:c4:33:
                    72:fa:cc:6e:3d:38:d5:7a:5c:7e:8f:81:a2:fc:fa:
                    29:43:c4:81:57:11:74:51:8a:bd:39:ba:2e:9f:7e:
                    b0:0b:2e:bd:12:e7:20:9a:1e:0d:3d:70:65:53:66:
                    8b:29:bd:f1:46:69:d3:1a:0a:3c:3a:54:b5:aa:34:
                    b1:a0:b9:61:50:72:44:97:53:d8:b1:6b:27:42:aa:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:E9:68:06:2E:2F:3B:E9:A8:D9:C9:E1:95:02:0E:61:77:0D:2D
            X509v3 Authority Key Identifier:
                keyid:E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32332d3233203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:47:4e:c1:3d:50:d7:8b:30:db:39:69:0a:ae:bf:b2:1d:44:
         2a:30:9c:54:43:23:a9:7f:42:4e:5d:ad:f8:34:e8:f4:b5:07:
         1c:5e:bb:88:45:8e:e4:95:ae:de:eb:54:99:a1:35:a2:42:50:
         49:32:f6:f9:61:ba:a0:bf:22:6c:57:dc:aa:09:42:74:80:c9:
         90:3a:0c:04:0a:89:dd:ba:c3:7a:9f:46:b1:07:d1:8d:1b:65:
         ca:7a:87:d6:1c:14:1f:74:2a:cc:67:42:84:d6:c6:23:ab:c0:
         c0:b1:c4:1f:51:81:63:69:9d:61:8d:38:02:82:4d:f1:b4:1e:
         54:13:77:4f:92:85:ea:77:03:c3:96:b5:27:75:2f:8d:7e:5d:
         df:4d:68:a3:e7:c6:f9:5c:c5:f2:39:4d:ca:61:57:bb:70:13:
         5e:1a:75:23:43:3c:50:08:d6:f5:45:35:08:85:60:8b:36:77:
         4c:34:8f:66:63:eb:10:94:06:df:e1:3e:d5:37:96:09:b3:d4:
         f7:44:5e:25:99:4d:c1:b0:73:b0:5e:52:38:35:ee:e2:32:bc:
         be:11:1b:c8:6b:8e:51:f1:a0:d8:4a:90:1e:9d:96:04:09:2d:
         4a:34:2c:1f:6c:dd:58:e2:55:04:e5:5d:82:f7:c9:e2:94:39:
         d4:7b:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:04 2024 by rpki-client on console-fra.rpki-client.org