Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa
File:                     3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa (raw, json)
Hash identifier:          /90cQX76ieGJY7I900L+wiftVA6AYBxBvFf6waK0I4Y=
Subject key identifier:   D4:A2:D3:89:8E:D7:51:B6:D2:93:FB:A9:CA:B0:A5:D9:51:CA:AA:A7
Certificate issuer:       /CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
Certificate serial:       181DB1D110EBBF9A75C2FD788BEE61AECABCAF69
Authority key identifier: E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa
Signing time:             Tue 13 Aug 2024 12:57:47 +0000
ROA not before:           Tue 13 Aug 2024 12:52:47 +0000
ROA not after:            Tue 12 Aug 2025 12:57:47 +0000
asID:                     270524
IP address blocks:        187.103.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1d:b1:d1:10:eb:bf:9a:75:c2:fd:78:8b:ee:61:ae:ca:bc:af:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
        Validity
            Not Before: Aug 13 12:52:47 2024 GMT
            Not After : Aug 12 12:57:47 2025 GMT
        Subject: CN=D4A2D3898ED751B6D293FBA9CAB0A5D951CAAAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:be:31:d6:1b:c9:ed:d0:de:5a:7b:bd:21:
                    8f:23:c6:3f:14:c9:0b:9e:76:84:c9:39:da:05:76:
                    44:6c:ed:08:ac:46:3b:cb:15:09:ff:36:02:96:3a:
                    84:cc:93:34:e8:81:17:66:57:85:e4:2d:54:85:67:
                    41:eb:c5:fc:f4:0c:2e:d7:a1:5d:15:b9:18:d0:c3:
                    a4:77:d9:af:b2:85:7d:18:9c:1f:d6:1e:a7:f5:fa:
                    4b:5a:d3:96:63:3e:75:29:25:30:0d:79:ac:17:b4:
                    d4:74:60:8a:35:4c:42:4b:c5:05:4b:9a:cd:a3:79:
                    6d:b3:c2:e7:df:55:22:9e:c1:d1:0a:d7:2a:af:aa:
                    98:eb:30:68:f8:7a:25:36:cb:79:5c:42:37:5c:71:
                    c0:fb:b0:49:9a:52:ca:ae:9a:fd:24:cd:cc:9a:b1:
                    75:80:02:2c:12:cf:ea:70:6c:8a:99:54:69:80:b7:
                    78:dc:08:b1:0b:09:b1:44:5f:09:ff:e9:ad:bb:4a:
                    17:5b:1d:f3:ac:8d:bf:3b:39:18:8e:7e:95:a3:28:
                    9b:1a:b0:b7:18:11:10:ce:eb:1e:0d:ae:0c:32:c2:
                    76:06:98:06:13:0f:15:83:7d:1e:ae:25:96:0d:11:
                    01:00:22:e3:a8:b6:3e:44:cd:be:ea:db:31:75:ec:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A2:D3:89:8E:D7:51:B6:D2:93:FB:A9:CA:B0:A5:D9:51:CA:AA:A7
            X509v3 Authority Key Identifier:
                keyid:E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230322e302f32342d3234203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:46:f3:b1:e8:a4:e6:73:7a:53:f3:df:84:2f:91:10:ff:
         0d:93:10:a9:9f:b0:34:33:17:68:10:1a:dc:8d:92:d8:e7:9e:
         f1:c8:73:d0:9c:97:38:c6:6d:5a:6b:9c:37:c9:0e:a4:41:4d:
         ec:d5:ff:ba:a9:5e:6a:17:34:aa:ba:15:0b:16:48:83:dc:94:
         8a:f8:a6:b6:38:9f:3f:55:0d:10:7b:8f:96:03:03:89:0d:36:
         37:be:f2:c2:5b:75:92:a1:23:05:5e:bf:9a:15:d1:fe:46:c2:
         5f:ea:df:09:8b:e6:59:a7:79:02:40:2b:56:c0:42:f1:a6:45:
         72:08:7c:2a:82:cb:f6:a8:58:cd:5d:3d:7f:4e:f5:7e:21:8a:
         fd:6b:54:ec:bb:f1:7f:8b:58:33:66:5b:83:01:f8:27:be:9b:
         19:c7:39:63:6a:30:1a:a9:05:7d:20:13:9d:ed:c5:ba:b3:b7:
         60:15:e4:c6:16:a7:1a:9a:4e:0b:66:e0:fa:91:cd:f6:79:ab:
         b0:15:a5:e8:63:31:94:e5:8d:26:b7:40:e4:00:8c:a0:94:49:
         88:b1:fa:09:89:1d:5e:67:b2:0f:97:52:29:b3:06:57:d7:5c:
         e3:72:51:4f:38:34:e6:ce:82:12:a9:b2:e9:c9:37:b3:88:1f:
         88:e3:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:04 2024 by rpki-client on console-fra.rpki-client.org