Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3131332e36342e302f32302d3230203d3e203238323130.roa
File:                     3138392e3131332e36342e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          HT6DV2bhmPpJUjlNgJ+jwnTP/6RtJrDmrNRuc+r1w7s=
Subject key identifier:   24:28:DE:FB:15:53:FB:D2:3E:44:D1:94:BE:F6:2E:73:A7:74:CD:E2
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       717F525FE195F43B11D00DCB69251D0791964759
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3131332e36342e302f32302d3230203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:49 +0000
ROA not before:           Thu 04 Apr 2024 04:32:49 +0000
ROA not after:            Thu 03 Apr 2025 04:37:49 +0000
asID:                     28210
IP address blocks:        189.113.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Jul 2024 11:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7f:52:5f:e1:95:f4:3b:11:d0:0d:cb:69:25:1d:07:91:96:47:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:49 2024 GMT
            Not After : Apr  3 04:37:49 2025 GMT
        Subject: CN=2428DEFB1553FBD23E44D194BEF62E73A774CDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:34:36:03:67:a4:46:f8:9d:c3:be:4b:bf:
                    cd:3d:42:99:ef:e5:10:7f:4b:43:5c:5e:0f:74:16:
                    ad:95:f5:29:40:ad:ba:b5:a5:10:54:4f:bf:c3:db:
                    12:5c:a8:32:12:28:50:f0:ce:3c:da:ee:c2:c9:48:
                    4e:82:60:31:bd:01:dd:96:d1:83:99:ee:2d:35:1e:
                    a3:88:b0:69:b8:da:d1:15:93:05:7c:51:2e:37:32:
                    fe:52:87:b1:d4:4c:3c:76:e7:91:70:59:87:b0:ec:
                    75:8e:4d:b0:de:ac:9f:c4:37:15:8d:53:55:60:54:
                    45:01:a4:31:7f:bd:e7:84:01:30:d9:9c:4f:e4:c3:
                    8d:38:cc:c0:f0:6f:f8:04:06:27:59:ea:c0:8e:bd:
                    b8:31:f7:21:4d:ab:72:d5:2d:ed:54:3e:b7:33:65:
                    05:65:c7:96:7e:d2:c4:e1:a3:b9:de:9f:d3:20:4d:
                    4a:94:d3:b4:b7:4d:09:a1:c7:c9:76:65:ff:71:33:
                    97:51:68:0b:58:bf:93:d5:15:a5:24:23:32:c2:c5:
                    3f:39:05:18:a5:f3:53:81:06:78:5e:36:05:25:4b:
                    7e:a2:95:05:f0:59:40:ac:5f:49:69:6b:f2:51:01:
                    c9:5f:76:fd:45:1e:e8:33:ff:02:41:a6:a4:e4:17:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:DE:FB:15:53:FB:D2:3E:44:D1:94:BE:F6:2E:73:A7:74:CD:E2
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3131332e36342e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:69:8a:f0:c9:2f:4e:2a:a5:f5:af:80:e3:ed:bf:a4:4a:
         2f:69:4a:01:6c:30:00:c0:bc:7e:d7:f8:d5:1b:c1:8c:ce:c3:
         30:49:32:7b:8b:b2:bc:15:50:42:1c:0f:8b:e7:c8:7a:4e:65:
         8f:75:2c:16:d8:6c:af:a5:c2:ce:39:e4:9f:8d:0a:76:cb:02:
         38:66:51:ab:50:52:0b:79:67:1d:af:16:ba:7b:df:a4:b0:ca:
         6c:62:8e:fd:99:22:db:18:c2:17:4d:df:ed:d3:37:e8:8a:93:
         3d:ae:83:91:55:8c:8f:62:5d:64:8f:2e:f3:62:b2:5a:35:29:
         33:e1:31:72:f3:e5:9d:ce:df:fb:65:7d:ee:9f:e2:92:fa:81:
         ea:0e:2d:f7:6e:bc:78:1e:12:60:89:ee:6e:c9:b7:5a:f6:af:
         9f:0b:14:4d:5a:b9:71:b7:e5:0a:10:ea:e4:46:77:1e:d0:32:
         a7:85:b4:ba:4c:79:36:de:e9:d4:1a:2a:9a:08:82:93:05:08:
         19:89:23:8b:47:9d:6f:a1:b4:28:94:f2:e8:c7:b8:51:74:8d:
         2d:05:6a:af:b9:46:13:32:79:73:7c:1f:df:22:0e:9e:8e:e0:
         04:b0:ff:4c:b0:1f:cb:aa:9d:b5:3f:6c:ba:bf:4a:ad:27:82:
         6b:de:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 10:48:24 2024 by rpki-client on console-ams.rpki-client.org