Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa
File:                     3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          qmjZl0eY+5X5hjtxr4QRAo/Jg3PsfZ6qnERwR8qf03I=
Subject key identifier:   CE:2E:42:3E:A4:D2:DE:E5:66:98:20:E3:F9:C2:5F:B6:8D:B5:01:83
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       0EF1678FAEC4B2EF6BF9C9F00CE5295506ECFBC0
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:44 +0000
ROA not before:           Thu 04 Apr 2024 04:32:44 +0000
ROA not after:            Thu 03 Apr 2025 04:37:44 +0000
asID:                     28210
IP address blocks:        189.127.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f1:67:8f:ae:c4:b2:ef:6b:f9:c9:f0:0c:e5:29:55:06:ec:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:44 2024 GMT
            Not After : Apr  3 04:37:44 2025 GMT
        Subject: CN=CE2E423EA4D2DEE5669820E3F9C25FB68DB50183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:bc:f7:82:16:f9:7c:b7:14:1a:29:6f:95:
                    a7:78:d1:b4:9d:7c:72:94:3f:60:73:e1:88:83:21:
                    06:c1:5b:c7:eb:c1:6a:ee:ab:d6:91:f3:ef:f1:f3:
                    ed:78:2c:4f:45:84:14:48:04:4a:ac:54:37:a6:8c:
                    d8:72:64:f8:cc:5c:0a:0b:de:c6:18:07:88:57:e1:
                    ba:49:8d:be:b0:c9:b6:bf:d9:03:ca:e8:8b:35:b3:
                    e6:66:d8:da:54:1d:08:bd:8f:c8:41:5d:e2:d2:64:
                    84:5a:7e:3e:8f:0f:60:f3:9a:a1:01:b1:ac:07:bb:
                    7c:59:10:20:ef:db:5b:aa:96:12:e3:0c:91:0e:eb:
                    7c:29:04:1e:98:5c:74:20:5f:19:45:a1:46:ef:38:
                    41:e2:57:4d:38:3e:a1:0f:29:da:d5:45:74:29:21:
                    c6:df:5f:1f:f3:7f:99:6e:73:a1:2f:85:2b:12:5f:
                    dd:f1:8c:e6:ed:d2:0f:bb:0f:cf:f6:cd:ef:1a:4c:
                    2d:c2:d6:03:1b:55:a7:0f:4d:fa:34:81:3a:48:ce:
                    ec:25:ba:12:3f:95:6f:dc:69:aa:f2:e0:33:78:38:
                    21:5e:cf:18:ba:42:95:ac:b3:c3:9d:9e:81:40:cf:
                    4f:5d:0a:95:52:b9:19:be:f1:a9:96:7d:fe:74:1d:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2E:42:3E:A4:D2:DE:E5:66:98:20:E3:F9:C2:5F:B6:8D:B5:01:83
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:29:0c:f8:2c:0c:5b:64:71:33:ba:73:ea:be:18:b4:c1:
         b4:8f:62:70:f0:f2:f3:4f:ae:a7:81:6f:a0:2a:6b:13:02:b5:
         a6:a6:40:ef:95:d9:d7:79:62:3e:9d:91:e9:f4:a1:b4:f1:5b:
         31:4b:08:44:80:5b:01:4e:70:6f:6c:8e:6a:c9:01:34:ed:28:
         48:35:d9:d1:10:58:f1:5c:67:0a:24:b6:b2:8d:66:79:3c:b5:
         0b:bd:cb:e1:85:c3:f6:56:00:ee:d1:5a:64:f2:1b:bd:e3:7e:
         bf:22:2c:e1:4a:62:8b:5b:97:4a:1e:dc:e9:ad:7b:45:f9:f9:
         f7:2b:ce:b8:0c:b9:b6:46:9f:9c:c2:cd:fa:6f:eb:21:e1:fc:
         39:da:3b:66:08:78:e5:f3:e6:a6:2d:8f:94:03:f1:56:23:b8:
         3d:57:89:dd:30:66:77:8f:4e:df:71:7a:ff:d2:bf:da:34:da:
         88:e8:30:fc:4e:58:37:63:3b:93:b8:51:e8:24:e5:f4:2c:d5:
         6e:ab:1e:ea:c7:6a:68:a6:0e:63:90:de:d0:a0:95:75:32:39:
         cd:ac:c0:b2:58:c6:55:db:e9:d7:8c:68:ff:b4:86:48:85:8b:
         c6:78:90:c2:1e:ec:57:8e:5c:07:c8:06:24:fb:c1:3d:55:aa:
         1b:17:60:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDvFnj67Esu9r+cnwDOUpVQbs+8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNDA0MDQwNDMyNDRaFw0yNTA0MDMwNDM3NDRaMDMxMTAvBgNV
BAMTKENFMkU0MjNFQTREMkRFRTU2Njk4MjBFM0Y5QzI1RkI2OERCNTAxODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9b7z3ghb5fLcUGilvlad40bSd
fHKUP2Bz4YiDIQbBW8frwWruq9aR8+/x8+14LE9FhBRIBEqsVDemjNhyZPjMXAoL
3sYYB4hX4bpJjb6wyba/2QPK6Is1s+Zm2NpUHQi9j8hBXeLSZIRafj6PD2DzmqEB
sawHu3xZECDv21uqlhLjDJEO63wpBB6YXHQgXxlFoUbvOEHiV004PqEPKdrVRXQp
IcbfXx/zf5luc6EvhSsSX93xjObt0g+7D8/2ze8aTC3C1gMbVacPTfo0gTpIzuwl
uhI/lW/caary4DN4OCFezxi6QpWss8OdnoFAz09dCpVSuRm+8amWff50HbCjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzi5CPqTS3uVmmCDj+cJfto21AYMwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzODM5MmUzMTMyMzcyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9f9AwDQYJKoZIhvcNAQELBQADggEBAIMrKQz4
LAxbZHEzunPqvhi0wbSPYnDw8vNPrqeBb6AqaxMCtaamQO+V2dd5Yj6dken0obTx
WzFLCESAWwFOcG9sjmrJATTtKEg12dEQWPFcZwoktrKNZnk8tQu9y+GFw/ZWAO7R
WmTyG73jfr8iLOFKYotbl0oe3Omte0X5+fcrzrgMubZGn5zCzfpv6yHh/DnaO2YI
eOXz5qYtj5QD8VYjuD1Xid0wZnePTt9xev/Sv9o02ojoMPxOWDdjO5O4Uegk5fQs
1W6rHurHamimDmOQ3tCglXUyOc2swLJYxlXb6deMaP+0hkiFi8Z4kMIe7FeOXAfI
BiT7wT1VqhsXYOg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org