Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa
File:                     3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          GpEBaf5CGQBBqsaln32ad049Oq9rPBSwo0ot3szTDDc=
Subject key identifier:   AD:E1:CB:07:E3:32:5F:7A:E5:63:AC:01:D3:8B:CB:CB:71:2A:63:E4
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       13702F4620810DC65A28D8119712B36B1C7A0809
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:47 +0000
ROA not before:           Thu 04 Apr 2024 04:32:47 +0000
ROA not after:            Thu 03 Apr 2025 04:37:47 +0000
asID:                     28210
IP address blocks:        189.127.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:70:2f:46:20:81:0d:c6:5a:28:d8:11:97:12:b3:6b:1c:7a:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:47 2024 GMT
            Not After : Apr  3 04:37:47 2025 GMT
        Subject: CN=ADE1CB07E3325F7AE563AC01D38BCBCB712A63E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:73:f1:47:fc:ee:ec:da:9d:c6:23:d4:58:
                    79:6b:78:c6:91:e0:8b:df:17:28:4e:9a:2d:8c:c7:
                    b4:5d:e9:d7:64:97:d5:e5:49:1a:5a:ca:24:f0:99:
                    d1:04:62:d4:8e:fb:57:fd:7e:e5:74:4b:fb:ed:36:
                    d5:94:8e:02:1f:57:fa:1d:93:7f:7a:92:e4:87:f6:
                    0d:86:0b:de:b8:8c:14:62:e8:74:e9:1d:c4:d6:ff:
                    ba:65:cd:9d:6c:a2:69:d4:b9:bb:f2:58:75:f2:c4:
                    5d:43:e8:4a:3e:35:0d:3e:3e:c7:83:71:6a:60:78:
                    b5:65:12:f4:f8:42:dd:a6:73:37:ff:c6:f7:e5:b2:
                    99:ab:b9:1d:54:80:37:1f:a1:d3:95:88:74:57:f2:
                    12:b7:58:53:5e:1c:ca:6e:99:f3:be:77:1d:54:cb:
                    fc:e8:2a:72:90:6f:6a:a9:6b:74:81:03:ed:92:4e:
                    cc:89:5d:ba:08:dd:63:d3:6b:62:bb:17:58:67:3c:
                    25:ee:41:ba:77:21:c5:e5:4a:9b:f8:d6:1c:e8:58:
                    27:2a:fb:11:96:a1:48:f7:96:23:ea:03:49:93:a3:
                    5e:54:07:ad:55:f0:87:da:98:90:fb:6f:b5:52:f5:
                    9f:9e:bf:88:77:4f:f0:fc:8a:12:75:60:d8:2e:38:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E1:CB:07:E3:32:5F:7A:E5:63:AC:01:D3:8B:CB:CB:71:2A:63:E4
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3138392e3132372e3231302e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:2b:ec:1d:84:69:64:ff:c0:ce:59:7e:6c:a3:d6:41:4a:3a:
         b1:5e:dc:7f:62:41:e2:f3:35:66:15:26:c5:e3:ce:e0:32:ba:
         26:6a:70:38:d1:74:2e:0b:a0:27:17:b2:55:09:3b:d9:74:6a:
         f9:b9:e8:3d:f3:ac:d0:ad:6d:17:1c:06:ab:ec:ea:a8:0f:75:
         e8:88:28:c2:06:e3:28:6b:02:45:0d:a5:86:7a:33:06:02:6c:
         2c:15:c3:03:c7:f7:00:6f:e7:3e:0e:b9:0d:19:28:2d:59:22:
         fa:66:1e:71:ec:c7:b6:d3:cd:91:11:3c:6d:6f:8c:78:b6:1b:
         a9:25:d6:39:8f:52:f8:7f:1f:a4:12:82:41:b9:c5:37:06:dc:
         f9:d2:60:a7:64:98:17:3b:c1:4a:98:db:be:04:02:ec:39:24:
         67:a9:f1:a7:ad:ba:63:c8:a4:50:55:a4:db:7e:f8:71:ad:f5:
         bb:d0:a0:43:8d:0b:c0:7b:77:f0:e7:e7:10:65:ed:4a:6d:43:
         7f:e9:a9:6d:d4:7a:09:b7:a9:cc:56:a8:78:d0:a0:91:7a:97:
         7d:79:06:d7:78:95:2f:5e:d8:99:a3:b3:b5:78:58:23:1c:4a:
         48:4c:a0:ab:ad:0e:15:f6:23:3b:90:8e:fc:99:85:90:31:f3:
         e7:16:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org