Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa
File:                     3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa (raw, json)
Hash identifier:          /CZqHWJhG7cnXVFo6VjVGduJ4/0aj68rjPUkcDPvB5c=
Subject key identifier:   B2:A9:10:BD:6F:BF:09:08:29:26:D0:E6:21:48:D0:AC:5F:B7:C1:E1
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       0F81D3EFF6A4DCC20916087E67FDB1BF6C442FBC
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa
Signing time:             Fri 17 May 2024 13:54:08 +0000
ROA not before:           Fri 17 May 2024 13:49:08 +0000
ROA not after:            Fri 16 May 2025 13:54:08 +0000
asID:                     53141
IP address blocks:        186.194.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 18:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:81:d3:ef:f6:a4:dc:c2:09:16:08:7e:67:fd:b1:bf:6c:44:2f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: May 17 13:49:08 2024 GMT
            Not After : May 16 13:54:08 2025 GMT
        Subject: CN=B2A910BD6FBF09082926D0E62148D0AC5FB7C1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:22:56:f4:40:9d:89:2a:5c:86:af:ea:41:
                    09:88:fa:45:b2:fb:c2:54:88:f1:bf:09:cd:33:bb:
                    c9:4a:43:23:1e:52:16:a3:53:76:f6:f9:0a:73:72:
                    fa:88:a7:97:40:e3:27:83:68:c2:c5:e5:d6:b6:e0:
                    32:33:2a:d5:35:20:79:c3:7c:f2:7e:22:39:eb:90:
                    4d:b8:1d:29:19:c6:77:15:2d:7c:27:87:2e:ea:58:
                    ef:92:a9:9f:88:ef:11:70:e6:a2:ec:ca:93:f3:27:
                    b6:a8:7d:b6:94:9a:f9:cb:41:14:d6:58:61:7c:65:
                    06:89:ed:bb:ad:44:4a:b0:29:dc:85:94:d5:e3:e1:
                    b5:86:33:b1:4b:83:4b:b6:63:f0:1e:22:74:a4:5f:
                    a9:30:fa:5c:86:24:e6:e1:cd:f7:97:1f:b4:9e:bc:
                    0e:c9:94:b4:a1:a7:fc:aa:9b:20:89:65:85:df:2b:
                    ea:b2:ee:4b:28:73:9e:ce:d3:ad:5a:97:eb:c7:2b:
                    ce:73:33:25:21:c4:f3:12:50:ba:7d:0c:57:8f:c9:
                    83:95:dc:6d:81:e2:c3:d4:60:54:9f:56:c1:8f:62:
                    02:84:50:8a:e1:20:01:b4:30:a2:8a:90:55:16:0d:
                    40:3e:07:85:ad:75:fb:98:87:d1:9a:5b:35:84:f2:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:10:BD:6F:BF:09:08:29:26:D0:E6:21:48:D0:AC:5F:B7:C1:E1
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/3138362e3139342e3132382e302f32312d3234203d3e203533313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:e9:ac:c8:99:3f:f4:de:3a:f5:ce:78:b7:53:60:01:a4:
         d2:47:a7:1a:0e:31:e5:54:91:dc:22:5b:d3:c3:a8:17:37:7a:
         d6:41:b9:e1:42:34:f1:f4:c0:3a:f2:ad:63:e3:f5:6a:0a:27:
         aa:70:1a:6f:f1:43:53:6f:c0:5e:8d:ab:ca:32:69:92:84:fa:
         0b:ca:04:bd:c3:d9:4e:41:9c:cd:d6:15:0a:91:88:85:d5:60:
         33:15:6c:96:18:41:61:be:2c:f7:31:c7:aa:36:72:b6:dc:5c:
         f3:be:15:d9:6b:71:a3:ef:ff:05:08:ef:c5:1f:35:16:72:a1:
         ef:cd:a4:4c:50:88:a8:80:c3:23:66:68:1d:b9:ad:8c:b0:50:
         c8:09:ee:0a:1d:51:fc:51:e5:84:fd:58:21:5f:1c:5f:0a:ab:
         34:42:5c:eb:e9:51:a6:40:ed:11:cb:0b:78:75:cd:cf:d9:67:
         83:19:8e:30:15:6f:87:0a:df:a1:87:e7:6b:30:4e:8f:ef:8e:
         30:ed:fa:be:85:f1:5f:b5:13:5c:16:e5:b0:1d:47:62:c2:46:
         ff:d5:43:53:fd:8a:4f:70:db:03:1b:a4:89:7e:71:c9:ef:a4:
         1b:38:8c:41:b3:21:31:ab:33:8e:43:0e:58:48:f2:b9:10:cf:
         6d:73:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:37 2024 by rpki-client on console-ams.rpki-client.org