Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138372e38372e32342e302f32332d3234203d3e203238333636.roa
File:                     3138372e38372e32342e302f32332d3234203d3e203238333636.roa (raw, json)
Hash identifier:          izlcyaX3WvSvNdDmj08WUe+USSSWB19HvPYP1xuSyyc=
Subject key identifier:   27:F5:C7:44:00:60:31:68:88:6D:18:AD:D7:D6:C7:86:0D:EC:65:DF
Certificate issuer:       /CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
Certificate serial:       34020E070CD8A4D34D892905DFAD270D18D67BBA
Authority key identifier: 10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138372e38372e32342e302f32332d3234203d3e203238333636.roa
Signing time:             Tue 23 Jul 2024 23:21:06 +0000
ROA not before:           Tue 23 Jul 2024 23:16:06 +0000
ROA not after:            Tue 22 Jul 2025 23:21:06 +0000
asID:                     28366
IP address blocks:        187.87.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:02:0e:07:0c:d8:a4:d3:4d:89:29:05:df:ad:27:0d:18:d6:7b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
        Validity
            Not Before: Jul 23 23:16:06 2024 GMT
            Not After : Jul 22 23:21:06 2025 GMT
        Subject: CN=27F5C74400603168886D18ADD7D6C7860DEC65DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:0e:b3:6a:9a:51:11:41:af:f8:e5:46:29:
                    07:ba:f7:a3:5e:bb:91:03:79:d2:57:d3:3d:75:6a:
                    52:09:0a:d0:d2:55:13:30:43:99:a0:f3:00:ae:f7:
                    62:80:0e:8c:d4:5d:47:cc:b2:ae:37:88:23:5f:11:
                    d0:d1:c0:89:f0:50:6f:be:95:36:1a:56:f3:d8:d1:
                    fc:4d:42:5a:98:d8:95:fc:29:0b:65:75:e3:9e:ee:
                    e1:25:f7:96:72:24:b4:74:43:2c:b2:24:b7:1a:ee:
                    2a:9d:76:bf:1d:c9:28:9a:98:48:a0:6c:81:ce:42:
                    cc:81:f9:db:62:3d:7c:8b:c1:af:86:a9:5a:b2:40:
                    1a:6f:03:86:bc:4e:70:c2:64:4c:83:12:e1:99:f4:
                    e6:e6:6d:60:57:12:c0:dd:24:c0:a4:a9:95:9a:6b:
                    2e:0a:dc:09:da:c9:00:75:71:4f:0e:66:7b:de:ef:
                    67:8c:a1:e4:76:64:88:f2:8c:7d:27:7d:ac:56:99:
                    81:69:43:76:f7:fb:75:eb:01:a9:6e:bc:0e:3e:d7:
                    af:1e:a1:dd:e0:1b:96:bc:1a:6e:1f:cd:54:0b:69:
                    e6:58:a9:9d:ac:aa:9d:b1:7f:b1:70:41:63:ec:4f:
                    75:b9:74:e1:74:c9:f9:29:51:28:b0:29:7e:4c:e7:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:C7:44:00:60:31:68:88:6D:18:AD:D7:D6:C7:86:0D:EC:65:DF
            X509v3 Authority Key Identifier:
                keyid:10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138372e38372e32342e302f32332d3234203d3e203238333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:c0:1a:60:34:3d:05:7e:3e:41:8c:82:67:53:22:a0:1e:
         2e:1f:6f:d2:10:f5:e7:f4:2f:bd:7b:5f:53:f9:5b:6a:c7:96:
         ba:53:e3:a4:ea:d0:82:05:05:20:1d:1f:c3:86:c5:08:74:0c:
         c4:63:2d:54:d4:bd:cc:3f:1d:b1:33:4d:ab:f0:76:71:53:11:
         a8:b6:66:aa:cf:22:f0:be:06:62:bd:c8:e1:e6:83:da:a6:43:
         1f:26:93:41:48:cf:57:5b:7c:2c:7a:15:1a:65:45:1d:54:4a:
         28:59:c8:56:1a:0b:cf:16:95:e2:60:c1:ff:b3:3b:78:12:9e:
         0e:13:96:7d:8d:cb:21:85:d7:e7:0d:b1:5b:15:77:0f:31:a2:
         46:fa:9d:6f:cb:b2:0a:47:32:2d:e2:35:ef:6d:53:c7:67:48:
         05:ba:49:01:aa:0a:d6:10:c6:b8:ac:5f:7c:91:53:24:c5:63:
         76:67:24:f0:ff:8a:12:3e:5f:70:3c:bc:a9:2c:85:9d:13:c2:
         d1:ec:02:d9:ff:a8:3d:a4:d2:9f:c4:a1:92:14:1c:7c:05:92:
         33:12:a3:38:bd:be:15:32:31:83:17:65:ea:b3:1a:c7:33:8b:
         46:e8:ed:d6:a0:48:cf:eb:60:d7:d4:39:6e:e1:91:87:7f:0f:
         d7:10:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:49 2024 by rpki-client on console-ams.rpki-client.org