Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138392e38342e38302e302f32302d3234203d3e203238333636.roa
File:                     3138392e38342e38302e302f32302d3234203d3e203238333636.roa (raw, json)
Hash identifier:          M2rpVONQC9ocBG7ijVr5mILkJyKTfRCM8Z92d+Z7wKs=
Subject key identifier:   87:68:E5:C0:91:E5:B5:20:DA:B2:41:7F:7B:5A:37:66:83:76:C9:3A
Certificate issuer:       /CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
Certificate serial:       7E8C29A8F9C13D16E4F6E0722117B21ED5A35639
Authority key identifier: 10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138392e38342e38302e302f32302d3234203d3e203238333636.roa
Signing time:             Wed 24 Jul 2024 13:23:04 +0000
ROA not before:           Wed 24 Jul 2024 13:18:04 +0000
ROA not after:            Wed 23 Jul 2025 13:23:04 +0000
asID:                     28366
IP address blocks:        189.84.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8c:29:a8:f9:c1:3d:16:e4:f6:e0:72:21:17:b2:1e:d5:a3:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
        Validity
            Not Before: Jul 24 13:18:04 2024 GMT
            Not After : Jul 23 13:23:04 2025 GMT
        Subject: CN=8768E5C091E5B520DAB2417F7B5A37668376C93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e1:40:d4:14:42:52:f4:a0:32:9f:54:ed:8b:
                    04:6e:c5:3e:ab:65:c5:18:80:f5:35:a0:80:d0:17:
                    3e:11:0b:61:0f:82:61:fd:3c:ad:4e:8e:11:ae:c6:
                    6b:66:56:87:67:75:ef:36:f6:42:80:29:78:55:6d:
                    0b:da:dd:62:33:92:c5:fb:05:0f:9c:e7:3c:64:7a:
                    b2:f9:2a:b1:8b:61:c8:9c:47:5b:30:21:c6:05:e8:
                    71:5b:be:c3:7a:da:64:e3:2c:ab:51:5e:fa:12:c2:
                    f7:8f:51:7a:cd:80:36:17:70:c6:4b:33:0c:1a:52:
                    ac:f4:a8:f5:b4:ff:d3:48:c4:ec:e4:2f:66:70:2f:
                    86:0e:85:7d:c2:4f:cd:b3:b0:76:05:36:2d:fb:a3:
                    ff:2e:14:26:f8:44:94:35:9e:02:9a:cb:d0:a4:70:
                    41:70:b1:59:9e:b8:e3:b5:d1:1f:13:ce:8f:62:f5:
                    cf:dc:54:b0:0a:56:11:40:3f:37:7e:3a:80:03:28:
                    ba:03:22:c6:58:39:cd:8b:b7:02:91:0c:dc:25:34:
                    57:74:89:96:60:b4:e7:32:2c:db:61:8f:31:ac:fc:
                    f8:c0:fd:42:72:ce:33:a3:27:9a:62:98:40:a5:9d:
                    f5:e9:0d:bc:5c:3e:24:88:58:99:84:17:b9:60:27:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:E5:C0:91:E5:B5:20:DA:B2:41:7F:7B:5A:37:66:83:76:C9:3A
            X509v3 Authority Key Identifier:
                keyid:10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138392e38342e38302e302f32302d3234203d3e203238333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:70:25:82:3c:18:ce:99:59:a6:76:03:1e:c2:ae:64:38:
         ae:50:6f:a8:dc:c4:a9:d0:fb:eb:4b:c2:ea:a2:12:90:89:2c:
         27:34:39:57:a9:c9:cd:52:ef:2c:bf:aa:6a:d2:22:e8:63:3f:
         a2:38:6b:75:f7:74:39:7b:7c:49:9b:b0:87:4d:7f:6c:b3:e1:
         2d:a4:52:a2:2f:cd:91:26:77:a0:7a:0f:c7:81:83:6a:be:ed:
         f1:a6:34:76:5f:bf:eb:2d:94:3e:2e:94:23:ed:f9:d3:08:08:
         42:9e:f2:d7:ae:25:71:81:5b:55:34:52:dd:a3:06:0a:2b:d3:
         e0:fb:2a:44:72:51:cb:79:c2:69:f9:12:d8:65:2a:79:1f:87:
         6c:6e:c3:78:eb:2c:ea:7e:55:8c:1d:46:72:2d:7a:2b:31:1d:
         b2:87:c0:d0:9c:6d:b7:93:91:9c:ba:d7:d2:09:0c:e9:81:28:
         51:7e:5a:b0:eb:cc:a7:34:b6:ac:9e:19:4b:44:3b:1e:2d:50:
         13:31:9d:9b:e1:ec:85:26:f7:f8:c8:ee:96:d8:e9:da:85:d6:
         a9:a1:d4:cf:cf:53:f8:65:cc:f1:b4:6d:44:01:a9:b1:d9:ef:
         25:0a:fe:c1:16:0f:4f:39:8e:47:68:4d:58:80:be:03:07:e4:
         6e:6a:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:49 2024 by rpki-client on console-ams.rpki-client.org