Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa
File:                     3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          YKQe4/lKxQNjORzkY8eI6NSBimweg7uo8WviVYABqJs=
Subject key identifier:   C1:17:CA:24:D0:4C:72:7D:7F:BB:33:E7:04:9A:C6:B2:BE:17:B5:AE
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       5461DC50C1AFB5A6F32F941D0DDFA80C9BB6FD76
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:31:24 +0000
ROA not before:           Wed 10 Apr 2024 12:26:24 +0000
ROA not after:            Wed 09 Apr 2025 12:31:24 +0000
asID:                     28201
IP address blocks:        186.216.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:61:dc:50:c1:af:b5:a6:f3:2f:94:1d:0d:df:a8:0c:9b:b6:fd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:26:24 2024 GMT
            Not After : Apr  9 12:31:24 2025 GMT
        Subject: CN=C117CA24D04C727D7FBB33E7049AC6B2BE17B5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:43:22:d1:bf:b3:a2:f5:d8:6c:3e:5d:3a:
                    9e:b9:33:0f:1c:39:01:37:1b:3c:5c:e8:86:0d:04:
                    99:32:86:59:a8:a2:3a:5e:4a:9a:ed:11:73:a9:83:
                    29:ad:c7:bb:fd:03:61:04:39:2d:71:48:07:fc:39:
                    a6:dc:c8:28:0f:71:49:d0:6b:29:8d:e1:6a:1d:77:
                    a4:6e:e1:5f:b1:d2:78:58:0a:f8:3c:e7:c7:5d:02:
                    b5:e2:31:54:55:59:c1:30:a3:c2:1f:80:84:b3:62:
                    61:6a:48:ad:e0:d5:29:2e:fa:d4:7d:29:c1:07:2c:
                    b8:87:1f:f6:bf:54:a4:54:5b:c7:d9:8b:52:d9:bc:
                    e4:25:fc:55:2c:23:38:4a:c7:8e:e9:ad:c1:58:fa:
                    49:67:30:36:f7:36:a2:10:82:02:fb:cc:2f:16:f3:
                    a1:de:70:bc:33:52:cc:b8:0b:53:8a:55:66:39:2e:
                    60:24:59:bc:ba:74:69:60:5b:55:3a:d2:96:0b:02:
                    4f:24:d0:1c:ea:93:30:99:b7:0d:17:5b:54:2f:1e:
                    2d:bb:e5:ef:65:3f:99:92:6c:c2:0e:cd:2f:3d:82:
                    27:e7:9d:83:7f:de:c6:ed:2b:ab:fc:48:c4:36:bb:
                    45:90:92:02:62:9b:63:2c:29:fc:45:fc:31:4f:ca:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:17:CA:24:D0:4C:72:7D:7F:BB:33:E7:04:9A:C6:B2:BE:17:B5:AE
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138362e3231362e3132382e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:48:90:5e:b5:dc:5d:67:bc:0c:14:c9:55:29:9e:83:3e:
         3e:d3:2d:f5:33:fc:9f:49:ff:5e:2d:bf:b7:46:c5:b2:f8:0c:
         ca:15:89:ff:d9:40:c4:a9:98:d0:9b:ac:db:8f:bf:36:45:c5:
         2b:f7:75:69:99:9d:f4:9b:c7:cf:47:82:4c:43:16:d6:73:19:
         e9:41:69:e8:25:5a:1a:c1:4f:18:c9:0c:2e:c9:4b:10:4f:77:
         23:c1:7a:0c:de:99:ce:00:31:7f:db:66:88:b5:96:6e:cd:11:
         c6:51:c9:a0:33:a3:91:90:e4:9d:97:cb:f9:10:25:26:16:df:
         33:91:42:e8:f2:5b:4b:a5:3d:ba:39:25:cb:a5:58:ff:b7:43:
         5f:9c:a8:65:ac:01:bb:43:51:51:af:b0:f8:ee:da:43:8b:c3:
         bd:08:78:95:bc:dc:ee:d5:69:af:ac:d4:26:af:77:12:7a:48:
         55:3f:53:bd:e3:ae:72:f8:8a:08:d0:21:a3:0a:dc:86:25:22:
         5b:d1:2c:ec:fc:0d:d1:ac:0e:d8:98:83:e5:e2:2e:df:15:10:
         cc:50:bf:bc:9a:f3:d1:6b:b1:16:02:8f:a9:3e:16:97:40:72:
         97:a6:91:81:19:26:5b:f7:c9:38:30:83:a3:f3:0e:2c:ae:de:
         06:5c:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:14 2024 by rpki-client on console-ams.rpki-client.org