Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e312e34382e302f32302d3234203d3e203238323031.roa
File:                     3138372e312e34382e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          +kItD9X4q62RqDFcV8rfr3zzrveX60sCj4WeJn9bT6Q=
Subject key identifier:   1C:34:AA:F3:B4:07:CC:73:68:E6:06:CE:46:3A:C0:CC:5A:F7:1B:3C
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       217E1B53C5D9C31E9972D25B7B003FF6176DB5F5
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e312e34382e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:37:01 +0000
ROA not before:           Wed 10 Apr 2024 12:32:01 +0000
ROA not after:            Wed 09 Apr 2025 12:37:01 +0000
asID:                     28201
IP address blocks:        187.1.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7e:1b:53:c5:d9:c3:1e:99:72:d2:5b:7b:00:3f:f6:17:6d:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:32:01 2024 GMT
            Not After : Apr  9 12:37:01 2025 GMT
        Subject: CN=1C34AAF3B407CC7368E606CE463AC0CC5AF71B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:29:64:c8:52:fa:d4:91:8f:38:af:17:d4:
                    56:09:23:e8:bf:9e:ef:77:c0:cf:35:0c:75:36:a0:
                    15:66:99:d9:7d:c6:de:63:a9:94:88:55:e2:bc:31:
                    f5:93:f9:70:16:f0:12:b2:2a:ae:3b:a3:a2:d3:9c:
                    b7:3a:c5:59:41:c1:43:8a:d7:d3:52:d4:b0:68:c6:
                    a3:56:a4:3a:af:69:34:53:fb:ba:53:75:c2:9e:b6:
                    74:90:5c:d3:d0:3b:62:f1:48:82:aa:d2:9f:54:03:
                    49:fc:bc:5f:e3:92:41:00:dc:82:27:a7:b2:a2:54:
                    57:07:9c:06:cc:5c:89:aa:b2:48:e4:cf:e9:0b:d0:
                    e1:c6:19:2f:b2:29:80:34:b8:3d:c9:66:e6:47:b2:
                    b9:00:af:af:03:a4:d2:33:d9:03:73:e8:04:71:6e:
                    cf:f9:1e:1b:b2:8b:eb:98:c4:58:24:e3:5c:c4:32:
                    9a:df:23:8b:2e:40:02:24:48:d0:f9:bc:b6:5b:34:
                    03:39:e6:81:35:77:1b:8e:9c:54:bd:66:a4:db:04:
                    a9:c9:a3:0f:08:85:ce:26:b6:af:57:f7:30:7e:4f:
                    84:77:36:92:62:0e:d7:85:bb:f2:1e:f4:9d:91:ef:
                    df:a9:43:bf:05:47:a9:86:b3:88:e2:78:5b:f0:bc:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:34:AA:F3:B4:07:CC:73:68:E6:06:CE:46:3A:C0:CC:5A:F7:1B:3C
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e312e34382e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:34:68:5c:16:20:e1:fb:19:d0:85:0d:be:7d:ba:7e:2c:50:
         8f:35:84:ac:94:6d:1a:82:99:38:6b:e8:80:88:f5:62:8b:81:
         31:5f:c9:48:af:2a:61:ad:2d:a4:a4:ea:7a:af:4d:68:b0:20:
         db:f0:c4:d8:5d:64:a5:a6:27:c8:a3:e5:99:0f:51:ec:17:b0:
         0a:a0:51:5f:01:49:e2:27:97:e9:32:2f:51:91:f5:e6:c4:d0:
         bc:a9:af:97:59:b3:ec:a3:5f:72:08:b2:6f:39:17:19:a0:52:
         18:62:c3:f0:21:2f:75:ad:95:17:43:2d:3a:56:f7:e2:da:7e:
         4e:91:e0:d5:f9:45:a1:73:a5:df:e3:39:55:5f:ed:43:04:53:
         3e:30:f7:87:4e:54:c5:66:75:11:05:4a:37:51:b0:f8:3e:e8:
         d6:96:b4:29:a4:b4:5e:f9:4d:1c:ff:9d:9d:98:66:f8:0b:0c:
         be:39:fc:78:44:f4:0e:dc:5b:5e:98:c4:7c:46:24:34:c7:15:
         9b:84:08:6d:d7:b0:b5:17:b7:c8:c3:c3:0f:b0:ae:c8:65:ed:
         9d:09:5e:7f:96:4a:80:a7:f6:73:32:bb:d4:75:67:b5:8c:48:
         0c:f9:62:4f:3f:1a:e1:00:31:e2:f8:56:57:92:ae:96:09:57:
         ad:f6:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org