Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
File:                     3138372e38362e36342e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          Ba+Q/G7m7ZDdzL2wb50mfb0rLu+jaVA4z2phWEx2CGQ=
Subject key identifier:   90:A1:D9:FB:E2:7C:A3:1A:77:1C:5F:1F:9B:EA:9C:BE:4B:61:AA:9C
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       35E5CDF2432BAB458CE0B762D5D8516A28598921
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:30:11 +0000
ROA not before:           Wed 10 Apr 2024 12:25:11 +0000
ROA not after:            Wed 09 Apr 2025 12:30:11 +0000
asID:                     28201
IP address blocks:        187.86.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e5:cd:f2:43:2b:ab:45:8c:e0:b7:62:d5:d8:51:6a:28:59:89:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:25:11 2024 GMT
            Not After : Apr  9 12:30:11 2025 GMT
        Subject: CN=90A1D9FBE27CA31A771C5F1F9BEA9CBE4B61AA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:22:46:42:94:ff:32:ca:45:94:69:d0:ff:
                    9f:24:e7:d2:d4:fe:84:ba:05:dc:ab:e2:ad:84:80:
                    01:70:4e:6e:fb:d5:1d:40:b2:94:ae:9e:ef:e7:11:
                    fd:7f:98:cb:20:bb:9b:9d:5e:76:4d:9d:84:94:06:
                    c0:e8:15:b7:94:50:f8:d8:50:b9:70:6e:04:71:8f:
                    68:bb:91:32:d6:15:ed:a9:24:47:09:f2:03:3b:71:
                    d5:b4:0e:1f:78:08:68:14:65:76:bf:e8:ca:f0:ce:
                    47:3a:7e:88:f0:90:c4:cb:3d:78:aa:d1:00:93:a0:
                    75:d2:0d:cd:03:2c:b5:43:6b:ca:db:c5:0b:89:4d:
                    7e:43:49:b6:ea:90:d9:09:92:25:52:96:57:d0:e9:
                    da:a3:28:59:fd:94:73:24:ff:56:35:c5:2c:04:2d:
                    83:60:d3:2f:7d:52:ac:a4:9d:74:df:c5:ea:7a:55:
                    8e:47:6c:ce:e8:23:f6:38:48:44:53:35:2d:2e:db:
                    0c:25:b3:79:b3:95:a6:9d:e6:34:72:44:fd:b9:85:
                    e4:65:ae:9e:0a:ab:b1:07:34:25:18:ad:7e:40:5a:
                    2e:09:38:3f:47:6f:94:2f:00:6b:57:96:90:b3:76:
                    07:31:60:5f:48:da:6c:14:81:a9:a4:c9:be:13:d3:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A1:D9:FB:E2:7C:A3:1A:77:1C:5F:1F:9B:EA:9C:BE:4B:61:AA:9C
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e38362e36342e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:81:39:a1:53:35:87:be:f6:82:b5:11:62:78:f7:66:b2:98:
         a0:b4:23:1c:d4:a0:92:24:60:0a:7b:eb:38:84:33:59:e1:cd:
         93:d6:84:bd:5e:aa:d7:8f:0e:7d:98:89:f4:c8:f5:3b:0d:1f:
         7a:b8:78:76:15:8a:8c:c2:8b:7e:11:1d:52:92:7a:9a:ef:7a:
         a5:e1:63:77:d4:0b:2a:f3:c8:f3:c0:f8:67:b1:f2:89:a9:93:
         dd:1b:b9:9f:64:2d:a7:fc:4b:e7:26:9a:da:fe:32:16:0f:e8:
         00:ac:ab:73:75:2f:f7:cb:7a:ac:a5:ed:b7:f2:64:0a:03:1a:
         67:c3:b5:24:02:ba:00:a0:81:a1:d4:34:5b:25:e6:f1:48:15:
         35:38:0b:5a:1d:67:74:08:59:b0:ad:b4:0c:8c:57:39:e5:ce:
         dc:8f:db:3c:02:6f:2a:ba:21:59:65:52:38:24:a7:d6:24:8d:
         5e:8c:ba:e1:d8:76:9b:5a:cc:da:56:aa:90:00:95:4a:bb:59:
         49:dd:0e:4b:78:6c:bb:16:27:2e:f1:d1:27:99:23:2d:cf:dd:
         0c:e3:e1:4c:6d:5b:46:b2:a3:9d:c7:c0:1a:f4:5d:2b:01:fc:
         cb:20:c1:89:38:00:2c:fd:26:02:0e:f4:d0:8a:51:e9:05:6a:
         10:51:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org