Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
File:                     3138392e32382e3136302e302f32302d3234203d3e203238333030.roa (raw, json)
Hash identifier:          xMcqBTIZ3H+rAyhfoTfpSOo9yQ7f6ydkOicKByovokg=
Subject key identifier:   C6:AE:23:C7:29:0A:D9:B9:D7:AC:84:2F:42:B6:D1:68:7E:7A:AC:97
Certificate issuer:       /CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
Certificate serial:       3F8845DCD5479131E82237EABBD303DCF29A8B46
Authority key identifier: 0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa
Signing time:             Mon 27 May 2024 12:47:53 +0000
ROA not before:           Mon 27 May 2024 12:42:53 +0000
ROA not after:            Mon 26 May 2025 12:47:53 +0000
asID:                     28300
IP address blocks:        189.28.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:88:45:dc:d5:47:91:31:e8:22:37:ea:bb:d3:03:dc:f2:9a:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
        Validity
            Not Before: May 27 12:42:53 2024 GMT
            Not After : May 26 12:47:53 2025 GMT
        Subject: CN=C6AE23C7290AD9B9D7AC842F42B6D1687E7AAC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:9d:33:0a:6c:05:f6:57:b6:cc:12:be:6b:
                    02:af:7d:40:88:6c:68:0b:9e:94:40:2c:0d:dd:8c:
                    15:40:3d:24:e3:40:2d:a9:ee:66:f7:44:c5:46:00:
                    66:5b:fb:e1:0a:8d:63:57:b6:f4:37:e0:d2:dc:9a:
                    00:e0:f7:6e:4e:7f:41:1d:7a:c4:44:0f:69:c8:dd:
                    2e:9a:ed:20:25:e2:3a:24:85:9f:e1:b3:4f:da:84:
                    a3:1e:59:be:c3:d6:96:b8:99:f7:17:a6:ca:94:b6:
                    4f:a3:d0:42:e6:b8:e3:bd:51:75:6c:3f:b1:5c:1d:
                    1d:18:a4:72:1e:63:43:4b:35:05:2e:64:9d:8e:bf:
                    7e:31:dc:da:35:e6:f0:6b:ea:e5:68:92:a3:86:5c:
                    aa:5e:68:19:42:0a:82:80:96:97:53:3f:70:9c:c0:
                    69:4d:39:1f:af:e6:77:60:30:cc:c3:16:01:1f:1e:
                    58:b1:1c:e8:fc:d7:d6:b0:e9:81:ed:ab:fe:e1:9e:
                    98:27:da:af:79:d7:e1:79:78:ce:b9:01:99:62:3d:
                    a8:4a:d0:2c:a4:b1:8a:28:db:f3:c4:b8:2b:ca:97:
                    94:88:af:f8:6c:04:a0:d9:b1:6c:9b:6c:03:7a:fb:
                    a2:e9:41:51:c0:22:72:bb:7f:aa:17:54:18:f7:11:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:23:C7:29:0A:D9:B9:D7:AC:84:2F:42:B6:D1:68:7E:7A:AC:97
            X509v3 Authority Key Identifier:
                keyid:0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3138392e32382e3136302e302f32302d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d6:0d:18:e0:80:50:af:9b:36:2f:6f:16:69:01:88:54:51:73:
         16:4e:cc:e8:4c:5b:56:19:63:1b:2b:aa:31:83:68:ed:06:26:
         29:9d:9c:19:dc:69:00:d7:29:ac:11:80:00:5a:76:d2:f7:5a:
         d0:75:d4:c8:79:ae:df:92:92:d5:9a:8a:bc:9a:a2:29:c7:c6:
         1a:05:d3:64:56:ef:21:c3:8d:1e:c0:a5:fb:33:1c:46:6e:b3:
         30:2a:86:1b:34:b3:13:b5:2b:af:25:5b:70:02:73:44:25:c5:
         90:6d:ae:aa:18:56:55:94:58:cd:3a:90:02:79:d5:0c:e6:ca:
         47:86:5d:bd:73:98:19:d0:d0:dd:38:3f:65:53:80:cd:b9:8f:
         e3:ca:75:12:8b:76:56:22:35:9c:67:be:f9:34:97:d0:7e:b8:
         af:69:f8:18:ab:9b:7d:b0:3d:2b:da:e2:c3:85:5a:b6:73:45:
         55:cb:dc:8d:49:51:4d:9d:7c:5a:e7:3d:df:8c:88:1e:ac:d2:
         c7:45:80:d3:d7:d8:26:1a:2d:6c:4a:9e:c6:2a:4e:0e:c6:0f:
         89:a3:c0:c8:00:19:7b:9a:2d:3f:97:56:e1:75:5a:00:f9:77:
         6a:82:11:ce:fa:1a:8a:be:14:43:c8:62:a8:52:78:02:67:5d:
         53:d1:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org