Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138392e37362e39362e302f31392d3234203d3e203131373532.roa
File:                     3138392e37362e39362e302f31392d3234203d3e203131373532.roa (raw, json)
Hash identifier:          CN1Gv/un5+3BFoJcoYov1NZNSNK6yoKz3hStJ/ESw78=
Subject key identifier:   61:98:DA:D3:85:71:D9:7E:04:E5:7B:27:3C:B7:45:F6:50:81:DE:7C
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       2CBB5F1147C7A5B2C55D7873962C2DF2237C262A
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138392e37362e39362e302f31392d3234203d3e203131373532.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     11752
IP address blocks:        189.76.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bb:5f:11:47:c7:a5:b2:c5:5d:78:73:96:2c:2d:f2:23:7c:26:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:22:46:47:4c:d0:15:f6:a1:e2:60:db:b0:
                    88:a2:2e:73:ed:92:5c:83:41:e7:43:af:c8:88:6d:
                    9a:59:5d:9c:06:aa:38:05:f7:b4:87:cd:51:6b:29:
                    57:35:53:cf:ee:93:9e:b1:8f:ed:e4:eb:51:ba:8c:
                    03:34:ec:da:6b:b0:94:68:cd:9b:6b:04:06:e6:9d:
                    2c:76:7c:2b:df:3a:72:cb:48:a8:74:35:22:24:25:
                    c9:4e:f8:cc:d0:87:f9:a9:dd:49:83:50:77:7d:03:
                    bf:4e:9e:ad:5b:1c:45:7c:74:9e:e7:30:72:71:52:
                    12:c0:cc:a0:5d:bc:d3:ba:85:ea:9f:a6:5b:ce:14:
                    0b:84:f3:2c:e4:e8:d6:f8:4f:8e:61:62:c2:4f:ce:
                    32:0f:05:1c:ec:a6:98:65:5c:3f:4b:e5:36:9c:87:
                    2b:4a:1f:e2:c9:4d:bb:cd:d5:11:af:62:5c:da:88:
                    7a:47:19:2c:37:51:25:74:d8:18:7e:5a:db:28:40:
                    3e:76:a0:a5:6d:76:6a:29:0c:9d:05:8a:6f:a4:f6:
                    9e:7c:e5:12:57:f8:f4:c5:c6:df:60:86:db:e4:b5:
                    b7:a9:64:9f:af:a4:e5:6d:84:45:b2:67:e3:5a:0d:
                    0b:b3:a6:00:6e:b4:f8:86:85:86:ae:89:f4:79:7f:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:DA:D3:85:71:D9:7E:04:E5:7B:27:3C:B7:45:F6:50:81:DE:7C
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138392e37362e39362e302f31392d3234203d3e203131373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:b2:1d:e7:9a:b2:cf:2a:fd:2e:25:d5:89:9c:0b:f5:90:
         5c:40:44:af:42:2b:5d:f2:8a:89:9e:ef:d4:20:ed:6c:4c:c6:
         67:8d:f4:0f:5d:0e:07:59:69:a9:d2:5c:23:8b:e0:35:63:c3:
         17:8b:b7:2e:f1:4a:32:0f:15:df:7b:71:2d:45:66:02:cb:e5:
         40:0a:ad:c2:ec:b4:da:db:e2:08:ed:ea:c0:96:aa:40:fe:55:
         75:06:ad:6f:2c:8b:1d:fc:38:9e:a0:fd:2d:b4:76:55:c8:de:
         ca:41:36:9c:7c:8d:98:25:ad:d3:81:fd:43:c3:a2:7e:68:fd:
         75:02:a4:85:3d:6e:74:5f:4a:79:9e:0f:e8:e1:26:22:8a:0b:
         dd:36:d5:e6:30:fc:7b:9e:8c:8d:50:1c:47:d4:15:bf:7f:43:
         33:cb:b2:af:55:2b:53:75:f7:6e:31:8f:74:d1:6d:16:dc:3d:
         cf:bc:37:15:b2:0d:5f:86:5c:e2:1f:fb:93:e8:a8:a8:ed:f3:
         56:6c:c4:35:a1:d3:bf:4e:1a:ec:db:b8:ee:92:0a:31:f2:60:
         67:7a:04:53:f5:17:84:51:86:cf:81:d5:cb:a8:36:22:39:8e:
         3b:cd:62:78:e6:88:7c:43:7f:53:e5:ca:cd:39:41:00:67:df:
         93:a6:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:48 2024 by rpki-client on console-ams.rpki-client.org