Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa (raw, json)
Hash identifier:          3IoTLhYodDZ2iwrB0TqBRm1Z8xJhWmNz19oRIng2hPc=
Subject key identifier:   92:AC:0B:8C:66:92:0E:A2:43:FD:AB:69:A6:7E:43:20:5D:42:28:5B
Certificate issuer:       /CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
Certificate serial:       2A4B158F3587FB3B98DA1B7C6D970F5C8282EDF3
Authority key identifier: 73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa
Signing time:             Thu 04 Apr 2024 09:06:30 +0000
ROA not before:           Thu 04 Apr 2024 09:01:30 +0000
ROA not after:            Thu 03 Apr 2025 09:06:30 +0000
asID:                     272753
IP address blocks:        187.109.112.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:15:8f:35:87:fb:3b:98:da:1b:7c:6d:97:0f:5c:82:82:ed:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
        Validity
            Not Before: Apr  4 09:01:30 2024 GMT
            Not After : Apr  3 09:06:30 2025 GMT
        Subject: CN=92AC0B8C66920EA243FDAB69A67E43205D42285B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:a3:8f:f2:f9:27:06:cd:7b:2d:90:e5:24:
                    26:77:e2:70:b4:8f:5f:58:32:8b:42:ea:76:4c:be:
                    32:9f:eb:be:2c:f3:66:01:e7:b1:4e:9b:16:28:05:
                    b4:5a:a9:6f:3f:21:c0:80:7a:d3:63:a9:14:5c:a4:
                    b0:73:1e:99:4a:50:c9:af:0e:04:7e:3b:14:81:e4:
                    11:71:16:a9:72:6e:43:0f:6f:a7:87:97:1e:01:9d:
                    5b:82:03:86:7a:b7:b2:48:ae:f1:92:03:12:65:63:
                    d3:b1:c1:7e:61:72:63:d3:8b:ce:f5:73:73:b3:17:
                    3b:e0:24:e7:e1:bd:0d:64:12:c8:aa:04:58:b3:9f:
                    1e:67:1a:50:6a:2c:c4:41:54:4c:ec:b1:ea:ce:02:
                    a6:91:f4:ed:cd:ad:2f:eb:1e:e2:c4:3a:b4:28:5d:
                    a6:7c:b9:5f:13:48:e3:22:1f:7c:8a:b4:2b:cf:5c:
                    f7:be:4f:bb:f0:6d:81:d4:05:0d:1a:b7:1b:c9:27:
                    f0:1e:28:f3:2f:bf:a1:77:b4:ce:1a:8c:2e:0b:79:
                    97:3d:c3:95:d1:d0:7e:d3:d0:5d:94:a4:89:80:95:
                    c1:cc:4f:cf:32:82:2f:60:35:45:0b:95:34:6b:9e:
                    8e:66:51:f2:17:21:b7:68:7d:cb:e9:7b:13:19:54:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AC:0B:8C:66:92:0E:A2:43:FD:AB:69:A6:7E:43:20:5D:42:28:5B
            X509v3 Authority Key Identifier:
                keyid:73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/3138372e3130392e3131322e302f32332d3234203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:da:fc:61:83:36:90:d4:41:83:94:42:f0:11:1e:37:ae:ba:
         d6:2e:f9:bc:7e:cf:81:30:89:a8:4f:eb:5f:da:49:c2:1a:33:
         31:c4:6f:9f:4b:a3:25:1b:85:25:af:7b:b6:dc:1e:92:69:71:
         4d:9e:3b:0a:5b:fb:ca:85:a9:72:12:cb:57:ff:a3:ea:ff:74:
         19:41:55:c4:c3:dc:d5:1a:b1:35:ad:28:e9:d2:72:1a:7b:da:
         85:40:4f:55:18:3e:a4:46:22:90:0b:38:fc:9a:dc:c3:d0:f2:
         d8:b7:97:45:97:39:6b:0e:3a:93:01:62:cc:24:e9:5c:c7:42:
         a5:1d:da:f9:c7:65:10:7e:5f:e0:14:35:6e:d6:e2:2c:c0:a8:
         e6:70:14:4b:91:d4:6c:8e:87:02:dd:af:de:3a:64:8a:d4:84:
         b5:7f:d6:32:9d:18:2d:1a:a9:73:be:1d:17:b0:da:ee:7c:9d:
         01:4a:d7:5d:69:4a:88:ff:03:a7:fb:61:0a:16:d9:d4:01:f5:
         6b:0c:cc:55:35:4c:4c:ae:6d:4b:86:ba:b8:c8:d3:3f:cd:4a:
         86:e7:83:f2:59:a6:12:91:1b:64:ed:5b:a4:fe:66:96:88:24:
         70:ef:01:81:f4:6c:e7:78:86:ba:b8:36:02:12:56:89:12:8a:
         3b:94:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org