Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138372e34392e31362e302f32302d3234203d3e203238313339.roa
File:                     3138372e34392e31362e302f32302d3234203d3e203238313339.roa (raw, json)
Hash identifier:          Ys7T4whadCsRmIsG8k3sPjW6WPxrlYrNRJ0/M/cM9Eg=
Subject key identifier:   34:E0:9E:77:A7:EF:A9:BE:11:EC:24:6F:8B:46:A9:50:04:B3:61:25
Certificate issuer:       /CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
Certificate serial:       15639507FB2C888285430EE8107BA21002E9D8D6
Authority key identifier: 7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138372e34392e31362e302f32302d3234203d3e203238313339.roa
Signing time:             Tue 21 May 2024 01:37:56 +0000
ROA not before:           Tue 21 May 2024 01:32:56 +0000
ROA not after:            Tue 20 May 2025 01:37:56 +0000
asID:                     28139
IP address blocks:        187.49.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl
                          rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:63:95:07:fb:2c:88:82:85:43:0e:e8:10:7b:a2:10:02:e9:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDE5A1D4AEC36DA897FAB540829FFA15F101665
        Validity
            Not Before: May 21 01:32:56 2024 GMT
            Not After : May 20 01:37:56 2025 GMT
        Subject: CN=34E09E77A7EFA9BE11EC246F8B46A95004B36125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:3f:2c:19:ef:a8:9a:f4:08:2b:8f:43:7c:
                    3b:b7:24:27:2a:77:76:4c:1b:ca:5d:07:e1:ee:f2:
                    db:38:52:9a:13:25:18:81:d8:d5:77:64:b4:83:35:
                    25:90:6c:02:53:11:48:51:ea:73:16:44:84:05:29:
                    7b:14:2d:7d:d8:52:2a:e5:b2:2e:3e:32:69:6b:06:
                    28:bb:eb:80:13:dc:7a:92:57:67:38:bc:78:b6:b1:
                    f5:e0:fb:21:24:ee:04:e7:52:ac:16:92:38:e2:98:
                    0a:6e:4e:4a:51:2c:f7:f0:c6:66:41:a8:c3:b6:50:
                    2b:8f:1d:cb:f4:c1:36:1b:49:17:7f:23:6f:56:e1:
                    2a:b3:66:a2:23:19:5a:eb:a1:ec:53:ef:2e:f7:9e:
                    90:20:8b:91:88:4a:92:38:64:eb:7a:9c:08:71:71:
                    c7:aa:6a:93:37:9d:66:08:ee:08:a3:23:6b:2c:2e:
                    25:63:71:72:6c:fd:09:80:c2:58:39:09:99:e0:c5:
                    10:7a:7e:f1:a5:9a:39:e0:3a:8f:d0:77:4e:65:64:
                    e9:c1:27:94:32:ea:40:46:8f:7b:db:e5:8e:11:e0:
                    6a:5a:bc:52:e3:2c:38:af:4b:eb:be:95:be:a5:76:
                    29:d5:6a:7e:e9:2b:c8:54:11:e2:c1:df:64:68:f3:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E0:9E:77:A7:EF:A9:BE:11:EC:24:6F:8B:46:A9:50:04:B3:61:25
            X509v3 Authority Key Identifier:
                keyid:7E:DE:5A:1D:4A:EC:36:DA:89:7F:AB:54:08:29:FF:A1:5F:10:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EDE5A1D4AEC36DA897FAB540829FFA15F101665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/1/3138372e34392e31362e302f32302d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:7e:3b:2c:cd:8c:3b:19:a7:31:59:9b:13:d2:38:61:20:62:
         ab:cf:49:7f:47:9e:87:df:ae:cd:63:c8:c6:55:ab:97:3c:39:
         e3:d9:69:a1:b1:ba:c9:54:ad:6c:e8:98:4f:ea:43:37:6b:48:
         ac:10:28:d4:c0:41:63:e4:3a:25:b6:e1:c8:d8:72:30:37:80:
         e3:21:92:d2:4e:ba:79:17:f2:8d:76:79:28:b8:a3:cd:5e:b2:
         53:ed:ef:bd:aa:c4:b2:c5:cb:41:9d:0f:99:f1:76:68:b2:7b:
         90:72:5f:2f:1e:f0:4c:50:f1:44:fc:3a:67:7e:8b:98:f9:b2:
         47:b9:10:54:1a:79:1b:c4:cf:81:bc:e4:76:43:c1:8d:64:77:
         8a:f8:70:ad:61:ee:35:a5:11:a6:79:da:b6:d0:29:e0:d9:0e:
         d9:f2:76:2a:ed:f1:4d:d5:89:be:40:21:5f:e6:f4:99:a2:2f:
         bd:98:df:a6:db:1e:5e:7f:e2:f6:3e:3e:34:56:a3:80:44:8a:
         f3:61:58:61:2c:19:dc:09:0f:29:73:97:e2:e8:4c:45:68:52:
         61:18:73:83:ae:45:67:a7:c8:98:de:ca:68:eb:21:e1:4e:63:
         75:b0:b5:bb:aa:fd:ab:8e:75:87:3b:0a:0a:ea:f8:04:e5:68:
         26:c1:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org