Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3138392e35302e38302e302f32302d3332203d3e203238333237.roa
File:                     3138392e35302e38302e302f32302d3332203d3e203238333237.roa (raw, json)
Hash identifier:          TvH3exT5c42bPXgBcpU9/UOH5PlQVG90khy0o/0uEjA=
Subject key identifier:   84:88:D8:F0:A9:9E:D0:45:1A:1F:1A:98:C3:49:A1:9C:DA:A6:34:A7
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       30C84DC74C354C3839063165F375C7EAD6A408A6
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3138392e35302e38302e302f32302d3332203d3e203238333237.roa
Signing time:             Mon 12 Aug 2024 21:55:30 +0000
ROA not before:           Mon 12 Aug 2024 21:50:30 +0000
ROA not after:            Mon 11 Aug 2025 21:55:30 +0000
asID:                     28327
IP address blocks:        189.50.80.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c8:4d:c7:4c:35:4c:38:39:06:31:65:f3:75:c7:ea:d6:a4:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Aug 12 21:50:30 2024 GMT
            Not After : Aug 11 21:55:30 2025 GMT
        Subject: CN=8488D8F0A99ED0451A1F1A98C349A19CDAA634A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:c0:59:5b:7e:5f:be:f7:8f:dc:b2:ac:f6:
                    fc:6a:6d:5f:1f:55:2c:6f:0d:81:8b:6e:31:64:bb:
                    5e:1e:12:cf:99:ea:58:76:bb:1b:47:51:08:3e:5f:
                    52:9a:ee:37:2b:da:01:4e:fd:2a:0f:df:19:7e:a0:
                    35:41:cd:83:7e:a0:c3:8b:78:42:18:b6:e5:8c:47:
                    b1:73:1b:cf:80:9e:e5:4f:33:13:43:52:a7:a7:4d:
                    35:a3:50:dd:36:e6:a6:5a:8f:cc:8d:ff:4d:eb:25:
                    37:22:78:06:2e:e4:5e:63:69:f3:55:52:f0:42:16:
                    a5:66:71:a0:51:31:08:5f:1e:e8:d4:9f:eb:c2:5c:
                    78:76:ad:eb:18:97:69:fc:c2:7c:09:6a:c3:b3:d1:
                    8d:10:7b:06:40:63:d4:3e:42:4a:73:c8:27:6c:cc:
                    da:c6:8d:d0:c8:9b:34:61:ac:af:63:25:f3:1a:83:
                    0d:dd:13:a7:35:35:18:22:a9:66:69:37:9d:92:47:
                    0a:d4:e4:bb:11:b7:b9:8f:e3:4b:62:b5:1d:fa:46:
                    00:1b:3d:ed:fa:42:7b:cd:bc:38:19:b0:d7:ce:11:
                    89:03:e4:1e:8f:dd:d4:13:eb:0d:2e:9b:ec:cf:9b:
                    34:35:32:f9:46:64:37:67:b8:85:fb:a6:f1:6d:7c:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:D8:F0:A9:9E:D0:45:1A:1F:1A:98:C3:49:A1:9C:DA:A6:34:A7
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/3138392e35302e38302e302f32302d3332203d3e203238333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:b1:95:23:34:0a:6a:de:83:05:9b:ee:c9:94:ad:49:3e:
         29:8d:1c:65:46:0f:8a:21:d4:14:72:63:62:57:ca:dd:47:2f:
         4e:3a:63:72:2d:9f:39:a4:85:1c:34:89:fc:2f:bf:8b:8d:a9:
         44:d4:20:e9:21:73:21:9f:a6:09:5a:98:24:b7:91:64:2a:4f:
         e7:b4:b5:81:6b:d1:f3:f9:7e:fb:69:c3:fa:57:fd:17:f9:32:
         5a:9e:79:6d:aa:60:91:5d:ba:9d:b8:6c:e5:1c:b6:05:c3:cf:
         d3:2f:25:d5:08:1e:a4:c3:cb:5c:7e:1c:6f:c0:be:ec:cf:f9:
         ee:5d:50:d3:b2:30:56:6c:8f:42:20:82:ec:f7:a2:b5:62:c1:
         46:fa:43:bf:e5:d2:97:b5:57:b3:54:c6:b3:1a:68:be:a6:98:
         36:f1:fa:a0:11:e1:b2:d6:1e:e4:c3:ac:f6:78:53:a9:1f:f9:
         f4:1b:5c:0c:3e:c8:29:62:f3:4a:c9:c4:4c:82:c0:c5:ca:e7:
         46:12:04:fd:5d:b7:d4:85:d7:07:db:18:06:c1:bc:76:3e:36:
         86:dc:b1:a4:cd:50:8f:67:96:55:a7:53:65:7d:a3:36:75:e0:
         13:96:6f:9f:e6:07:8a:84:63:29:0c:a7:c7:46:c4:e7:bf:a3:
         94:29:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org