Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e3131332e3230302e302f32312d3234203d3e20323637343834.roa
File:                     3138392e3131332e3230302e302f32312d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          JDFDBbBhjBo0eKLFFV+aazfavQ1bHDOjH1kNqO/tF40=
Subject key identifier:   8B:29:96:A1:7D:4B:80:F0:E7:90:62:AB:60:A1:7C:AA:F3:A6:90:3C
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       29D141711DDD579A248DB3F43233ED706992EE9C
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e3131332e3230302e302f32312d3234203d3e20323637343834.roa
Signing time:             Mon 08 Jul 2024 19:43:05 +0000
ROA not before:           Mon 08 Jul 2024 19:38:05 +0000
ROA not after:            Mon 07 Jul 2025 19:43:05 +0000
asID:                     267484
IP address blocks:        189.113.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d1:41:71:1d:dd:57:9a:24:8d:b3:f4:32:33:ed:70:69:92:ee:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:05 2024 GMT
            Not After : Jul  7 19:43:05 2025 GMT
        Subject: CN=8B2996A17D4B80F0E79062AB60A17CAAF3A6903C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:c3:16:af:a9:70:32:a4:86:e9:fe:85:aa:
                    ac:8c:cb:e4:b4:63:45:ab:0b:5d:5e:ef:24:72:f0:
                    76:8e:77:79:ac:29:11:36:40:af:c4:89:21:52:a5:
                    8e:de:43:57:62:c8:66:93:21:d3:0f:03:3d:10:cc:
                    be:88:4c:8c:c7:b4:42:4e:f9:47:bc:08:0f:83:ec:
                    13:d3:1b:9b:e5:fa:b6:0e:7d:da:21:d6:c2:0b:fd:
                    c1:01:7d:d2:a6:a7:0f:a9:21:4b:49:00:f7:93:8c:
                    bf:f8:8c:d7:d1:ac:f1:bc:78:1f:97:14:37:b6:99:
                    eb:9b:7c:b3:14:64:99:8a:a2:27:ec:c0:16:67:01:
                    ba:af:9d:4c:57:a6:fa:1e:f2:ec:da:e2:8c:3a:00:
                    df:6b:94:31:e1:4b:c2:45:a9:76:b0:19:82:24:ee:
                    e6:22:d1:77:0a:64:1a:f4:2a:d1:ee:2e:f0:14:e3:
                    99:25:08:94:b0:de:03:0d:e9:74:a8:1e:c2:5d:19:
                    50:8f:aa:f9:86:02:e0:4c:69:f2:c8:67:72:1e:5c:
                    68:26:56:e2:c7:77:b9:90:0a:fd:b9:f1:98:a8:a5:
                    fd:c1:7d:28:64:85:75:6e:c7:eb:c1:b1:09:a7:48:
                    87:be:de:3d:ae:e7:4d:21:04:74:8d:65:51:59:a0:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:96:A1:7D:4B:80:F0:E7:90:62:AB:60:A1:7C:AA:F3:A6:90:3C
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e3131332e3230302e302f32312d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:55:bc:33:e7:7d:81:08:9e:a2:b7:29:ec:6c:41:2b:56:43:
         36:72:e6:dd:dd:8b:60:cb:17:72:fb:97:4a:49:96:13:26:03:
         7c:c3:eb:ef:70:f5:74:05:43:3b:a6:76:36:ed:d9:d2:2b:23:
         d0:ea:e7:0e:e9:b2:42:7b:83:3e:00:6e:a4:a0:fb:b8:c5:40:
         4d:ad:ef:0e:cc:e9:45:1e:90:c8:e2:aa:65:5f:77:ed:66:e5:
         d0:93:be:ec:fb:1d:88:d5:a2:fe:2d:b8:0b:e5:bb:43:1b:e3:
         e5:75:9b:47:41:6b:7a:8c:ef:79:83:46:16:9b:59:cc:4d:71:
         50:cd:7e:9f:23:bf:64:61:09:da:91:5c:25:38:1f:a3:37:81:
         aa:d2:10:43:98:de:03:b0:13:50:79:33:b7:f8:3b:0b:c3:42:
         6b:2b:f0:b0:0b:50:99:53:3e:d3:42:ae:0c:20:f2:c6:eb:5a:
         12:36:4f:c9:55:49:9e:52:36:f5:58:70:c7:62:10:a3:20:2a:
         75:02:9d:d4:bf:c9:7c:8f:47:b8:9b:c5:8d:2c:e5:d8:ed:7f:
         2d:6d:44:27:a0:92:c0:f4:6e:11:b7:83:0d:19:0e:17:4d:97:
         58:73:b0:07:90:9b:98:5f:e0:f7:1e:a3:13:d1:4c:9b:16:7b:
         8a:3c:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org