Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa
File:                     3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          Sc2uBPlY1TAXzzuPXZjZcMAiQ25zuVQ77Y0g4/HZ8IE=
Subject key identifier:   91:A4:56:3B:EE:B9:29:9F:35:8C:9A:13:D3:C6:45:1D:E9:23:00:C3
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       6C6C0FD37567F89AEAA2817E9D1EAA001E1BC71A
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa
Signing time:             Mon 08 Jul 2024 19:43:03 +0000
ROA not before:           Mon 08 Jul 2024 19:38:03 +0000
ROA not after:            Mon 07 Jul 2025 19:43:03 +0000
asID:                     267484
IP address blocks:        189.126.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6c:0f:d3:75:67:f8:9a:ea:a2:81:7e:9d:1e:aa:00:1e:1b:c7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:03 2024 GMT
            Not After : Jul  7 19:43:03 2025 GMT
        Subject: CN=91A4563BEEB9299F358C9A13D3C6451DE92300C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:34:cc:67:19:89:e8:ab:3c:60:8f:ca:e4:
                    9a:ad:67:33:44:73:48:a2:6a:c0:24:f6:20:a2:ef:
                    da:ba:27:48:9e:a9:41:93:ae:93:69:1e:fb:b7:84:
                    10:14:f9:50:61:64:69:ff:db:01:70:b4:dc:7d:95:
                    86:70:c4:4b:d1:f6:40:65:cb:84:60:8a:9d:56:e6:
                    5b:cd:3c:41:0b:26:aa:4c:1c:02:0d:09:64:c1:00:
                    1b:e4:74:03:21:da:ef:34:8c:15:5d:5d:23:68:da:
                    08:a1:0c:03:7a:a8:63:14:37:75:d5:78:dc:d9:6a:
                    3d:2e:dd:1b:3a:f3:98:03:03:62:f7:66:7d:2f:9c:
                    d6:b3:cc:d7:5f:2d:0a:c3:9a:1d:25:d7:a0:b6:27:
                    52:f2:32:22:fd:b7:e3:b8:8d:fc:a0:7d:03:36:92:
                    96:81:40:cb:69:6b:00:3a:a3:d8:f5:71:cf:d8:af:
                    c8:12:28:81:f0:61:bf:be:6a:f0:57:bb:a3:ba:2d:
                    e3:c1:b7:90:8d:51:48:99:7d:c0:8e:53:bf:b9:d2:
                    0b:f2:20:8e:1d:46:7c:f6:72:43:4b:fe:66:8d:8f:
                    83:4c:ea:74:07:04:85:82:56:1a:0a:10:3b:37:ce:
                    83:4d:07:21:35:0a:c1:fe:44:42:f2:08:44:40:96:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:56:3B:EE:B9:29:9F:35:8C:9A:13:D3:C6:45:1D:E9:23:00:C3
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e3132362e3136302e302f31392d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:a9:5f:77:25:7e:89:35:6f:9d:e0:c9:ad:f9:37:c9:7f:
         b7:30:04:43:58:3b:62:22:d4:a4:53:86:19:21:fe:6e:36:85:
         71:58:52:35:66:79:ba:01:42:e1:35:43:c3:86:05:99:52:cf:
         8e:e8:29:71:cf:a5:8a:92:d9:d8:7d:12:0e:d7:38:b5:49:2f:
         08:2a:55:e5:b5:18:2f:d7:38:4e:66:ec:e6:f1:77:88:d1:1c:
         ea:bc:e7:70:7a:4e:12:b2:1f:47:a5:92:40:b3:2a:f0:6b:cb:
         4c:c7:39:d1:f3:a6:bb:b5:b0:67:2c:d7:a0:a3:b0:cb:9a:f0:
         b9:f1:28:25:9f:ee:05:a8:d4:ef:f0:d6:7f:04:bc:39:fa:04:
         6b:df:71:5f:37:ed:d9:fc:9b:a9:90:4b:6e:8c:a7:e6:b5:2d:
         92:af:65:fe:be:0b:84:56:ed:c1:b0:97:81:c2:e4:be:3e:1c:
         b3:5a:12:c0:e3:f5:2f:69:40:ee:fd:6a:98:4e:20:a0:58:fa:
         d3:25:99:a3:db:26:9b:11:f5:4c:68:5a:fd:11:50:b3:e6:52:
         65:cc:b0:31:0b:1e:cd:52:d0:3c:b6:77:52:ef:c8:b4:77:0c:
         f4:83:0b:c3:a5:2f:bc:4d:1b:07:13:b1:b9:9b:1c:0c:c3:6b:
         63:68:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org