Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa
File:                     3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          bgUqJvH4PE+niD7Q/BSTHsIMiN/DifqO5eDqDwey880=
Subject key identifier:   A1:CB:EB:46:97:20:3E:8C:14:65:EB:07:F9:B0:90:F5:E0:1E:35:8B
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       7F112385AF8ABB5292E62BEE8C7F7225E03A9AFA
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa
Signing time:             Mon 08 Jul 2024 19:43:08 +0000
ROA not before:           Mon 08 Jul 2024 19:38:08 +0000
ROA not after:            Mon 07 Jul 2025 19:43:08 +0000
asID:                     267484
IP address blocks:        189.51.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:23:85:af:8a:bb:52:92:e6:2b:ee:8c:7f:72:25:e0:3a:9a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:08 2024 GMT
            Not After : Jul  7 19:43:08 2025 GMT
        Subject: CN=A1CBEB4697203E8C1465EB07F9B090F5E01E358B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:cf:e7:19:7e:f2:c4:94:11:7d:ef:3f:a8:
                    23:ed:e7:f5:80:57:63:b2:58:f2:2b:f2:21:87:57:
                    47:aa:e6:c3:f3:47:e4:33:af:97:c5:f2:80:77:a7:
                    5b:49:8b:4b:4b:6b:d6:a8:02:6a:b6:0f:f8:a6:73:
                    2f:6d:95:f6:96:0a:1a:09:8f:f8:7d:a9:b6:ac:dc:
                    0f:ce:fb:3c:17:0c:c3:74:71:b2:3f:df:b5:21:bd:
                    f1:f6:21:62:26:9a:f6:60:56:8e:cf:f9:07:5a:89:
                    80:d9:7c:5a:8d:2e:c8:87:25:5e:9e:6c:36:ab:82:
                    f9:0e:e2:98:45:4d:1f:95:ed:82:0a:40:44:06:a1:
                    70:61:95:48:24:66:8d:a6:0a:d8:cc:16:62:cc:78:
                    3e:54:fb:6c:8e:3e:eb:21:83:82:81:3f:8f:63:3b:
                    77:a9:34:dc:22:f2:9a:25:02:62:cd:54:93:53:2e:
                    6f:27:7d:5b:ae:3b:b8:00:c8:27:cb:0b:63:f0:81:
                    5f:7d:6e:b1:62:16:c1:81:e2:9c:0a:12:87:25:91:
                    1b:49:83:aa:3d:21:af:cf:dc:1e:95:47:e1:6f:f3:
                    dd:af:b1:b5:99:a8:1b:0e:79:3a:16:9b:06:88:7b:
                    85:29:07:22:7a:04:b2:ff:ea:d7:da:7e:7a:13:e7:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CB:EB:46:97:20:3E:8C:14:65:EB:07:F9:B0:90:F5:E0:1E:35:8B
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e35312e3132382e302f31392d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:0e:df:13:6d:a1:34:aa:15:ad:c8:cd:86:b9:c4:63:2d:a7:
         2d:1d:84:c2:bb:c7:2d:b3:0e:a9:1a:03:3f:74:b4:6d:38:8f:
         fe:c0:5a:be:a0:cd:c1:1a:50:ca:54:e6:dc:72:82:9d:d6:b6:
         2f:37:b2:b6:77:4d:72:9c:cf:89:88:63:96:1c:dc:22:20:20:
         eb:7a:cf:74:53:f0:45:2d:8a:28:1d:b9:b7:b3:12:8c:75:ee:
         8d:6c:33:ae:f0:2b:ac:89:66:7c:d3:51:d4:a8:25:9b:93:a4:
         f7:ce:83:35:58:f3:02:7f:91:bf:fd:83:8f:f2:67:ad:aa:6c:
         0c:84:49:5a:c3:55:44:d1:26:b3:1f:b1:3f:69:94:f3:85:64:
         81:0a:3f:de:c4:f6:62:25:6c:b0:f7:17:89:93:2b:67:d5:69:
         be:45:e5:60:bb:2f:84:4e:21:d3:4f:b2:9b:59:7f:c6:71:58:
         8b:d6:32:be:b0:19:8d:a9:6a:2e:6a:07:e6:3e:db:2f:a7:05:
         b3:a6:2f:5d:16:c7:6a:fd:4a:ee:c8:75:14:8e:a6:ed:6d:91:
         1c:f7:48:78:c9:52:cf:9f:71:bc:22:56:6d:92:4a:73:79:25:
         46:78:0a:aa:46:5c:05:97:71:72:17:1e:73:9f:7c:18:21:aa:
         80:dd:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org