Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3135362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          9DNit2/Hy88tV94E5SOU90ZGp6sLsFJpzKHobJdmnGE=
Subject key identifier:   20:C5:3C:62:28:14:05:40:88:7D:F7:E9:A8:0F:98:69:7B:1B:70:96
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       32A0B44775F8EB2D0995D4490987D2960BEFF2A1
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 08 Jul 2024 19:43:04 +0000
ROA not before:           Mon 08 Jul 2024 19:38:04 +0000
ROA not after:            Mon 07 Jul 2025 19:43:04 +0000
asID:                     28349
IP address blocks:        189.51.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a0:b4:47:75:f8:eb:2d:09:95:d4:49:09:87:d2:96:0b:ef:f2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:04 2024 GMT
            Not After : Jul  7 19:43:04 2025 GMT
        Subject: CN=20C53C6228140540887DF7E9A80F98697B1B7096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:bc:c5:13:8c:1e:83:ba:ba:51:78:94:ce:
                    86:69:79:08:6c:50:61:0b:b4:4e:77:f8:39:4e:f1:
                    2c:ab:62:07:ef:ac:b0:03:f2:b0:bc:7e:66:e6:2a:
                    e2:16:b7:4d:b9:f9:2e:fc:97:bb:7f:c2:6c:44:d9:
                    9a:0a:55:ea:fe:78:7a:48:b0:15:0a:59:a5:f8:57:
                    66:56:a8:21:6b:1e:34:f7:74:87:5c:4f:b5:95:31:
                    da:f5:a1:58:e4:74:fc:09:62:b5:00:23:1f:8a:0c:
                    2c:ee:3e:31:56:ea:bc:a8:f0:45:47:75:e6:ca:99:
                    9c:80:6f:f3:b1:20:99:37:cb:77:8d:fd:90:86:68:
                    df:26:09:6b:9f:7c:ac:e3:a1:6e:63:6b:f5:ec:ef:
                    1a:98:bf:da:b2:35:e7:3e:fd:29:44:14:ae:5c:26:
                    19:8b:9c:0f:8f:76:ed:f3:47:0a:21:75:d1:4a:8c:
                    ed:bb:82:78:bd:f5:30:a5:7d:72:d6:48:1f:3a:0e:
                    e7:d7:d8:bb:c6:ee:58:12:b7:6c:a3:8c:4e:97:39:
                    ee:c5:1c:40:e0:9a:52:f6:31:7b:1d:00:52:f7:a6:
                    c3:35:e0:df:e3:55:56:ef:b4:ec:e8:cb:3f:c7:05:
                    19:49:75:20:cb:1b:e9:6f:e8:97:03:02:22:76:a3:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:3C:62:28:14:05:40:88:7D:F7:E9:A8:0F:98:69:7B:1B:70:96
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:b5:89:95:3b:c9:ba:dc:08:60:cd:47:d4:c0:fc:94:06:21:
         b0:19:14:67:cf:07:13:ad:f8:ae:85:a6:d5:95:87:60:62:39:
         0c:d2:77:31:4c:98:52:2b:de:18:96:c3:59:db:a3:0e:05:41:
         b8:b7:9e:bd:cc:45:17:24:b2:4f:07:f3:5a:4b:6c:87:4e:65:
         85:3f:26:3c:94:59:6f:11:79:f2:71:5a:19:cf:e4:1d:92:f8:
         42:df:8b:88:3d:3b:97:2b:b5:50:90:9a:b7:10:9d:70:0e:d7:
         b0:51:98:ee:10:9e:f3:10:4d:48:cc:80:84:ee:e7:0a:c9:5a:
         f0:0b:81:d6:7f:ca:99:6b:1c:89:cf:9b:36:59:c6:12:ef:dd:
         80:15:7d:31:66:b3:8e:3c:37:94:a2:f4:4f:4f:b0:8e:88:34:
         4e:6c:22:4f:50:25:db:59:d5:d4:fa:7d:fe:a8:eb:4c:2f:75:
         7d:c5:04:3d:54:4d:15:78:32:14:c3:2c:63:83:4e:63:75:9b:
         7c:23:07:13:cc:ef:8d:7c:94:cc:c8:f8:cd:07:58:73:bb:0d:
         d5:04:ca:3f:60:2e:75:3d:05:fc:5d:14:0d:c5:0b:7a:ac:8d:
         0d:be:31:41:28:2d:77:18:b9:b8:32:c6:91:3e:be:88:d4:93:
         c2:ea:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org