Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3138392e35312e302e302f32302d3234203d3e203232313737.roa
File:                     3138392e35312e302e302f32302d3234203d3e203232313737.roa (raw, json)
Hash identifier:          p3jFFcGxWGwrvScqV30svubtXMIjufpuXPyIv36g2jc=
Subject key identifier:   1F:28:C7:27:B1:17:10:48:D2:FE:60:B5:02:FA:99:CB:BA:F8:21:23
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       6BB7CE49F763EE73BC4A5BA589305B25AEA28F2C
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3138392e35312e302e302f32302d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:22 +0000
ROA not before:           Thu 04 Apr 2024 03:25:22 +0000
ROA not after:            Thu 03 Apr 2025 03:30:22 +0000
asID:                     22177
IP address blocks:        189.51.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:ce:49:f7:63:ee:73:bc:4a:5b:a5:89:30:5b:25:ae:a2:8f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:22 2024 GMT
            Not After : Apr  3 03:30:22 2025 GMT
        Subject: CN=1F28C727B1171048D2FE60B502FA99CBBAF82123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:e3:74:e1:d7:68:94:be:2a:84:a8:a2:b7:
                    14:fb:f1:2b:07:42:53:90:20:5b:ad:77:cc:4d:f0:
                    6d:f6:4d:ab:f4:0a:0d:fb:36:60:da:04:d1:f7:96:
                    32:4f:68:30:5a:a3:21:e9:c9:fe:e7:d3:63:df:10:
                    1a:ee:40:70:77:1e:e3:a0:8c:a1:03:06:2a:07:9e:
                    e2:f4:87:94:bd:65:93:8f:bc:4d:3a:fe:9a:d2:27:
                    cd:bf:31:0a:dc:8a:8b:4e:f6:9d:3d:38:de:64:7c:
                    94:ca:e8:0f:5e:ac:e6:34:b6:d4:cb:bf:22:51:00:
                    75:2f:11:53:15:ef:ff:88:de:7c:88:8d:23:22:b9:
                    ec:39:73:c8:3d:95:fa:2b:67:ac:69:a6:ae:c9:12:
                    c9:08:4f:b4:02:db:fc:98:f6:9b:9d:f9:3b:be:12:
                    ba:34:ba:6f:e4:af:37:ac:ed:14:7b:c3:d8:4b:39:
                    07:12:a8:3a:5d:14:8b:04:fb:bd:88:26:f4:7a:11:
                    b6:ac:7a:3c:c4:e0:3e:b4:0b:a2:05:1a:29:15:c1:
                    75:d6:7a:08:0b:b7:be:91:01:fb:55:e0:9c:4c:2e:
                    48:53:71:9e:7f:67:36:fe:a4:6d:97:ce:51:5c:8a:
                    63:f3:fa:96:f3:62:8d:24:47:4a:fd:11:b9:9c:4b:
                    7f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:28:C7:27:B1:17:10:48:D2:FE:60:B5:02:FA:99:CB:BA:F8:21:23
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3138392e35312e302e302f32302d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:d8:d4:e2:fe:9d:ce:b4:fd:5e:d0:7e:25:3f:57:7c:83:e3:
         dc:87:5c:93:f9:72:26:61:a1:a0:6f:95:19:ab:05:94:5f:35:
         fc:e6:ee:e8:16:99:e1:b4:87:fa:f0:43:42:0b:48:7f:a1:a1:
         93:2e:e3:a3:ab:52:e2:a3:78:ad:dc:70:ed:56:40:93:67:83:
         de:a4:e9:8f:5c:35:47:4b:d1:37:78:71:4a:1e:6a:eb:63:83:
         c4:f6:9c:b4:28:71:1f:d2:fb:fd:95:0b:8f:73:2a:8d:82:27:
         e6:de:61:86:13:2a:36:a6:79:e5:49:a3:4a:0b:45:74:ed:9d:
         ac:60:36:e5:99:a4:e6:6b:e3:8e:38:4e:35:c8:64:99:f5:61:
         f0:6d:74:5a:3c:3e:8c:57:58:60:50:25:2f:48:28:d8:57:69:
         ec:b7:f9:d8:7b:22:b2:40:fc:e3:94:d9:34:9d:81:55:9f:75:
         99:76:09:fb:c3:c1:6a:d5:36:23:75:d6:37:c6:f4:7b:fe:a6:
         2e:d1:24:23:6a:c1:29:7b:a3:0f:ac:11:f6:f6:20:e0:a4:2d:
         18:83:e9:fd:ee:a1:6b:07:f0:b6:f7:63:db:d9:ae:6e:ad:61:
         cf:b7:6c:55:33:d1:ea:3c:fd:84:d3:b6:e8:25:ef:77:84:29:
         07:ea:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:24 2024 by rpki-client on console-fra.rpki-client.org