Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa
File:                     3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa (raw, json)
Hash identifier:          Yg1i+J+gsbw+EXxmTjjVwwAIJLUuF4YlFjH2qPKXZPA=
Subject key identifier:   A7:7C:F2:3B:44:A7:28:14:78:A5:AE:21:8B:91:EF:84:8A:A4:1B:C3
Certificate issuer:       /CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
Certificate serial:       3B76DD9FC050E3EB328B5D24696C053F1C9F2C63
Authority key identifier: B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa
Signing time:             Wed 03 Apr 2024 18:31:41 +0000
ROA not before:           Wed 03 Apr 2024 18:26:41 +0000
ROA not after:            Wed 02 Apr 2025 18:31:41 +0000
asID:                     270918
IP address blocks:        187.121.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl
                          rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:76:dd:9f:c0:50:e3:eb:32:8b:5d:24:69:6c:05:3f:1c:9f:2c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
        Validity
            Not Before: Apr  3 18:26:41 2024 GMT
            Not After : Apr  2 18:31:41 2025 GMT
        Subject: CN=A77CF23B44A7281478A5AE218B91EF848AA41BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:a0:82:67:d9:cd:dc:86:94:99:45:95:ee:
                    d3:d0:a5:04:90:c1:34:14:dd:fe:6d:16:94:ca:e4:
                    34:f1:91:d0:8f:37:71:c4:9b:55:fc:89:cb:02:48:
                    82:b6:e7:80:17:48:79:2c:f8:f4:c7:3d:cf:51:16:
                    17:78:a0:e7:0e:eb:ff:cd:ae:b8:7f:8b:b9:04:06:
                    6d:c7:3c:55:7a:ac:f4:aa:2b:e8:95:bb:10:bb:1e:
                    ea:86:f6:64:85:e4:3d:af:98:f0:f5:54:e4:4c:d0:
                    55:3f:56:3f:36:42:2a:9f:8d:1c:8a:4d:55:ca:17:
                    0f:06:51:5f:32:a9:1d:b5:8a:72:42:64:3b:bb:fb:
                    14:89:16:1d:72:eb:d4:aa:46:b6:e6:6d:a7:f2:4c:
                    d8:74:99:52:02:bf:bf:6f:8b:f1:45:63:72:94:ca:
                    55:65:1d:fa:ef:8b:54:c4:0b:8c:78:2d:12:61:2f:
                    98:23:3c:48:3e:35:0d:6b:5c:8a:0e:75:41:4d:f4:
                    a4:60:d7:a2:f9:c3:3c:44:05:34:68:ba:77:65:56:
                    33:c6:b4:5b:02:f7:3a:58:15:28:16:8e:1a:3e:9d:
                    b4:d8:3a:02:45:b6:c7:36:fc:ca:c9:1b:bc:b3:86:
                    c0:02:48:46:c2:6d:e1:f6:3a:56:48:f3:5a:58:db:
                    d5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7C:F2:3B:44:A7:28:14:78:A5:AE:21:8B:91:EF:84:8A:A4:1B:C3
            X509v3 Authority Key Identifier:
                keyid:B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/3138372e3132312e3135372e302f32342d3234203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:3c:b3:3a:a3:d4:b7:c0:19:40:6b:ec:80:45:52:f6:f8:e0:
         33:31:b0:4f:5f:4d:d6:dd:0d:ba:b6:9d:5a:aa:51:0b:ed:a6:
         70:0e:f4:fa:14:6a:c6:10:ea:a0:85:07:52:7c:ac:1d:6e:b0:
         78:07:df:5a:d7:42:a5:b9:62:12:23:fe:bc:9e:55:f0:5f:2a:
         37:03:fe:ed:2c:85:05:fc:db:a6:18:78:7b:c7:a0:e4:73:65:
         6a:b0:67:f4:e7:b5:1f:70:ad:ca:4f:78:10:78:3b:52:79:b6:
         23:1b:ea:ad:f4:6a:d9:ba:01:a7:b8:a0:7a:c8:54:e4:bd:f7:
         a3:25:05:0c:f4:d2:28:f0:85:04:d1:74:f2:94:06:27:91:2a:
         f4:82:dd:93:56:47:ab:91:e6:55:ee:ed:db:93:8e:12:c4:20:
         2a:0e:ff:e1:73:62:1d:7c:a1:a0:ea:be:69:d1:f8:f4:10:31:
         d4:e6:41:d7:95:ae:3e:7d:05:5f:f8:50:58:08:e2:d9:83:27:
         ca:72:ff:0e:7a:6a:89:f9:95:4c:f6:0b:8f:4e:44:96:e3:a1:
         80:6e:d7:cb:bc:f8:ef:ec:2e:9b:d8:86:a7:ca:0c:40:e5:13:
         17:92:a1:04:e3:ca:94:54:8e:5f:03:2c:86:22:e9:ad:23:79:
         cb:aa:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org