Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232342e302f32302d3234203d3e203238323936.roa
File:                     3138372e3132312e3232342e302f32302d3234203d3e203238323936.roa (raw, json)
Hash identifier:          n1KvQpcpB/ByCTQ4kC2xCBry5wk2pxF4DY6H1mFZXew=
Subject key identifier:   53:FF:C3:54:9D:01:94:B0:7A:2A:B9:42:B6:11:D4:BB:CB:C5:78:D6
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       78E4D159729520AC920820A27AC295F56342362C
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232342e302f32302d3234203d3e203238323936.roa
Signing time:             Mon 18 Nov 2024 13:23:48 +0000
ROA not before:           Mon 18 Nov 2024 13:18:48 +0000
ROA not after:            Mon 17 Nov 2025 13:23:48 +0000
asID:                     28296
IP address blocks:        187.121.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e4:d1:59:72:95:20:ac:92:08:20:a2:7a:c2:95:f5:63:42:36:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Nov 18 13:18:48 2024 GMT
            Not After : Nov 17 13:23:48 2025 GMT
        Subject: CN=53FFC3549D0194B07A2AB942B611D4BBCBC578D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:79:12:00:20:cf:9b:e1:ad:00:6c:d3:44:
                    32:61:34:f7:4a:18:fe:01:72:a0:13:01:ad:91:a0:
                    71:57:7a:57:6d:78:d9:cb:f6:33:21:b3:c4:07:6f:
                    59:3e:50:20:d4:4b:a0:fc:a6:fa:9d:4b:5e:0a:d7:
                    93:3e:29:17:08:23:67:a5:90:1d:c7:14:16:66:da:
                    80:36:14:5b:44:fb:a8:27:f1:e8:60:28:f7:5a:6f:
                    c8:d8:e4:cb:c8:5a:87:74:5b:71:ba:85:c1:11:ef:
                    94:b4:dc:88:0f:63:8a:0c:a8:94:68:4e:44:b4:33:
                    47:f0:25:99:40:3a:48:66:54:9b:f4:82:d2:41:47:
                    4a:a2:75:23:88:91:0c:b9:e0:25:eb:cb:d4:1a:6a:
                    10:00:87:95:32:5b:05:80:71:e9:5f:f7:1c:2d:28:
                    70:ec:b7:fa:01:59:63:0e:cf:b5:8f:c0:db:e9:12:
                    0b:76:8b:42:cd:92:06:b3:b1:a3:80:4b:61:60:d3:
                    dc:9d:0d:28:76:b9:01:89:c1:47:dc:e8:4f:95:fc:
                    f7:53:44:9d:68:94:16:d1:e9:37:f1:06:86:17:cd:
                    cb:c3:58:bc:dc:ac:e4:98:9d:e9:10:71:d2:da:a6:
                    fd:9b:be:00:62:2f:43:72:5a:00:28:8c:90:64:95:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FF:C3:54:9D:01:94:B0:7A:2A:B9:42:B6:11:D4:BB:CB:C5:78:D6
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232342e302f32302d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:7f:b2:ff:af:d5:d1:13:1b:b4:12:e0:12:97:99:50:24:
         4e:6c:83:a8:69:a3:23:d9:a2:e4:72:7c:30:57:aa:d8:b8:32:
         7d:47:db:5e:30:b9:08:58:08:f6:56:ff:76:89:a4:9c:17:20:
         a6:58:4b:99:65:ef:6e:b2:80:81:76:24:e1:01:18:05:8f:15:
         c8:0d:8d:67:0d:26:ef:15:e2:5d:09:9d:3e:60:3d:78:45:28:
         da:79:44:44:18:83:7d:a3:3e:de:14:62:98:6b:fd:20:ea:77:
         ef:93:85:fe:1b:d1:87:e8:c9:14:38:9b:bc:10:d3:0e:a0:ae:
         76:63:f5:82:29:53:1e:de:cb:94:82:bb:b6:92:d3:34:71:3b:
         26:09:16:73:bb:bc:d0:93:2f:5d:a1:24:89:ed:a0:e3:e2:ba:
         20:6f:ab:fd:bb:22:9d:bd:99:4a:6e:6d:d0:95:2f:8e:47:f6:
         02:79:51:ba:0f:74:13:18:f5:47:08:ff:fd:66:ae:19:f2:7c:
         46:29:e8:03:25:bf:2c:d8:02:92:f6:5f:39:6e:5c:94:5f:37:
         8f:6b:44:21:b6:29:df:8e:51:08:69:2d:f1:e5:07:57:1b:75:
         0d:23:b3:e1:da:f5:38:fa:38:ef:3b:74:51:88:3b:4f:57:dc:
         ad:7c:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:11:15 2024 by rpki-client on console-fra.rpki-client.org