Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230382e302f32302d3234203d3e203238323936.roa
File:                     3138392e33362e3230382e302f32302d3234203d3e203238323936.roa (raw, json)
Hash identifier:          U/+vfT7B8WJxJ1yON/RE7S3f+QeNpU4F4qDxeTL+QCU=
Subject key identifier:   FF:77:E1:71:68:76:16:3B:C2:80:90:17:B7:85:C3:87:B8:17:E2:92
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       29D4D079DC944BA7C71CF3AD41C714264E56BD66
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230382e302f32302d3234203d3e203238323936.roa
Signing time:             Mon 18 Nov 2024 13:24:41 +0000
ROA not before:           Mon 18 Nov 2024 13:19:41 +0000
ROA not after:            Mon 17 Nov 2025 13:24:41 +0000
asID:                     28296
IP address blocks:        189.36.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d4:d0:79:dc:94:4b:a7:c7:1c:f3:ad:41:c7:14:26:4e:56:bd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Nov 18 13:19:41 2024 GMT
            Not After : Nov 17 13:24:41 2025 GMT
        Subject: CN=FF77E1716876163BC2809017B785C387B817E292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:f2:02:0b:44:28:df:ff:b0:2d:c0:d3:99:
                    fc:21:bb:4d:96:ed:ba:1d:8f:a2:c3:e3:3a:52:02:
                    fb:9e:b3:9a:29:84:e3:88:6a:47:20:26:79:21:b9:
                    06:28:a8:48:1c:90:ad:10:9a:53:e5:1a:7d:c8:7f:
                    ea:ae:17:f0:ca:9c:f6:8b:fc:51:c3:fc:f5:e6:b5:
                    84:fe:51:08:35:0c:b1:16:7f:98:09:7f:83:96:be:
                    57:e4:2c:f0:72:2d:07:ca:6b:5d:be:0b:75:e8:e5:
                    83:ee:6e:9a:98:91:e8:d9:d1:6f:15:fc:2b:92:95:
                    ba:7c:0a:07:f6:00:69:7f:7e:c6:34:d5:a9:03:83:
                    5f:3c:49:1b:a6:22:0e:bd:d3:86:72:8d:99:29:5a:
                    69:23:7c:f7:7c:2a:46:02:5b:5f:ef:5a:e4:78:ff:
                    2f:03:9a:50:f1:80:8f:c0:b3:1d:43:9c:72:29:a6:
                    4a:e4:ce:f8:4b:91:21:4e:c2:72:fd:3a:08:13:f2:
                    f6:4c:f1:0e:3d:e8:c3:91:b9:cd:5c:86:a4:32:c9:
                    36:5a:e0:9b:73:ec:84:ef:ae:0b:17:ee:a3:3c:dc:
                    a4:3f:3e:57:90:d8:5d:09:10:d8:0e:bb:7d:4d:25:
                    42:3d:08:40:d3:20:9d:36:20:8e:7e:5a:d5:ef:75:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:E1:71:68:76:16:3B:C2:80:90:17:B7:85:C3:87:B8:17:E2:92
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3230382e302f32302d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:58:44:9b:a4:8a:2c:74:b7:a9:89:76:93:b3:12:7f:9b:69:
         c3:37:e9:69:a2:ba:50:7b:ba:8d:d6:52:88:ef:6e:80:d7:c5:
         37:ef:f3:50:64:e0:c3:fc:7e:24:b3:d4:af:af:8d:de:a6:28:
         23:dd:22:90:a1:72:ad:de:2a:ee:52:49:97:48:81:7b:b9:2c:
         2d:20:7b:21:e0:6d:5e:bb:11:d4:c7:8a:df:3b:57:37:42:2e:
         50:e0:26:a1:49:31:34:b1:92:ac:9a:53:1f:7c:3f:2e:3d:a6:
         d0:de:dd:df:7e:92:12:6c:4c:af:99:6a:b1:2e:d1:e7:f9:13:
         f0:2c:84:24:50:a5:df:10:0f:64:0f:78:fc:3a:a4:ca:0f:32:
         44:9d:df:9d:06:71:c4:c1:6b:8c:82:65:3d:28:9e:31:75:0b:
         5b:40:ca:02:5e:93:03:c8:03:6d:cc:52:e6:34:2d:6a:de:27:
         a1:21:7a:8b:c4:bb:47:dc:f8:32:fe:0e:21:83:7c:12:b9:71:
         13:ba:96:9c:a7:c8:6c:b0:17:06:36:9b:16:ce:48:e1:88:c0:
         f5:3a:ff:e2:95:fd:92:67:74:e5:98:b9:1d:69:2c:28:53:6b:
         a7:a3:31:fe:28:eb:df:95:7c:57:24:81:ca:2c:20:7e:c7:86:
         c6:57:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:37:21 2024 by rpki-client on console-ams.rpki-client.org