Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231332e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3231332e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          b66rxLSKeSF93m4bFFt3BvWB6t5kfER9z6fteA8G3UE=
Subject key identifier:   F8:88:10:1B:FE:F0:10:85:5A:35:91:13:06:49:01:A4:77:4D:AF:E3
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       60A3E68833D26F0F01EEC911D62AA355CA532A19
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231332e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:56:13 +0000
ROA not before:           Sun 01 Dec 2024 22:51:13 +0000
ROA not after:            Sun 30 Nov 2025 22:56:13 +0000
asID:                     28296
IP address blocks:        189.36.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:e6:88:33:d2:6f:0f:01:ee:c9:11:d6:2a:a3:55:ca:53:2a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:51:13 2024 GMT
            Not After : Nov 30 22:56:13 2025 GMT
        Subject: CN=F888101BFEF010855A359113064901A4774DAFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:50:84:2b:ce:68:2f:32:89:fa:c5:9f:28:
                    ad:fb:9d:7d:8c:49:07:56:50:92:ed:0c:f2:bf:54:
                    eb:40:2b:d5:86:8a:a9:2a:5e:13:5b:e5:63:ef:a3:
                    e9:d3:8c:bd:e5:5c:88:36:82:16:6d:1a:29:c3:e4:
                    8c:0d:dd:86:3e:27:16:8b:33:46:56:b5:b8:47:7b:
                    b7:78:a9:e8:86:8a:b8:5e:4b:3b:f5:06:d8:9d:04:
                    90:5f:ec:f7:45:b8:5e:10:b1:15:a7:b0:b0:11:04:
                    cf:c0:79:dd:bc:56:f5:01:b6:d4:f6:a3:13:32:d2:
                    3c:9d:20:a0:e0:ce:b3:09:ff:25:39:d1:1c:0f:c3:
                    ad:7e:28:de:72:11:97:b0:7b:64:f1:15:65:15:f9:
                    de:93:ae:49:87:29:02:8b:b3:e5:9f:63:d7:76:0e:
                    a2:87:62:89:82:50:07:86:e8:27:91:7b:bc:f6:f2:
                    af:48:e1:77:31:51:bc:5e:70:75:7d:91:10:d3:af:
                    cb:5f:43:37:b8:f6:c7:1e:7d:a1:ff:79:e4:1e:b2:
                    da:b6:72:0a:e9:a2:3f:70:ba:90:79:2b:05:b1:7c:
                    a8:c6:02:8b:55:0d:52:2a:39:e6:31:ad:8e:ba:8d:
                    40:6a:b8:cb:48:12:3a:3b:40:87:92:ac:eb:e1:48:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:10:1B:FE:F0:10:85:5A:35:91:13:06:49:01:A4:77:4D:AF:E3
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231332e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4a:9c:0c:66:81:7b:17:5d:61:12:81:ad:0d:b2:bf:f8:eb:
         eb:6a:eb:b3:0b:72:0c:b0:5e:58:1f:07:35:1d:a9:ab:0c:eb:
         c3:e3:4b:2f:16:0c:67:de:3e:22:78:9a:dc:bf:b7:2b:02:5e:
         6d:82:dd:81:50:15:96:b2:9b:ed:f6:8f:53:58:db:f5:97:bd:
         ce:1c:53:c1:08:3a:91:6a:76:07:b7:f6:f1:43:02:50:02:83:
         f5:c0:8d:ba:b9:2c:3d:f1:87:c6:73:9d:ff:65:94:91:c1:d2:
         7c:ba:ad:d1:6d:fe:ef:48:3d:80:89:9a:7e:32:16:3b:5a:77:
         bf:3c:ca:ee:0f:a0:77:17:6a:aa:10:14:b7:74:f4:1b:18:ae:
         2a:65:e5:33:1c:2e:a8:5d:41:76:8f:21:79:a3:0c:25:e2:a5:
         99:41:32:35:85:e7:b1:11:9b:89:b2:8b:b0:ad:54:c4:90:52:
         e4:ea:ad:38:30:a9:63:da:5a:3c:81:47:2a:d4:08:28:53:7b:
         e6:cb:3b:75:1d:7a:64:be:46:49:5a:af:e8:5e:03:da:0a:a9:
         31:14:95:c5:0c:25:81:53:e5:07:9b:3c:b7:cf:1f:44:56:0f:
         ce:fd:4c:e1:43:0f:e2:db:07:ca:ea:13:7e:04:32:c8:51:f0:
         db:ed:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:35 2025 by rpki-client