Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231342e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3231342e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          5T9GKSfQ0l5r4vBo6HERUdkxPZv2gBn2YyuJ3WyDidE=
Subject key identifier:   D5:8D:35:C1:BF:93:BC:97:48:B8:4E:B9:F5:BF:5A:8C:5E:DE:14:CF
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       5DE3192B27B4815910DFC6970C86C84E612D0D0C
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231342e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:56:45 +0000
ROA not before:           Sun 01 Dec 2024 22:51:45 +0000
ROA not after:            Sun 30 Nov 2025 22:56:45 +0000
asID:                     28296
IP address blocks:        189.36.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:19:2b:27:b4:81:59:10:df:c6:97:0c:86:c8:4e:61:2d:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:51:45 2024 GMT
            Not After : Nov 30 22:56:45 2025 GMT
        Subject: CN=D58D35C1BF93BC9748B84EB9F5BF5A8C5EDE14CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:40:05:70:fb:f5:ae:fc:f2:66:1f:0b:a6:
                    20:b4:b9:f5:c1:9e:dd:5f:08:f8:73:3a:80:cf:22:
                    54:86:3d:26:0d:16:db:77:62:f4:df:d6:13:0d:1d:
                    c7:f1:1c:4a:61:a0:fc:5b:36:48:74:ec:15:0a:21:
                    7c:1e:da:0b:da:9a:5a:05:ce:b2:f1:73:82:f5:cf:
                    27:62:b3:e0:3a:83:c6:28:7d:d9:f4:f1:0c:68:e7:
                    fa:56:37:80:05:34:70:ea:4d:b8:55:18:91:ab:89:
                    4c:d8:7c:7b:d3:69:6f:f7:cb:c0:3b:42:2f:9f:17:
                    5f:ef:de:0f:c4:11:be:af:fe:0e:3a:30:81:78:de:
                    bb:08:b3:25:88:53:92:4a:d8:c1:56:26:2b:89:2b:
                    2b:a3:ae:eb:d6:1c:87:e2:dc:58:9f:7c:c2:d9:12:
                    01:68:87:3c:b8:26:b9:8c:33:75:70:fe:b3:58:24:
                    24:db:c6:8c:e7:d3:51:a4:75:96:58:89:f0:6c:e0:
                    c0:10:48:40:27:b5:39:14:ac:a8:0c:70:1a:d7:f5:
                    2a:91:d4:d1:ec:d4:d8:43:ab:20:ec:df:2b:cb:96:
                    e1:81:de:a3:0a:aa:da:64:36:67:02:2c:04:83:d2:
                    ce:b8:36:63:d6:2e:74:d3:a4:38:0a:24:92:d7:53:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8D:35:C1:BF:93:BC:97:48:B8:4E:B9:F5:BF:5A:8C:5E:DE:14:CF
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231342e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:93:be:b5:39:b9:21:a2:1d:87:9b:ff:35:f3:c4:65:0e:d3:
         1d:d7:d1:b9:81:15:89:8f:b9:03:b4:2e:ba:92:ea:c4:ce:0f:
         ba:10:9f:10:da:8d:d7:88:b0:b3:87:2e:ab:90:ae:f7:28:05:
         78:57:bc:fe:cd:81:47:e2:80:32:58:cc:76:ae:d8:00:af:55:
         8c:e2:d8:8e:00:e7:97:c5:50:fe:24:83:56:5e:44:38:fb:80:
         0e:81:bd:a0:c5:cb:b6:40:02:de:ee:7e:a6:49:c6:9a:32:d7:
         68:f9:c6:ee:5e:c5:ff:35:4a:f4:52:08:2c:7f:39:ee:ff:e5:
         d1:8d:1f:3c:e6:31:fd:e8:b7:9e:47:4d:73:37:d4:01:43:b4:
         76:70:ca:9b:86:81:62:13:1a:af:93:e3:25:73:0f:ef:64:60:
         20:ae:e6:f6:94:e3:d4:a2:cd:07:57:2e:d8:c0:11:f7:df:c0:
         53:9b:ec:ba:d7:5d:32:78:46:7b:f0:73:1c:ef:d7:88:b3:1e:
         a1:e0:d6:d5:de:51:6f:f6:fb:ce:db:cb:12:b1:a3:89:ff:c1:
         a2:42:89:ed:1b:2a:2d:30:22:11:f3:f2:c2:3c:0f:2c:c0:36:
         a9:2c:89:aa:91:e2:18:ab:5f:ff:e9:30:bc:31:9f:1b:12:6e:
         98:cc:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:09 2025 by rpki-client