Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa
File:                     3138392e33362e3231362e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier:          CfBGuWVFteOyXbrRExRjj0HobLKtt942L42306ibAEs=
Subject key identifier:   44:F6:D5:63:C7:0D:B4:1B:36:B6:AB:BF:C9:E9:72:8C:F6:A9:F3:C1
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       315DF108A6D7083CB6CE8C01EAB1D29147E96B7D
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa
Signing time:             Sun 01 Dec 2024 22:43:02 +0000
ROA not before:           Sun 01 Dec 2024 22:38:02 +0000
ROA not after:            Sun 30 Nov 2025 22:43:02 +0000
asID:                     28296
IP address blocks:        189.36.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:f1:08:a6:d7:08:3c:b6:ce:8c:01:ea:b1:d2:91:47:e9:6b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Dec  1 22:38:02 2024 GMT
            Not After : Nov 30 22:43:02 2025 GMT
        Subject: CN=44F6D563C70DB41B36B6ABBFC9E9728CF6A9F3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:60:4e:3a:67:cb:ab:36:2c:85:56:58:8e:
                    15:37:39:9b:0b:cd:0a:f3:8c:28:64:b5:26:03:1a:
                    6f:d2:7c:b0:ad:2b:0e:f7:9d:d0:59:9b:39:63:9b:
                    12:e8:7e:b7:23:71:ad:e4:a5:10:3a:02:55:72:7a:
                    48:0b:93:18:5a:f4:69:03:80:e2:1c:d6:f8:c5:de:
                    20:be:f8:0e:91:67:b0:98:56:23:c2:67:db:92:f3:
                    8a:cb:3a:69:4d:fc:af:a5:74:a3:c8:57:c6:a5:07:
                    3b:d6:81:85:33:db:b6:2c:a0:78:53:9a:26:19:5f:
                    6d:13:97:7b:bd:3d:c1:c5:56:90:37:5d:11:7a:a4:
                    24:b8:3f:ee:50:8f:1d:09:89:3e:e3:ee:8e:ec:d3:
                    56:2d:7e:62:55:37:84:ea:f6:54:82:93:64:12:68:
                    84:6c:f1:49:3f:e6:30:31:b7:6a:ee:95:52:6d:fe:
                    21:cd:d3:b4:e2:4a:f4:f9:39:8f:13:c0:d3:b8:99:
                    53:7a:1f:d9:0e:e2:13:43:e7:7f:f6:a4:52:50:6d:
                    33:88:c6:ce:d3:a5:ca:11:f3:09:2c:5c:2d:ad:7e:
                    8e:d6:cf:af:23:30:59:dd:93:b9:b7:00:9b:06:2e:
                    3a:f7:00:ec:40:58:33:68:fb:13:4f:14:83:2e:39:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F6:D5:63:C7:0D:B4:1B:36:B6:AB:BF:C9:E9:72:8C:F6:A9:F3:C1
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138392e33362e3231362e302f32342d3234203d3e203238323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:34:09:5f:3e:ba:c7:24:7f:eb:0f:6e:13:e3:65:84:8b:
         07:3e:04:5e:cb:ca:a2:ae:60:df:36:55:6e:3a:4d:f6:87:b2:
         90:fd:23:e9:84:4f:67:b3:fb:8d:0a:98:fc:1c:77:02:fa:f3:
         29:fe:3e:ee:f4:c7:69:5f:a8:53:7a:53:c2:56:9e:53:78:b6:
         4b:d5:b9:00:e7:1c:5b:0b:d4:57:a5:51:48:e3:eb:66:26:20:
         94:44:bf:ec:98:9c:9f:ba:55:f6:50:c5:87:5c:3b:b2:3e:57:
         f5:a7:7a:08:f3:eb:3a:11:f3:f8:30:22:ba:af:ef:cb:60:0a:
         cc:39:2e:79:83:ee:81:db:b7:c9:65:e6:af:92:1d:28:e3:4c:
         3b:88:f9:ba:87:05:78:55:58:d2:78:e8:50:85:ee:d3:2b:50:
         3a:4d:91:ea:e3:7f:d1:40:94:a6:10:29:d6:f7:40:37:bf:45:
         2f:21:48:4f:1b:1b:c5:85:25:0c:60:70:a3:32:4d:d2:8e:c9:
         cf:a1:ab:c4:4e:e1:ec:e3:29:5e:82:00:f8:90:fc:59:eb:c9:
         e1:31:2a:2e:c1:57:de:6f:93:95:04:6c:4f:d1:e7:8f:c1:ef:
         c8:d8:38:e8:41:cb:e4:9b:26:f0:25:b5:63:61:48:61:dd:36:
         3f:c8:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:28 2025 by rpki-client