Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa
File:                     3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa (raw, json)
Hash identifier:          2UnR0HXt+jCObUN9KzSYg1sbT8Y//gqz9zQ47iFE3vw=
Subject key identifier:   6C:79:03:FA:E0:53:44:F6:8B:2E:46:16:C7:9B:1A:4A:5B:6D:41:85
Certificate issuer:       /CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
Certificate serial:       0A8E76FADAF706349BE32B1427E7B02CBC6217A8
Authority key identifier: E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa
Signing time:             Fri 09 Aug 2024 19:33:58 +0000
ROA not before:           Fri 09 Aug 2024 19:28:58 +0000
ROA not after:            Fri 08 Aug 2025 19:33:58 +0000
asID:                     262407
IP address blocks:        189.76.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8e:76:fa:da:f7:06:34:9b:e3:2b:14:27:e7:b0:2c:bc:62:17:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29
        Validity
            Not Before: Aug  9 19:28:58 2024 GMT
            Not After : Aug  8 19:33:58 2025 GMT
        Subject: CN=6C7903FAE05344F68B2E4616C79B1A4A5B6D4185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:99:f2:8b:e6:2a:1f:16:69:52:13:92:fa:
                    e7:92:c2:e6:ad:83:71:49:54:b0:5b:99:39:e5:b6:
                    c9:46:9f:76:92:cd:8c:43:7c:da:36:56:79:d8:90:
                    ac:8b:a8:d2:c8:7a:ce:a8:f7:77:94:91:13:5f:c4:
                    92:5c:43:7c:17:53:66:af:3e:70:c7:46:b5:51:bb:
                    95:33:1b:47:f3:bc:e3:62:f9:34:e1:a8:81:69:bf:
                    14:61:0b:28:d0:2d:f9:96:52:43:36:7a:70:96:cb:
                    8f:90:99:fd:7a:b3:23:38:16:81:25:53:05:a3:b6:
                    bf:6c:23:ad:b5:af:a5:2a:bd:1a:c2:c6:50:3c:40:
                    07:92:46:dd:f7:9e:15:67:94:ac:1e:d0:6a:36:ab:
                    41:55:3d:e1:66:3a:e9:04:05:18:b4:92:df:81:8d:
                    10:30:07:97:f6:49:da:0b:e2:09:1b:20:2a:a9:14:
                    bb:a6:b8:75:fc:54:e8:91:75:a0:53:39:3e:f5:c9:
                    a7:da:9b:7d:77:1f:bc:da:ef:5e:6b:b4:ba:29:1a:
                    a4:f1:ca:f8:bb:08:c4:21:d7:8b:b2:f5:b4:4f:1e:
                    b0:a5:61:bd:7c:af:48:92:32:b0:27:6f:be:53:15:
                    c8:43:2c:ec:b0:85:b1:3a:3e:be:3e:81:24:19:1f:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:03:FA:E0:53:44:F6:8B:2E:46:16:C7:9B:1A:4A:5B:6D:41:85
            X509v3 Authority Key Identifier:
                keyid:E4:34:1D:CA:E9:8C:4F:2A:AF:19:C7:17:D6:FB:4C:0B:43:E9:BA:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4341DCAE98C4F2AAF19C717D6FB4C0B43E9BA29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:c4:4a:e3:ca:ed:05:8d:7a:3b:25:f4:6c:ff:b5:c7:83:
         fa:70:a1:d6:53:fa:f8:f1:e2:e0:2e:41:30:ba:cd:d5:f0:38:
         22:7b:de:f9:5c:dc:dc:a2:64:9b:01:bc:38:de:02:03:33:6b:
         2f:aa:cf:1c:d5:95:97:7e:5a:6f:83:b6:2f:eb:5d:3a:d6:54:
         0a:f7:0f:74:91:c3:0e:1b:8d:3d:ae:5e:e2:27:5a:5f:24:c4:
         47:02:1c:81:80:8e:ac:21:28:a9:5f:4a:dc:01:76:66:fd:ac:
         5e:3a:57:02:51:16:e3:8d:20:6b:80:1f:92:df:c2:cf:51:1b:
         f0:9a:7f:63:8d:71:75:19:a2:a0:4a:3f:f0:eb:8b:89:4c:06:
         51:9a:8f:56:0a:58:b9:6a:6b:e5:0c:0b:f9:31:c6:97:e3:c9:
         ab:17:36:0b:bc:e4:b8:65:96:64:e0:e3:f9:b2:17:18:bb:13:
         d7:40:14:2c:77:f0:12:87:41:34:9f:6e:27:1f:1e:fe:be:44:
         56:55:d7:28:7f:b2:fc:99:98:4b:46:af:ca:3e:ed:45:6a:01:
         eb:4e:e3:35:58:8a:bc:59:44:05:a2:06:68:d7:52:73:3d:b3:
         ef:18:70:c6:4b:51:96:f4:a4:15:6b:22:7a:93:59:67:f8:76:
         cb:89:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:04 2024 by rpki-client on console-ams.rpki-client.org