Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32312d3231203d3e20323639303733.roa
File:                     3138372e31372e33322e302f32312d3231203d3e20323639303733.roa (raw, json)
Hash identifier:          jEGltTiGxrCUi+n7QT+IEClNt9BQrnb1b/Cs6V4UZE8=
Subject key identifier:   D1:82:A9:4C:9B:A4:40:AD:7A:AD:B7:19:39:85:88:15:2D:FE:4A:8E
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       7D11F49E9001ADA2249B319798E31827A1BC7A2B
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32312d3231203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:50 +0000
ROA not before:           Tue 22 Oct 2024 14:16:50 +0000
ROA not after:            Tue 21 Oct 2025 14:21:50 +0000
asID:                     269073
IP address blocks:        187.17.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:11:f4:9e:90:01:ad:a2:24:9b:31:97:98:e3:18:27:a1:bc:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:50 2024 GMT
            Not After : Oct 21 14:21:50 2025 GMT
        Subject: CN=D182A94C9BA440AD7AADB719398588152DFE4A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:24:f4:2d:0b:b2:84:7c:b7:19:80:c9:53:
                    a9:99:c3:d4:8b:b6:4e:6e:9f:83:35:5d:89:38:48:
                    85:62:a1:85:9b:20:91:99:9c:d1:6c:47:f1:d9:21:
                    bd:5b:1c:c6:5a:d4:1c:96:ad:98:b3:c4:f1:f5:7c:
                    7b:d8:fa:44:c4:d7:16:d2:cf:09:79:99:7f:03:f2:
                    c2:d5:02:d4:09:dd:f2:fc:67:e7:8a:43:e2:1a:3d:
                    b6:ca:71:68:85:fe:fc:88:9e:65:60:66:9a:d6:92:
                    b8:75:cd:f4:d5:bd:c0:e2:18:1f:05:a3:dc:4e:69:
                    46:9d:d0:45:68:2f:38:d9:03:77:30:fb:bb:8c:24:
                    c5:2c:3d:da:9c:f4:0b:75:50:32:90:14:c8:7e:fd:
                    4a:a9:1f:3d:99:75:5b:cd:d5:f6:be:d5:a7:3a:ba:
                    70:d1:ee:87:b2:0e:f1:a4:77:c6:1a:dc:d0:00:fd:
                    de:0c:9b:25:23:d1:28:32:d5:e9:b7:b7:e3:df:99:
                    4a:0a:1f:df:60:8e:f8:ac:7a:c0:cf:12:bd:4b:c5:
                    f7:0c:9b:e6:2d:4f:29:ed:3d:78:f3:f3:77:3b:0c:
                    bb:4f:18:b1:78:61:25:69:28:38:b7:f6:c0:5f:81:
                    df:8c:fc:62:a5:ed:75:d1:ed:54:8e:60:6e:06:f6:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:82:A9:4C:9B:A4:40:AD:7A:AD:B7:19:39:85:88:15:2D:FE:4A:8E
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32312d3231203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:cb:b7:b8:3b:92:97:24:16:f2:ca:82:7f:e9:c2:c0:fa:
         d3:9e:d8:5b:a5:8a:8d:51:ec:5e:e5:e7:26:0c:24:3a:71:0c:
         ab:ed:a3:64:c9:f7:f5:78:e3:34:76:57:0f:b0:ae:4a:93:b2:
         92:a6:8d:2f:11:e2:86:b2:bb:48:18:64:1c:e3:74:5b:bf:19:
         07:db:c4:03:c0:c7:9c:3d:60:4d:04:2c:14:15:1f:7e:6e:10:
         66:61:e5:ee:4b:85:62:80:8c:da:8e:cf:75:56:9e:3b:7c:e3:
         da:e0:f1:b7:0d:c1:43:89:b8:bf:3a:3e:18:16:d7:4b:8b:c2:
         15:cd:1c:90:16:7d:ce:76:a7:45:14:0d:8d:9a:bc:86:0c:db:
         2b:c6:65:3a:da:40:65:7c:f7:16:4c:9b:a2:23:ca:e0:f2:dc:
         b1:05:02:8d:45:c6:a5:a9:25:ac:16:be:ca:a0:bb:cd:5e:fb:
         60:27:7e:1e:35:f7:cc:26:a9:6b:81:a5:ef:17:b9:c9:42:4f:
         cc:a1:8d:3b:50:1d:b8:e5:92:b9:7c:07:06:42:38:3d:60:bb:
         58:a9:37:45:96:8f:54:25:ac:1e:87:f0:a2:1d:4c:e6:48:b6:
         b9:be:89:c7:8b:b0:b0:6c:82:a2:81:16:10:9e:6e:1a:98:ff:
         86:c7:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:23 2024 by rpki-client on console-ams.rpki-client.org