Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa
File:                     3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          sEpurO72u1g1/CJaLt7b8OLy1Fbw4Gnq1ml05grFLWg=
Subject key identifier:   D1:9B:82:4F:32:01:91:D0:D5:C8:A4:88:0B:C8:BC:8C:A6:7D:8B:93
Certificate issuer:       /CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
Certificate serial:       739627383F4D700A0335FA679AEBDC3D4688843D
Authority key identifier: BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa
Signing time:             Tue 30 Apr 2024 19:58:22 +0000
ROA not before:           Tue 30 Apr 2024 19:53:22 +0000
ROA not after:            Tue 29 Apr 2025 19:58:22 +0000
asID:                     270814
IP address blocks:        187.121.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:96:27:38:3f:4d:70:0a:03:35:fa:67:9a:eb:dc:3d:46:88:84:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
        Validity
            Not Before: Apr 30 19:53:22 2024 GMT
            Not After : Apr 29 19:58:22 2025 GMT
        Subject: CN=D19B824F320191D0D5C8A4880BC8BC8CA67D8B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:c9:5c:3b:c8:00:dc:f2:eb:c2:36:34:cc:
                    48:57:c1:09:04:b2:1f:a5:a0:d1:59:03:d1:28:c2:
                    20:a1:1a:8c:81:7a:ea:56:57:bb:91:a6:d5:31:25:
                    41:55:92:3b:d4:f9:0b:5c:83:d1:34:97:d8:d4:69:
                    d7:3c:50:bc:19:46:e3:a4:dd:3d:b0:49:bd:be:6a:
                    a0:c8:9c:a1:eb:b1:6d:76:c8:fa:45:ef:c9:45:c0:
                    a6:21:e2:e0:9a:2a:26:5e:81:86:c5:ae:b6:3f:10:
                    13:a2:14:2a:e0:01:f5:bc:d5:af:a0:15:e5:49:7c:
                    e0:11:bd:f9:b5:44:42:d9:39:13:e0:db:10:d8:16:
                    cb:f9:64:f5:8d:af:64:81:6c:47:86:56:40:1e:a5:
                    28:6b:e0:16:e4:81:70:7c:33:06:94:66:7f:3a:c1:
                    87:22:3e:9b:20:ca:c4:66:06:5a:e7:5f:6b:94:f9:
                    13:1c:8f:d7:30:35:6c:2e:33:55:88:74:d9:52:d2:
                    b5:83:49:b5:72:b5:22:05:73:50:d1:32:46:63:96:
                    3d:c4:d0:68:80:e4:3c:22:a0:05:b5:fe:fe:79:19:
                    40:49:14:ba:0c:98:eb:60:47:b3:69:d4:7b:e3:ac:
                    8f:8c:73:ae:44:ef:69:8d:4a:bf:22:05:5c:91:a3:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9B:82:4F:32:01:91:D0:D5:C8:A4:88:0B:C8:BC:8C:A6:7D:8B:93
            X509v3 Authority Key Identifier:
                keyid:BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:bd:14:cc:80:14:3a:e4:ad:6d:b3:e5:32:3b:08:e8:d0:
         12:fe:3e:6e:2f:ed:27:6c:0c:bd:b6:99:83:c4:e8:e8:f9:7f:
         65:4d:7e:65:d6:eb:f0:01:d9:d0:f8:66:6d:a2:87:54:ff:43:
         86:1a:7d:69:ed:e2:b6:11:59:68:04:07:44:9d:e6:d7:35:b3:
         c0:98:0c:b0:26:f3:80:d3:78:3f:4e:07:c0:ea:ca:14:4a:c5:
         a4:9b:39:30:e0:62:39:fe:6d:6c:c5:48:48:9a:11:26:46:12:
         09:2c:08:f6:cb:46:8b:90:da:8a:b6:b7:e3:17:fe:90:ee:33:
         12:ef:ba:e1:87:65:1b:13:be:bf:d2:37:ed:51:76:05:6a:d6:
         bb:ed:b4:2f:0b:29:d0:ad:bc:ee:05:9e:bb:93:de:5f:d6:fd:
         9f:fd:f7:ba:00:22:15:1b:c3:d8:31:37:0e:e4:b3:40:fb:35:
         d8:a6:ed:d5:d7:80:6d:23:c5:2e:1e:f3:7c:29:33:13:d7:3c:
         1f:43:bc:bf:a1:d1:6e:24:50:2f:a6:3d:69:24:9f:f3:d4:95:
         85:09:cf:81:28:59:42:6e:3f:35:3d:69:c0:9e:3b:e2:7c:df:
         75:a5:f9:af:3e:57:d1:e4:76:66:0c:d3:44:45:a6:57:fc:fc:
         55:4a:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org