Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa
File:                     3138392e37362e3139322e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          ntm45oq5yVqvcJSg5A1aKeYly7gW84/58Tzy0+7/2Rs=
Subject key identifier:   27:46:66:CF:3A:82:7E:CE:11:12:A6:C2:09:13:D9:41:D5:BE:82:C4
Certificate issuer:       /CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
Certificate serial:       059B213B80FACB6D52483549CE0FB2B98239CF40
Authority key identifier: BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa
Signing time:             Tue 30 Apr 2024 20:02:43 +0000
ROA not before:           Tue 30 Apr 2024 19:57:43 +0000
ROA not after:            Tue 29 Apr 2025 20:02:43 +0000
asID:                     28359
IP address blocks:        189.76.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9b:21:3b:80:fa:cb:6d:52:48:35:49:ce:0f:b2:b9:82:39:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
        Validity
            Not Before: Apr 30 19:57:43 2024 GMT
            Not After : Apr 29 20:02:43 2025 GMT
        Subject: CN=274666CF3A827ECE1112A6C20913D941D5BE82C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:86:37:80:73:13:3f:9b:54:46:f8:76:5b:
                    08:8e:60:72:a1:f5:c3:fa:04:0a:b8:a6:c0:da:9a:
                    ee:7e:6b:da:58:23:8d:78:a5:57:ad:38:07:3b:d3:
                    65:d7:7c:be:23:13:10:22:96:26:07:97:df:cc:50:
                    cd:c7:f0:ff:c9:f2:b6:c6:6b:e2:d4:55:2b:35:80:
                    da:55:b1:66:ad:92:ec:64:a9:97:50:7e:e6:e4:6d:
                    f8:6d:3a:f5:9e:3a:84:76:d8:e2:1a:25:83:83:ca:
                    45:32:52:c2:c4:43:0e:de:e4:49:aa:20:b3:c2:96:
                    00:f8:88:da:4c:e5:3b:95:22:17:99:8e:5b:d2:7e:
                    47:41:97:28:bc:8a:33:a2:95:44:28:90:df:78:8a:
                    01:58:74:aa:f8:7c:5c:a5:a3:13:02:db:8a:b7:1f:
                    fa:eb:4c:f2:de:85:e4:fa:05:06:d0:9e:3f:8c:67:
                    82:9a:cf:46:98:9c:27:8d:66:68:07:92:03:2f:77:
                    c4:cb:ed:cb:12:db:b6:72:9a:7b:94:b0:cf:3a:46:
                    3e:0f:4e:f6:6b:f5:e7:ad:58:dc:5a:be:7a:89:29:
                    76:61:c0:78:f4:6e:ea:ea:8b:ac:92:b6:58:61:2b:
                    f1:65:bf:01:4a:eb:3b:9f:4c:87:7e:47:5e:53:fc:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:66:CF:3A:82:7E:CE:11:12:A6:C2:09:13:D9:41:D5:BE:82:C4
            X509v3 Authority Key Identifier:
                keyid:BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138392e37362e3139322e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:02:4d:cf:b0:22:52:dd:52:17:d5:7f:63:2b:fc:88:64:
         4f:db:5e:58:2f:4f:97:58:27:18:07:4a:ef:12:e4:05:9c:c7:
         02:ab:b3:e8:e7:e2:dc:70:fd:f9:5b:67:52:be:5d:48:7d:e3:
         07:c2:27:16:fa:76:af:02:b2:d6:40:11:50:71:7c:e6:66:8a:
         26:3b:b4:0a:92:ba:86:74:4b:40:96:9c:06:36:20:09:66:51:
         60:ff:54:57:d8:7c:b5:c1:b7:fc:2a:0b:1f:cd:52:fb:1d:a9:
         15:d8:5c:ad:52:20:4f:d8:f3:ce:eb:a1:d6:6b:fe:1c:14:68:
         38:57:45:5a:97:5f:df:59:23:f8:df:61:bf:92:32:b3:65:a8:
         5a:2c:cd:dc:e4:81:33:c7:7f:c3:fc:06:f7:c1:e2:a0:0c:f6:
         df:ac:5e:a8:94:e7:14:ff:e5:6b:7c:fb:77:7b:99:6f:6f:88:
         13:ca:b2:6f:91:5d:b7:cf:b8:e2:15:db:4b:5d:14:e6:ae:f6:
         6c:cc:ad:4c:f0:56:42:27:a3:c6:9c:b7:1d:85:ab:22:2b:2c:
         97:29:4b:57:12:4d:9e:a6:63:06:fa:b6:00:df:f7:ba:3c:42:
         23:59:5c:54:99:41:5e:6f:95:48:3b:40:9b:72:b1:25:df:4d:
         a7:ba:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org