Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          NXZSKtHKepcjApl9zBoZD4iboaTsL2ZN+3qvLPUQcrE=
Subject key identifier:   BD:6A:60:3E:F6:2F:4B:15:11:17:5A:83:D4:A3:B7:BA:69:F2:5F:3D
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       6FE74014165FE63834F8964A0612B3E5C83033BA
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa
Signing time:             Wed 03 Apr 2024 18:32:08 +0000
ROA not before:           Wed 03 Apr 2024 18:27:08 +0000
ROA not after:            Wed 02 Apr 2025 18:32:08 +0000
asID:                     270836
IP address blocks:        189.14.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e7:40:14:16:5f:e6:38:34:f8:96:4a:06:12:b3:e5:c8:30:33:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Apr  3 18:27:08 2024 GMT
            Not After : Apr  2 18:32:08 2025 GMT
        Subject: CN=BD6A603EF62F4B1511175A83D4A3B7BA69F25F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:03:8e:bd:2f:6b:c5:8a:48:2a:94:ce:62:
                    8f:64:0f:c6:b2:5b:46:91:6e:37:b7:21:75:94:52:
                    c4:28:20:d6:c5:c2:43:03:a2:2e:1a:84:a4:1c:e6:
                    f6:69:33:c5:4f:8e:e2:ca:17:f5:a7:51:d4:e2:4a:
                    6c:94:49:e9:7f:f4:de:58:fa:c8:9e:0d:b1:77:c4:
                    e5:d4:fb:56:a0:b6:4f:8b:65:23:6d:b8:33:32:91:
                    c5:fa:08:14:05:a8:61:73:8d:94:e4:e7:7b:eb:d8:
                    f0:7f:1a:fa:c3:60:8d:32:73:43:f4:d6:77:75:ea:
                    d1:2e:11:0f:65:9a:c7:c6:12:bf:61:6b:68:e2:4a:
                    c6:34:48:58:f5:c3:84:68:be:cb:5f:55:61:d9:96:
                    15:b1:a1:8b:b6:dd:a4:c9:cd:57:7a:e6:89:9e:ef:
                    21:21:4f:17:6d:32:9c:d3:99:be:7c:cc:57:f0:d0:
                    7a:3c:b8:9c:4e:31:a4:c1:53:87:e2:55:eb:be:4d:
                    c4:0d:79:c0:39:c5:5a:c9:66:02:30:cf:95:bf:1f:
                    62:cc:58:6e:79:41:be:32:0f:ca:8f:be:23:3f:ad:
                    c0:4a:b9:95:d4:78:04:77:f3:8e:fc:77:f9:bc:95:
                    8b:52:93:b0:f2:1b:07:05:e4:48:38:d8:29:44:1e:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:60:3E:F6:2F:4B:15:11:17:5A:83:D4:A3:B7:BA:69:F2:5F:3D
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131352e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:ce:6b:2d:e0:d0:ce:04:43:48:e3:7d:b4:e2:ae:81:e9:
         8d:e4:bf:59:8b:0e:b4:9f:ee:70:d2:eb:39:c9:e3:13:ad:99:
         39:de:1f:bb:34:10:49:b2:ed:7f:27:2d:99:64:f0:bf:5a:df:
         4e:32:23:42:a9:48:87:fb:75:f9:22:86:d2:e4:56:cd:3d:90:
         9c:e0:fd:67:f0:9e:27:89:79:10:20:f6:01:bb:fb:7e:0d:22:
         80:8a:73:7a:24:0e:d0:0c:b5:13:6b:0e:d5:b8:0d:5c:89:46:
         f3:ca:e3:78:49:45:6c:6c:62:fd:f6:b2:de:f3:d2:fe:0a:01:
         03:6c:3b:36:90:88:ef:1e:b0:95:54:03:47:01:f1:d0:f3:c7:
         6c:37:1f:ea:ff:29:99:1f:16:b5:af:b3:af:89:bc:ff:cd:19:
         de:20:05:00:ce:4f:fa:00:a3:60:d6:2e:73:20:3b:86:d0:d4:
         90:7a:d3:2e:31:d7:4f:fb:fd:9c:ca:bf:b2:4b:e9:5a:19:c1:
         ea:d0:39:ac:2c:08:5b:85:63:a3:3d:23:cd:fe:65:fc:b1:e7:
         33:c3:7f:9e:9c:ba:06:b8:c1:8d:0b:69:46:26:9b:11:2a:6a:
         12:bf:0b:b0:92:20:5f:bc:2c:2d:50:d8:fb:11:8b:16:48:c9:
         34:76:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:01 2024 by rpki-client on console-fra.rpki-client.org