Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3232302e302f32322d3234203d3e203238313538.roa
File:                     3138372e36302e3232302e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          viJp0O5FJ21x4KkpjOwGw90Mxtq1cBKwlaLLo2iTjGc=
Subject key identifier:   BE:D9:70:60:D6:E7:EA:DF:6E:29:2D:E6:A4:AB:96:98:C1:A4:0D:E6
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       608B3865A9A9E41565A5AA0185B331F6548E702F
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3232302e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:38:34 +0000
ROA not before:           Thu 19 Sep 2024 14:33:34 +0000
ROA not after:            Thu 18 Sep 2025 14:38:34 +0000
asID:                     28158
IP address blocks:        187.60.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:38:65:a9:a9:e4:15:65:a5:aa:01:85:b3:31:f6:54:8e:70:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:33:34 2024 GMT
            Not After : Sep 18 14:38:34 2025 GMT
        Subject: CN=BED97060D6E7EADF6E292DE6A4AB9698C1A40DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:a2:42:27:48:5d:5f:ce:f8:3a:46:9f:ca:
                    bd:07:a7:ef:36:4c:ed:97:78:4c:b6:92:a2:6b:fe:
                    c9:63:fa:45:4d:51:af:50:20:0d:87:68:c0:02:06:
                    db:3a:47:98:59:fa:26:65:cc:40:9d:0d:03:49:c6:
                    1d:2a:5a:da:8e:89:2d:8b:fa:b3:0f:33:07:eb:b0:
                    13:54:73:36:c1:77:5f:42:5e:b1:8f:66:ce:7e:d7:
                    1d:4e:4f:8b:a7:ae:c3:52:7b:00:9f:62:a4:30:3a:
                    a6:35:18:99:34:b4:98:84:d1:ec:4b:4d:2a:e0:a9:
                    8f:b7:a9:22:47:45:59:ba:89:1a:87:6b:c2:ba:17:
                    e4:90:8c:04:6e:a0:3e:de:66:64:c8:f2:a6:05:89:
                    65:1c:fc:4f:b3:82:04:6f:2b:3f:4e:93:7b:0e:6d:
                    86:dc:64:e5:e3:a3:a1:aa:cf:0a:db:fe:b8:c4:1b:
                    66:cf:59:74:a4:d0:6d:90:ae:b4:67:04:14:bc:0e:
                    c7:06:1a:01:0a:c6:88:87:5f:a8:ad:ab:09:64:8f:
                    01:17:93:4f:ad:7a:1d:48:0f:26:5b:55:a2:0a:ec:
                    9f:a3:9a:2a:ea:c2:43:59:c5:9a:c4:64:99:d5:92:
                    4d:37:92:ec:87:15:0b:54:82:65:db:da:07:cb:51:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:70:60:D6:E7:EA:DF:6E:29:2D:E6:A4:AB:96:98:C1:A4:0D:E6
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3232302e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:d3:d9:20:32:05:2f:31:28:24:b0:2b:0f:2f:e6:f8:90:db:
         97:c5:e9:a0:4c:5d:04:a4:21:c6:ce:ec:bf:53:a1:35:03:95:
         48:39:5d:7f:0b:d6:de:ac:d5:c1:60:fc:31:7a:a8:ed:6c:5e:
         7a:36:9d:ca:e7:be:27:8c:34:26:3c:9c:b3:84:b0:bf:80:5d:
         c3:38:9f:cb:a2:ae:d4:24:7a:42:11:d4:70:1e:45:4b:2d:3f:
         58:f2:26:e7:06:86:6d:ec:25:88:bd:93:67:69:1f:52:77:b8:
         84:97:e6:c0:02:a1:2e:81:e6:d4:03:f9:9d:6f:6b:59:ef:10:
         41:d7:01:2d:21:6e:56:39:12:0f:51:1d:f7:c6:74:bf:8e:ed:
         74:1d:e0:43:6c:81:25:b1:19:cd:58:18:dd:81:27:52:0c:4d:
         4a:b4:46:f9:4c:c3:2d:e8:8a:d7:a5:24:6d:6e:0d:2f:a0:99:
         d1:33:07:bc:8c:0b:2c:5d:41:1c:ff:cd:78:c2:76:c5:61:c6:
         25:1b:a9:14:8b:f7:19:25:b7:b3:73:03:98:71:98:ee:f2:26:
         2a:62:44:6b:7f:a6:6f:cb:dd:25:e9:c3:e7:68:d1:c8:3b:0b:
         22:18:ce:2f:9a:50:1c:45:89:6c:f1:90:12:40:61:74:db:d8:
         22:fe:2f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:56 2024 by rpki-client on console-fra.rpki-client.org