Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3136302e302f32302d3332203d3e203238313731.roa
File:                     3138392e38342e3136302e302f32302d3332203d3e203238313731.roa (raw, json)
Hash identifier:          9cCHxisrQbcvqgrXYb1FMnOR1opLT5/3gLcwgpJUiMU=
Subject key identifier:   37:72:B2:C5:DB:32:92:59:B3:70:32:71:02:3C:89:EC:03:D2:1E:26
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       388D788D34A3639C96FA5AC7257A2309BEE97844
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3136302e302f32302d3332203d3e203238313731.roa
Signing time:             Tue 08 Oct 2024 05:47:22 +0000
ROA not before:           Tue 08 Oct 2024 05:42:22 +0000
ROA not after:            Tue 07 Oct 2025 05:47:22 +0000
asID:                     28171
IP address blocks:        189.84.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8d:78:8d:34:a3:63:9c:96:fa:5a:c7:25:7a:23:09:be:e9:78:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Oct  8 05:42:22 2024 GMT
            Not After : Oct  7 05:47:22 2025 GMT
        Subject: CN=3772B2C5DB329259B3703271023C89EC03D21E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:b7:98:df:5b:32:48:f0:8e:78:71:e7:d6:
                    9b:b0:e4:bd:7d:89:07:3b:a1:97:50:29:19:63:c7:
                    d4:f6:3d:71:1b:53:4f:ef:88:d7:69:67:dc:cd:ef:
                    03:ba:55:54:ed:6d:dc:4c:01:96:47:47:79:e6:e8:
                    4d:12:30:bb:61:cf:7f:dd:c0:1f:a9:ee:2e:f4:95:
                    cf:c2:ed:c9:db:c9:87:4b:95:0a:65:78:5b:db:75:
                    d6:48:0a:53:05:b2:b1:3c:0f:81:95:54:f9:84:7f:
                    e7:a4:17:35:fc:43:c7:7d:2c:9f:a4:92:7b:b8:89:
                    b1:87:bc:f6:15:15:5d:61:33:70:d7:8a:1f:d6:33:
                    ed:96:c0:fc:33:19:30:6e:c0:04:47:0a:43:32:22:
                    17:59:b2:be:fd:d8:4b:5e:64:1c:28:c7:22:a0:73:
                    08:c4:07:98:fa:01:9a:2d:8c:23:8d:28:52:3f:a0:
                    c1:34:74:63:1f:53:c8:e5:8b:4f:97:dd:5e:2f:d8:
                    f1:5a:dd:8b:9c:54:76:79:75:c7:22:be:db:9a:8b:
                    d2:4a:00:95:34:91:e9:29:cd:3d:4a:43:e5:51:ab:
                    0b:da:73:35:5a:2f:e9:6e:96:82:cd:73:a8:4f:20:
                    34:12:07:6b:44:97:d4:4d:f6:dc:c1:55:bc:63:e6:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:72:B2:C5:DB:32:92:59:B3:70:32:71:02:3C:89:EC:03:D2:1E:26
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3136302e302f32302d3332203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:f1:51:d4:dd:ea:08:ee:bf:a3:4f:4f:6e:24:33:2a:9b:76:
         76:2d:5d:74:ee:4c:b6:32:bf:b5:e9:2c:bd:d2:eb:0c:26:d8:
         8d:9c:99:8a:a5:56:84:70:2a:42:51:c6:1b:96:0d:e9:9c:e4:
         7e:29:bd:e8:41:cb:50:6e:11:b2:97:c2:17:6a:41:e9:c2:61:
         2e:92:b0:ae:11:f5:1c:f0:fe:73:6c:95:34:46:26:bb:09:14:
         a4:55:54:3f:12:fa:f1:cc:74:d3:7c:69:33:87:19:f7:24:1c:
         6e:f1:b7:04:16:e2:bc:f7:78:1c:89:68:30:90:5c:3a:09:9e:
         9a:ab:65:66:ee:0a:24:d9:9a:d8:c8:12:af:db:fc:15:85:49:
         0d:58:9a:3c:08:6a:5e:c3:39:bf:8b:5a:52:c0:81:c9:b3:54:
         e9:f8:4f:a5:ac:c3:a9:64:af:d6:ec:be:d6:50:41:41:fe:ba:
         66:f5:e1:9f:2f:b5:f5:4b:c7:c9:b4:61:12:cf:67:35:55:83:
         17:aa:2c:da:e4:dd:7b:17:9a:e4:21:b9:66:95:98:9b:6d:98:
         a0:54:8c:95:78:39:82:da:ff:02:1e:ae:c9:62:b0:d3:6c:d2:
         ab:2f:2e:95:77:38:42:e6:65:3f:a2:6c:73:05:f5:ff:54:c7:
         1c:aa:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:50 2025 by rpki-client