Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3332203d3e203238313731.roa
File:                     3138392e38342e3137362e302f32302d3332203d3e203238313731.roa (raw, json)
Hash identifier:          LSjMHoE69qWqnpzVzyyj7h0wlVYndHxXSlQXW5zHZ84=
Subject key identifier:   0A:4E:59:D6:77:2A:D3:06:B2:50:97:60:3E:6C:9E:46:87:42:F4:08
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       57F587BA360C9B2CA062B86C888E1D09F7F01A3A
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3332203d3e203238313731.roa
Signing time:             Tue 08 Oct 2024 05:47:27 +0000
ROA not before:           Tue 08 Oct 2024 05:42:27 +0000
ROA not after:            Tue 07 Oct 2025 05:47:27 +0000
asID:                     28171
IP address blocks:        189.84.176.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f5:87:ba:36:0c:9b:2c:a0:62:b8:6c:88:8e:1d:09:f7:f0:1a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Oct  8 05:42:27 2024 GMT
            Not After : Oct  7 05:47:27 2025 GMT
        Subject: CN=0A4E59D6772AD306B25097603E6C9E468742F408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:30:b3:78:fe:39:34:26:34:96:44:af:57:
                    5e:86:de:b2:59:e6:31:fe:70:ea:a8:39:97:79:ed:
                    d4:eb:6b:2a:6a:4a:bc:00:42:6c:47:d3:0b:76:17:
                    2c:53:bb:69:28:ab:12:06:7d:5a:32:f7:37:3a:e1:
                    8e:e3:7c:b5:96:60:88:83:25:5c:6a:43:d9:24:fc:
                    67:f9:ef:db:ae:cb:39:bc:a1:58:86:e4:dc:1d:ad:
                    30:bf:b0:92:f0:ef:4f:ba:7d:1e:bb:ed:8e:bf:2f:
                    17:d9:78:14:26:71:4d:c9:7b:7c:da:ea:d8:f1:a9:
                    fe:71:5e:e9:de:ee:b7:58:60:c0:53:e0:f4:6a:fd:
                    22:33:9b:d8:59:b8:9e:76:74:6f:42:34:e3:22:f4:
                    0f:44:66:6a:fd:7d:1c:7f:83:8d:0b:6d:65:3a:a9:
                    c0:bd:41:2b:38:87:69:3b:db:2c:06:a6:82:b2:4e:
                    a3:6f:a1:81:0d:00:ef:92:2b:fd:f4:8f:ee:41:7d:
                    65:b8:60:a7:5d:53:2c:6c:9f:be:0c:ac:2c:1d:c7:
                    71:9f:c5:14:ac:ae:25:47:a6:03:f7:c3:bd:a1:d2:
                    6a:53:01:a6:16:52:ae:79:66:64:4f:36:de:91:76:
                    1b:a9:b8:0a:ee:52:a2:64:5f:f4:a8:09:65:c0:b5:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:59:D6:77:2A:D3:06:B2:50:97:60:3E:6C:9E:46:87:42:F4:08
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3137362e302f32302d3332203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:67:1e:fd:c2:88:a6:2d:d7:66:8c:2f:33:5f:a1:d4:c6:a4:
         e3:5c:cf:c4:c9:e3:02:79:1b:3e:34:10:85:ff:87:90:b5:06:
         a7:79:87:61:4e:8f:0a:33:f5:55:23:f1:5e:2f:5f:d8:32:21:
         44:62:50:ba:da:dc:cf:0b:20:e1:f0:28:65:85:50:85:ea:a0:
         a8:89:f6:47:9f:05:67:9d:b4:d1:2b:e7:e9:40:42:ae:b2:c0:
         41:b3:c1:dc:aa:66:2b:5c:7c:50:c4:c6:72:64:f7:fe:3a:13:
         94:77:88:79:7f:33:d1:26:5f:fd:bd:90:dc:94:c2:5d:71:db:
         95:f8:60:e0:19:73:96:f8:22:99:fb:31:a3:f6:05:9e:c5:68:
         92:70:4a:e8:90:60:65:e7:74:2b:f7:8d:ab:a0:3e:37:ed:13:
         8c:41:0a:d6:75:a2:84:8b:06:1e:16:85:b4:d9:a9:1d:0c:f9:
         70:95:43:8f:13:ef:8b:60:b4:ba:03:d1:a3:cb:75:ff:3f:8d:
         2f:af:94:20:21:c8:3e:21:1e:c3:c7:7f:65:f8:92:a8:84:4a:
         b6:ff:b0:c9:56:22:5b:f5:18:5e:62:88:11:bc:97:c6:8b:c7:
         61:93:30:d8:b3:11:b4:f2:2d:3e:19:36:1b:75:bc:b0:4e:90:
         c2:cb:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:27 2024 by rpki-client on console-ams.rpki-client.org