Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
File:                     3138392e38342e3136302e302f32302d3234203d3e203238313731.roa (raw, json)
Hash identifier:          Utnl5VeWFTPgO4YYyfF3uRMhUcbjbt1XgB1NAOMrsLI=
Subject key identifier:   A2:3C:2D:4B:E8:7E:26:DE:03:F3:3B:D3:37:90:BF:46:C8:EC:71:C2
Certificate issuer:       /CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Certificate serial:       38063D414C44B3B76D4A0CF080E75DC9AE15B81C
Authority key identifier: 8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28171
IP address blocks:        189.84.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:06:3d:41:4c:44:b3:b7:6d:4a:0c:f0:80:e7:5d:c9:ae:15:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:63:25:fe:a5:06:f5:72:ab:4f:f5:a6:e2:5a:
                    ba:85:37:d6:5e:65:cf:b9:01:07:64:06:cf:a8:87:
                    dc:4b:e6:cf:98:a4:e4:96:48:3d:56:44:d5:51:7d:
                    d7:e3:43:2d:70:43:19:74:07:a8:75:2d:83:47:d8:
                    c4:5a:89:6a:e3:4d:38:86:3f:9b:21:e5:9e:6a:e6:
                    60:ef:ff:fe:b0:df:12:90:75:4a:e8:a7:d0:f1:56:
                    6f:ea:29:7e:81:7b:3a:c1:be:28:d9:8a:64:34:0e:
                    ae:87:e1:31:59:7b:3a:89:74:7e:0d:b9:30:ec:f5:
                    f4:32:1f:fa:c9:3e:c2:34:90:94:92:83:6c:8c:48:
                    d2:c7:33:4f:77:cb:3a:69:08:16:14:76:bd:1e:93:
                    46:77:4d:54:43:4b:0d:30:4c:b4:36:06:61:5c:f0:
                    96:28:3a:2a:cc:af:d7:12:95:4d:bf:4f:52:71:97:
                    82:08:79:36:2c:55:72:a3:ef:36:d9:9d:05:5f:19:
                    ee:63:79:4f:61:17:0b:e4:2f:05:a1:9a:28:88:4b:
                    e9:20:67:a8:00:fb:c0:9e:6e:25:ce:0e:6c:1a:a3:
                    b3:08:8c:42:6d:a0:7b:47:df:02:cc:f1:b8:5b:b0:
                    e1:69:e0:c5:2c:cd:98:ec:20:62:22:f6:62:63:f8:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:2D:4B:E8:7E:26:DE:03:F3:3B:D3:37:90:BF:46:C8:EC:71:C2
            X509v3 Authority Key Identifier:
                keyid:8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d3:b0:d1:aa:95:e5:67:47:01:51:3d:bc:d9:55:d5:d9:ff:1b:
         20:2c:be:e7:b0:d4:67:46:f9:d6:d5:90:5b:2a:79:9f:0c:84:
         e9:10:8e:0a:ff:2f:83:04:bc:aa:a2:8e:83:25:a5:2d:db:f9:
         cd:c0:2d:3a:5f:12:af:8c:bb:41:fa:37:c6:14:49:b4:99:0c:
         8c:c5:dc:e5:a9:dd:b5:f4:cf:ff:1a:14:28:ce:65:86:ad:6e:
         3d:ca:09:9d:22:02:c8:f6:d8:85:cb:40:30:1f:5b:6a:42:ce:
         16:97:42:39:d3:d6:ca:e5:d6:94:c8:19:12:0e:be:8b:e8:34:
         cf:ea:06:ec:5a:4c:fa:c0:90:49:ec:38:1c:bf:d4:58:66:8b:
         b2:47:36:d6:93:a5:54:ed:40:be:68:0a:7d:d9:a9:61:bf:d8:
         82:be:a6:79:ef:fc:8b:24:dd:69:49:39:5d:02:18:5f:45:86:
         34:17:ec:95:bf:46:ba:07:94:f1:57:4f:32:e6:a6:60:30:0d:
         de:0c:43:f9:20:50:97:92:a3:cf:e2:4f:15:ce:91:8c:e1:07:
         a0:35:1d:22:16:4a:cc:6b:3a:06:7c:e7:0b:ff:0a:e7:2f:12:
         43:f9:c7:22:85:02:0e:3f:1d:98:d7:ab:3c:b5:bb:00:1e:fd:
         ca:57:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:43 2024 by rpki-client on console-fra.rpki-client.org