Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32302d3230203d3e203238323133.roa
File:                     3138392e3131332e3131322e302f32302d3230203d3e203238323133.roa (raw, json)
Hash identifier:          u3p47aN/G9l0/Ly3lC4sFYNj1qbTqJJRqNmM6ST389I=
Subject key identifier:   A4:C6:76:74:80:E9:E9:8E:C6:28:D4:30:0B:A1:2D:A5:80:4C:84:38
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       2E21494089B96C0871A6CE3C30D5456B7A16453E
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32302d3230203d3e203238323133.roa
Signing time:             Thu 27 Jun 2024 19:53:15 +0000
ROA not before:           Thu 27 Jun 2024 19:48:15 +0000
ROA not after:            Thu 26 Jun 2025 19:53:15 +0000
asID:                     28213
IP address blocks:        189.113.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 08:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:21:49:40:89:b9:6c:08:71:a6:ce:3c:30:d5:45:6b:7a:16:45:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 27 19:48:15 2024 GMT
            Not After : Jun 26 19:53:15 2025 GMT
        Subject: CN=A4C6767480E9E98EC628D4300BA12DA5804C8438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:a0:e3:06:78:86:b0:f5:f1:90:b7:a1:3c:
                    0c:13:a3:55:7f:8a:ad:7b:b4:64:cc:f6:aa:42:d4:
                    f2:15:4f:29:f2:1b:e8:51:b2:a1:cd:6e:73:42:c0:
                    5a:a6:4c:ce:86:01:94:be:5b:db:68:fa:94:45:c8:
                    64:67:03:7d:82:e2:6a:80:cf:c1:c8:b8:0e:9c:9e:
                    82:a5:09:99:eb:a1:ba:20:44:43:c2:cc:b1:a3:74:
                    86:99:1a:5f:8d:f3:eb:b6:58:c9:98:e0:25:c3:e2:
                    a1:87:23:41:18:2b:db:3b:65:7c:24:48:d7:6a:65:
                    39:34:c6:58:66:5f:7f:d9:a1:36:12:83:43:f7:e0:
                    9b:e9:df:be:00:e1:7c:06:47:81:cf:8b:96:f4:63:
                    e0:b7:6f:dd:16:9e:dc:7e:58:27:0b:99:46:cf:99:
                    e4:cc:86:9c:7b:03:f5:db:73:1a:8f:7a:18:a1:4b:
                    e3:12:c1:dc:51:5d:eb:41:ed:f0:fc:03:8f:97:59:
                    aa:1d:13:cd:4d:1b:05:36:18:b5:a1:79:20:f7:92:
                    62:da:96:0e:4a:b0:18:93:59:85:a0:90:8a:e6:39:
                    ac:5b:fd:6a:6d:9e:5a:57:fe:5b:2c:3b:ee:45:c1:
                    34:0c:96:d1:7d:78:95:ea:74:53:de:fd:85:8a:4b:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C6:76:74:80:E9:E9:8E:C6:28:D4:30:0B:A1:2D:A5:80:4C:84:38
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32302d3230203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:5e:8c:c1:e7:b1:8f:80:79:95:1c:79:d6:63:6f:04:45:
         e9:20:12:f3:79:f1:2f:3f:00:ad:3c:4f:28:cd:b1:48:6c:cb:
         f7:e3:4d:5f:22:52:8d:67:91:30:82:fa:f2:c3:2e:a1:15:8d:
         29:67:7d:6a:d5:11:70:22:28:13:34:94:87:0a:c0:4f:e1:f8:
         88:ee:a4:30:f6:75:46:f9:48:74:bc:f8:41:4e:63:9b:92:7a:
         6d:3d:ca:d0:6f:7e:e0:d6:10:47:4d:e5:3d:ac:6d:87:8f:b4:
         13:f1:3b:47:23:d9:c1:26:61:01:64:63:66:39:60:4e:35:52:
         f9:02:d1:19:a7:32:b8:c4:f3:d4:b1:49:ec:79:e2:b5:3a:50:
         62:28:bb:57:a9:a6:09:10:7b:e6:c1:73:a7:bc:b8:53:dd:cc:
         f0:df:79:30:06:74:77:fb:d2:c6:35:1c:48:76:e4:c9:2d:97:
         4c:b5:b8:fb:32:ef:7b:62:8b:1a:ea:d6:30:92:dd:84:63:c8:
         63:30:1d:f0:3e:e1:d6:52:e9:de:f4:88:31:ff:0b:0d:4f:c2:
         3c:b8:e6:60:f9:9f:c4:86:93:1e:b4:28:fe:34:d4:30:65:44:
         44:b1:41:2b:94:6a:99:4e:00:15:1d:85:a4:dc:70:a1:a7:7d:
         f9:0b:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 07:42:27 2024 by rpki-client on console-ams.rpki-client.org