Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32312d3231203d3e203238323133.roa
File:                     3138392e3131332e3131322e302f32312d3231203d3e203238323133.roa (raw, json)
Hash identifier:          UKzbMPdpUwm8o4H4U10jll3NF0mHCOMTockczqsk3B8=
Subject key identifier:   51:DF:BA:B3:9D:8F:81:64:93:A5:C9:CD:BC:D6:EF:DA:79:F6:2F:2D
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       150D5E0828AE346C099D4A39A0C90E82888AB27C
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32312d3231203d3e203238323133.roa
Signing time:             Thu 27 Jun 2024 20:40:53 +0000
ROA not before:           Thu 27 Jun 2024 20:35:53 +0000
ROA not after:            Thu 26 Jun 2025 20:40:53 +0000
asID:                     28213
IP address blocks:        189.113.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0d:5e:08:28:ae:34:6c:09:9d:4a:39:a0:c9:0e:82:88:8a:b2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 27 20:35:53 2024 GMT
            Not After : Jun 26 20:40:53 2025 GMT
        Subject: CN=51DFBAB39D8F816493A5C9CDBCD6EFDA79F62F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:ef:bd:e5:a9:f8:ff:7e:52:25:26:21:c5:
                    a4:b3:57:7d:be:69:5e:be:90:ba:1a:ba:4f:3c:5a:
                    cd:c8:b2:fb:4b:d1:ed:99:fb:88:6f:5e:22:ef:01:
                    fd:2e:86:46:26:f4:01:e6:a6:d7:f1:6c:92:bc:17:
                    ed:c6:bc:4b:fe:15:e4:88:a4:8c:27:9c:9d:6d:33:
                    79:03:2e:a7:8c:19:af:31:df:34:d8:f7:09:53:22:
                    08:3a:06:52:9c:f7:f7:56:b1:c8:ae:cf:eb:e7:33:
                    64:b8:d1:61:1e:bc:47:90:c5:76:27:bd:44:48:0a:
                    df:e5:3f:41:c6:4f:c7:5e:0e:6a:ba:93:ba:c7:af:
                    a6:9e:81:1f:c6:b1:59:48:e1:2f:f0:12:2b:d9:94:
                    b1:b6:b1:7c:41:39:60:ca:4b:aa:1a:93:07:d8:cc:
                    8a:3e:4e:10:89:7b:13:08:77:ce:77:fe:47:db:a3:
                    d8:e3:c7:b1:cc:fc:a7:9e:79:03:56:8c:35:29:ed:
                    6f:23:28:5b:3a:15:74:ba:8d:fa:6a:60:1d:df:33:
                    96:50:5b:0a:aa:5c:dd:ff:31:94:b1:d3:0b:18:16:
                    33:ff:88:33:5c:1d:31:fa:6f:81:27:92:70:96:59:
                    54:b8:79:b2:c6:00:29:5d:e6:b7:eb:8a:c9:b4:7a:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DF:BA:B3:9D:8F:81:64:93:A5:C9:CD:BC:D6:EF:DA:79:F6:2F:2D
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32312d3231203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:2c:10:43:79:0d:23:b7:e9:f2:48:05:03:85:bf:01:5b:
         59:f6:ab:82:14:9f:15:cf:e9:93:5d:66:2c:43:4b:23:08:d9:
         2f:60:56:a8:ba:92:e9:c4:9a:d5:22:8a:11:15:aa:96:20:60:
         ec:d1:6d:b5:3d:73:d4:1a:56:dd:39:ef:3a:02:26:0b:ce:ce:
         50:fc:f8:04:b0:01:3c:bc:ac:a3:99:30:7f:35:6b:ea:b9:e0:
         a3:79:cf:48:34:ac:0b:fe:9f:d2:82:70:0e:73:c7:f9:3f:8b:
         d7:c4:a3:37:c7:d2:21:7b:14:83:02:62:6e:98:09:d8:f4:54:
         1e:db:37:9b:74:6f:5e:28:35:5b:df:6d:34:01:ee:1b:51:1f:
         87:fd:5d:ce:05:42:75:09:7e:da:5d:51:6b:ba:29:26:bb:ca:
         df:68:6e:fe:b4:3e:31:ff:8a:a3:f1:38:77:95:20:b3:02:31:
         a0:6c:95:d6:3b:c3:ca:5e:73:b9:35:3a:95:e7:51:6a:7d:74:
         5e:47:f2:fb:84:c5:cd:05:16:87:42:bd:e5:f0:98:cd:71:08:
         db:7b:f8:51:17:c0:39:24:48:77:76:7d:a1:be:74:6e:e8:17:
         7f:15:cf:0e:33:96:22:a7:b5:c2:e3:73:83:53:56:03:2b:f3:
         0c:ae:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:50:54 2024 by rpki-client on console-fra.rpki-client.org