Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32332d3233203d3e203238323133.roa
File:                     3138392e3131332e3131322e302f32332d3233203d3e203238323133.roa (raw, json)
Hash identifier:          APoZzlB3d9ow2ZGi+bkzYIpEICoHiwOCSCR/vBiE29s=
Subject key identifier:   69:5B:60:6E:41:1E:60:56:E8:81:CD:B3:D3:C8:0C:D7:D4:61:EB:60
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       72BAD7BDA45087488D9AEAB15A93F8FB027C9450
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32332d3233203d3e203238323133.roa
Signing time:             Thu 13 Jun 2024 13:47:55 +0000
ROA not before:           Thu 13 Jun 2024 13:42:55 +0000
ROA not after:            Thu 12 Jun 2025 13:47:55 +0000
asID:                     28213
IP address blocks:        189.113.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ba:d7:bd:a4:50:87:48:8d:9a:ea:b1:5a:93:f8:fb:02:7c:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 13 13:42:55 2024 GMT
            Not After : Jun 12 13:47:55 2025 GMT
        Subject: CN=695B606E411E6056E881CDB3D3C80CD7D461EB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:7d:42:36:51:27:62:91:e2:be:5c:5f:de:
                    6a:a7:8e:87:77:3c:d5:2b:7c:a9:aa:77:79:ac:dd:
                    bc:7b:d3:d6:50:d7:e6:29:b3:37:c2:3f:86:4f:d4:
                    0a:5b:b4:09:8a:a8:c4:4a:bd:f9:9d:75:ed:e4:99:
                    8e:34:a8:21:7f:88:bd:27:68:09:1f:11:3e:bd:cd:
                    62:9f:07:5d:02:67:18:d1:c7:4e:e7:47:f1:bb:be:
                    b0:1f:89:b2:a1:ea:4b:d7:de:9b:33:ce:33:7f:c4:
                    21:e0:54:02:f7:ae:4b:19:5f:f8:7b:b3:6e:9d:34:
                    c6:6b:d3:2d:fb:54:db:18:a3:a5:46:cd:e3:91:9c:
                    26:bd:80:73:81:35:f0:b1:31:fa:54:bb:8e:a1:1f:
                    ca:cd:07:c4:86:af:80:5b:72:cf:98:2e:04:de:6f:
                    cb:8e:2b:13:fb:af:87:10:ff:88:c5:6b:af:6e:43:
                    23:b2:28:db:b7:bc:5c:82:98:e0:d1:4b:f1:3d:d2:
                    c0:74:39:b1:1b:c3:93:4b:fa:77:51:f4:91:3f:a4:
                    52:40:13:66:16:c7:9f:aa:9d:ae:88:37:9b:8d:c5:
                    50:70:dc:be:36:b0:a6:be:1d:63:a5:a9:71:69:dc:
                    e6:1a:86:53:63:31:ad:e5:3e:85:84:3f:89:cf:6e:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5B:60:6E:41:1E:60:56:E8:81:CD:B3:D3:C8:0C:D7:D4:61:EB:60
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131322e302f32332d3233203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:69:eb:62:f7:dc:de:fd:24:0e:e5:93:dc:b1:3b:f5:4c:c4:
         c6:62:ac:47:bd:3e:f0:e0:a5:fa:a9:4e:0c:42:fe:5c:5c:d1:
         37:31:2d:c6:ac:fd:69:6f:bf:0e:e1:c8:66:c3:ef:31:73:fa:
         3d:89:33:0e:f6:7f:6a:b6:af:2e:ed:09:9c:26:2f:7f:1b:fc:
         81:83:28:29:35:0a:6f:a9:a7:ce:26:a6:89:56:1e:43:75:7e:
         d7:3a:4e:05:d8:97:3b:4c:27:2c:ce:14:d2:06:cd:4d:ae:92:
         50:2e:ef:bb:52:67:58:95:79:cf:24:39:37:7a:99:23:99:11:
         ef:4c:81:2c:bd:5b:86:38:dc:f6:f8:1d:1c:9d:16:fb:e7:5f:
         e8:62:1b:0a:ca:9c:4d:f9:b9:71:f7:e6:6a:0d:95:17:d0:39:
         0a:a1:fa:03:52:61:b2:0a:65:67:03:e5:7e:80:ef:98:4d:87:
         8d:db:57:64:26:33:d7:23:07:43:74:63:f4:af:fc:5e:ed:f5:
         4e:11:80:4d:dd:04:c0:ba:f4:56:7e:ee:b0:14:40:e4:12:b8:
         69:ae:ea:7c:2c:5b:fa:31:8c:1a:be:cc:f5:30:58:df:1c:c5:
         da:84:b5:59:02:93:3c:17:6d:3e:bb:c3:02:78:7d:58:16:3c:
         40:2e:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org