Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131362e302f32322d3232203d3e203238323133.roa
File:                     3138392e3131332e3131362e302f32322d3232203d3e203238323133.roa (raw, json)
Hash identifier:          U0ScGh+EGDPI3+BjiUoVg4GIjzB7at/BvKuSt/GvdNE=
Subject key identifier:   F7:7F:89:4F:12:23:2E:53:A2:44:5F:F1:86:3A:FB:9B:3D:0F:48:0A
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       71B6A778024534E70EAD9D41C58A30911BE65769
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131362e302f32322d3232203d3e203238323133.roa
Signing time:             Thu 27 Jun 2024 20:41:39 +0000
ROA not before:           Thu 27 Jun 2024 20:36:39 +0000
ROA not after:            Thu 26 Jun 2025 20:41:39 +0000
asID:                     28213
IP address blocks:        189.113.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 08:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:a7:78:02:45:34:e7:0e:ad:9d:41:c5:8a:30:91:1b:e6:57:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 27 20:36:39 2024 GMT
            Not After : Jun 26 20:41:39 2025 GMT
        Subject: CN=F77F894F12232E53A2445FF1863AFB9B3D0F480A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:32:d5:2a:5b:6a:d2:fa:d9:10:b3:0b:8f:
                    b6:b3:3d:a1:7e:fb:8d:30:c7:27:58:39:07:e9:49:
                    0d:a0:51:43:8d:54:2c:02:1a:ba:e7:4e:7c:69:89:
                    77:0c:13:ff:bd:97:fe:5a:df:2d:70:ee:89:e1:02:
                    b4:e0:ee:0c:ba:52:cf:88:74:7f:55:f3:5b:27:68:
                    fa:5b:e6:59:69:f5:9d:f2:08:78:11:ad:9e:a0:f8:
                    ec:05:b1:b1:93:bf:b2:4f:26:6b:c2:7b:9e:e9:94:
                    2c:c8:46:a8:40:46:2e:68:79:a0:5c:1f:5a:7d:b6:
                    f9:4c:6c:c1:fa:99:bd:27:f5:ca:1a:66:97:89:44:
                    d4:de:1e:f4:41:4c:cd:ea:8f:06:72:a1:00:ba:96:
                    e3:5a:6e:a8:d4:9c:55:c7:2d:9c:9a:9c:da:4c:b1:
                    71:cd:b6:e2:14:8a:08:1f:8e:35:70:ec:12:f5:0b:
                    f8:32:9e:f3:fe:30:78:32:a7:98:b9:4a:12:83:11:
                    88:e1:09:cc:0f:f4:a6:ee:d1:2a:a8:93:ca:88:19:
                    b9:2a:7a:b8:57:b8:93:8d:57:3c:39:4d:48:3f:ae:
                    1f:ed:e9:0e:26:ab:de:15:33:ed:5c:97:42:3a:f0:
                    38:7a:77:00:3c:53:14:c0:5c:f9:25:ff:f0:26:1c:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7F:89:4F:12:23:2E:53:A2:44:5F:F1:86:3A:FB:9B:3D:0F:48:0A
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3131362e302f32322d3232203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:ac:9c:b8:6e:b9:79:d5:6d:5d:4f:f2:5f:0a:44:b8:4d:3e:
         8d:d0:82:2d:87:a3:42:4d:e8:7f:9a:79:43:61:19:b2:cd:b8:
         19:c1:5a:f2:c6:75:c2:a8:11:6e:96:2f:aa:18:13:26:1b:0f:
         3e:5b:ce:b6:9f:71:62:e4:29:1e:f6:59:b0:99:91:bb:32:c4:
         72:f1:96:f6:64:39:2b:0b:ec:b2:a7:12:f1:26:72:56:12:da:
         1f:25:0f:0a:17:f3:af:b6:9e:67:c4:a2:73:d6:1d:be:8e:c7:
         34:3b:1c:84:f7:2e:de:be:b2:59:3f:e5:d8:65:c9:58:99:09:
         15:96:5e:51:8d:be:c8:89:3b:6f:ad:5e:cf:20:0f:1e:a4:21:
         13:ca:dd:46:5b:2f:32:d0:8a:36:73:48:80:bb:37:98:c7:cd:
         bd:ce:07:dd:8d:d1:c9:54:56:6f:68:9d:ac:40:7b:7f:b3:b0:
         75:3f:54:b7:fd:60:42:41:41:01:a1:85:ae:65:f6:14:39:ee:
         69:d9:50:51:45:ea:80:99:e2:98:2d:b3:79:06:c3:85:0e:54:
         47:5e:5b:d0:dc:97:b9:74:3f:d6:b6:ab:57:e6:2e:ec:40:8c:
         c7:e8:f1:b0:36:a3:a9:83:69:9b:41:11:5b:25:b5:55:7a:76:
         06:b6:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 07:42:27 2024 by rpki-client on console-ams.rpki-client.org