Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3132302e302f32312d3231203d3e203238323133.roa
File:                     3138392e3131332e3132302e302f32312d3231203d3e203238323133.roa (raw, json)
Hash identifier:          t8wZEOp3c4+WEtrazmjxiBG3hfeusspfwLaSX6zr+ro=
Subject key identifier:   0E:7B:C5:3C:EC:74:4E:97:9C:98:F8:DF:C8:EE:FF:D2:24:AA:7D:C4
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       5CD969D5E19847263204886BBC632D6C5190FA68
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3132302e302f32312d3231203d3e203238323133.roa
Signing time:             Thu 13 Jun 2024 13:49:27 +0000
ROA not before:           Thu 13 Jun 2024 13:44:27 +0000
ROA not after:            Thu 12 Jun 2025 13:49:27 +0000
asID:                     28213
IP address blocks:        189.113.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d9:69:d5:e1:98:47:26:32:04:88:6b:bc:63:2d:6c:51:90:fa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 13 13:44:27 2024 GMT
            Not After : Jun 12 13:49:27 2025 GMT
        Subject: CN=0E7BC53CEC744E979C98F8DFC8EEFFD224AA7DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:cf:39:66:57:58:6b:c4:2b:a2:b5:77:5d:
                    d3:c4:e4:62:69:44:18:78:ce:f2:c7:b7:1f:d5:4a:
                    42:f7:5f:9e:e5:10:25:30:68:69:b1:11:81:ae:31:
                    31:ca:78:0a:0b:8b:9a:67:97:f9:6c:38:c4:47:cc:
                    59:09:a8:43:4d:84:ae:06:f6:7d:04:67:4d:01:25:
                    0c:6d:36:d9:03:6b:aa:ca:68:2f:db:d2:d0:70:47:
                    4d:e6:a2:18:46:a4:8a:d2:e6:7c:d6:4b:34:10:6b:
                    b5:a6:ab:6f:b3:0a:29:a4:38:c5:51:bd:e8:13:11:
                    a4:8c:b3:6c:24:77:36:67:f8:cd:b0:26:48:23:2c:
                    c3:36:e8:e4:18:01:9a:d6:96:9a:5e:29:13:bd:f9:
                    9f:bd:d9:01:0f:bf:60:ed:46:91:bc:a6:fa:ce:1f:
                    94:b0:75:ad:64:a2:0d:89:fd:17:ce:3a:fd:90:a4:
                    0c:90:bc:17:ab:3d:3a:bb:29:83:fe:74:34:1b:8e:
                    9a:b5:9f:ee:32:2b:3d:f3:65:94:9f:19:35:ed:f8:
                    1e:38:22:97:d7:fb:c6:2f:d7:34:d9:2d:9c:8a:52:
                    0f:d2:15:c2:76:02:4f:64:de:f3:23:7e:26:95:03:
                    ae:4a:96:d7:9f:b9:ac:9d:f8:c0:67:6d:7b:4b:9e:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7B:C5:3C:EC:74:4E:97:9C:98:F8:DF:C8:EE:FF:D2:24:AA:7D:C4
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3138392e3131332e3132302e302f32312d3231203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:3f:c1:39:0a:04:c5:aa:42:21:14:0d:87:66:b3:9b:f8:
         62:7b:8a:a4:d9:b5:bc:4f:f4:21:a6:08:ca:e3:04:f3:26:99:
         b8:3b:8e:a2:33:e8:7f:ef:a9:bb:de:05:e0:0a:37:e2:8f:fb:
         ec:76:c5:a6:9a:03:0f:b5:ba:f7:94:51:78:02:da:83:36:d1:
         ed:56:c3:68:51:b1:21:0a:f0:49:24:e3:85:ce:61:35:21:0e:
         e8:43:b3:14:c3:0d:c8:05:72:3d:e4:30:e7:eb:e6:09:42:be:
         26:bd:aa:a2:a8:32:e2:b5:ff:61:49:24:fa:48:d5:c5:82:06:
         d2:4b:d3:5f:a4:2c:2e:81:a3:ce:36:31:bb:0c:a5:2d:19:e6:
         6e:38:45:ac:5c:67:28:db:26:f5:cd:6c:9c:fc:67:fe:2e:72:
         f3:21:17:a1:7c:3f:6c:1c:ae:e6:64:77:fc:7d:29:76:00:a3:
         c2:f2:4c:ea:b7:18:62:a7:ce:37:f4:a6:8f:6a:1f:a6:e3:05:
         b6:99:f5:33:38:2e:5e:c1:64:20:4f:3e:82:e5:71:8b:49:57:
         50:80:b8:19:d8:fe:89:d4:31:89:aa:81:05:1f:77:9c:1c:11:
         aa:82:7c:2d:47:d1:3a:f2:75:dd:41:e7:8e:de:44:1b:bf:7c:
         73:76:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:23 2024 by rpki-client on console-fra.rpki-client.org