Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa
File:                     3138362e3233372e33322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          dI80qLXCyR8y080oOidWxfrBLMTlOB9nIM3svWVEZkY=
Subject key identifier:   78:AD:2D:0B:50:07:06:F3:D2:CD:11:48:91:43:75:51:C5:24:69:88
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       1B208DEC62A6AF9EE7640FC56A2C542A60B777F5
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 04 Apr 2024 09:18:03 +0000
ROA not before:           Thu 04 Apr 2024 09:13:03 +0000
ROA not after:            Thu 03 Apr 2025 09:18:03 +0000
asID:                     28658
IP address blocks:        186.237.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:20:8d:ec:62:a6:af:9e:e7:64:0f:c5:6a:2c:54:2a:60:b7:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Apr  4 09:13:03 2024 GMT
            Not After : Apr  3 09:18:03 2025 GMT
        Subject: CN=78AD2D0B500706F3D2CD114891437551C5246988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:a2:23:9e:32:b1:87:23:cc:71:ec:ec:98:
                    f8:5e:e9:64:e9:ce:e8:5d:ac:79:af:cb:cb:02:15:
                    b4:ef:45:22:7d:fa:15:e6:c9:d3:92:04:57:1a:48:
                    26:29:6e:cc:49:d9:3c:16:66:61:81:db:52:2e:36:
                    48:aa:b0:e5:11:9b:93:b9:4d:d2:e7:3b:cc:c8:ee:
                    df:fd:44:cf:bb:6d:26:85:ef:74:ab:3a:50:18:b9:
                    d6:33:b2:f4:33:6a:4d:3a:74:20:60:e7:b8:5e:8d:
                    0f:cb:68:44:e6:36:fe:47:0d:12:11:0c:db:a2:12:
                    09:89:03:8d:3c:86:a8:86:7c:7b:66:cd:74:9e:87:
                    bf:ee:33:79:f2:ae:e4:31:93:ea:5f:fd:36:31:c5:
                    a0:9d:42:84:29:dd:d9:d4:9b:46:2d:1a:21:5e:68:
                    d0:5c:8f:68:6c:bc:9e:f2:4e:02:0a:c7:53:6b:dc:
                    b5:03:bd:83:6b:72:41:c3:e9:b7:5f:47:1a:53:17:
                    a3:f0:3d:d5:09:5b:f1:3c:32:cc:4f:be:fd:e4:14:
                    f3:f5:3f:5b:aa:c5:93:fc:95:37:5c:e5:46:3a:4b:
                    b5:84:f3:de:00:d6:64:e8:c0:94:c5:bb:58:f8:4d:
                    2b:b0:c0:70:2b:95:8b:6b:bc:4a:06:fb:20:97:71:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:2D:0B:50:07:06:F3:D2:CD:11:48:91:43:75:51:C5:24:69:88
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:81:bd:7f:92:85:61:f6:90:85:26:a2:fd:a1:b2:6a:aa:fe:
         45:12:20:b6:b8:06:94:ed:ab:75:c4:86:a7:30:9d:65:fe:67:
         1e:b2:cf:92:56:59:58:c2:65:66:0c:c4:9e:1d:35:1b:8b:f5:
         48:9f:19:bb:08:68:df:fb:ce:e8:15:5d:21:83:0d:75:4d:f7:
         e6:a1:81:f7:c9:62:a9:93:51:3d:20:d9:64:24:de:62:ae:0f:
         c9:05:c3:52:cd:13:ef:78:76:8c:db:a7:ef:c6:5e:8b:56:44:
         f6:76:63:57:ba:27:fc:88:7b:9d:dd:54:53:e3:02:44:c0:b8:
         eb:53:5f:46:e1:49:16:ce:e9:ab:b9:d3:60:65:be:a5:87:f4:
         4f:c1:92:c0:2a:22:46:e2:7e:93:91:1e:0b:61:f3:7f:04:c4:
         e8:6f:84:de:f8:93:55:a8:be:53:21:b3:01:4b:35:e5:8d:8d:
         08:43:9b:03:bf:2b:a4:f9:a3:a9:3f:f7:97:4a:84:01:ee:2c:
         21:9f:ef:ba:0a:82:f9:05:26:fe:62:f9:c6:0c:6a:fd:e1:7e:
         12:0d:30:1b:21:28:3b:85:f7:f4:47:a0:d3:53:7f:cf:d4:d3:
         fb:63:27:f7:87:1d:1e:93:12:c7:44:f0:63:c5:f1:7e:82:88:
         7a:f0:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:09 2024 by rpki-client on console-ams.rpki-client.org