Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
File:                     3138372e39342e3131322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          NpdY+3d9kZai+uCyukzMbW8E4YoBhaj0QtvH27YR+7c=
Subject key identifier:   81:0D:23:AA:70:4A:39:6B:84:2A:1E:CB:D5:C2:2F:2D:86:51:9F:F2
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       23C28FC68153F276BDF57E9AEB40EF1B44DE4FB4
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 04 Apr 2024 09:18:04 +0000
ROA not before:           Thu 04 Apr 2024 09:13:04 +0000
ROA not after:            Thu 03 Apr 2025 09:18:04 +0000
asID:                     28658
IP address blocks:        187.94.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c2:8f:c6:81:53:f2:76:bd:f5:7e:9a:eb:40:ef:1b:44:de:4f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Apr  4 09:13:04 2024 GMT
            Not After : Apr  3 09:18:04 2025 GMT
        Subject: CN=810D23AA704A396B842A1ECBD5C22F2D86519FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:aa:f4:cb:a8:0e:c3:e5:d1:2a:6c:92:bf:
                    94:21:c1:c3:42:e2:55:eb:1d:cb:ff:3b:b6:5d:6d:
                    2b:ac:88:21:4a:c9:a6:71:2e:ee:40:62:2a:ff:f2:
                    1c:0c:dd:38:2f:7e:3a:a7:17:61:49:0d:d4:0a:f9:
                    0d:97:14:1b:7d:45:72:59:0c:b4:be:24:38:d4:80:
                    68:29:c9:85:5a:24:37:31:bc:cd:94:75:22:98:41:
                    4a:f7:fd:50:30:d1:9f:e8:ef:7c:b3:ec:40:69:f0:
                    b5:0f:d5:ee:23:54:70:88:45:d8:79:89:b1:70:2e:
                    36:f9:9e:72:6c:70:f3:ee:02:40:c2:38:2b:bd:d2:
                    db:22:1e:af:f2:10:9b:c0:5a:1b:db:c2:8a:54:24:
                    b3:56:5b:16:07:4d:cb:35:02:1e:ec:e5:3a:b2:19:
                    99:5a:c4:af:c5:70:48:a4:f8:b6:39:22:c2:43:c8:
                    d8:a3:9b:9a:9e:be:f8:c9:2b:59:3a:39:b6:1f:61:
                    3f:70:f2:36:69:6d:5e:65:8b:9d:6e:bf:a7:11:f1:
                    b8:b0:b5:69:43:9e:2d:3c:d3:48:76:3c:89:18:62:
                    9a:bb:db:19:43:88:cc:23:e0:6b:28:d4:b3:50:18:
                    c4:56:22:f6:63:12:20:4e:93:81:1e:35:64:8c:b4:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0D:23:AA:70:4A:39:6B:84:2A:1E:CB:D5:C2:2F:2D:86:51:9F:F2
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:6c:68:5f:c9:97:fd:11:00:f7:d7:cb:3d:c2:3f:46:76:
         7a:38:1c:45:01:1c:9d:c8:51:5d:c2:b7:0c:bc:69:46:8d:14:
         29:e2:16:c7:93:84:71:27:5f:a3:99:53:fb:1c:d9:41:7b:67:
         ef:5b:d1:5a:8c:e4:cb:21:09:40:72:5b:4b:36:4b:04:2b:eb:
         3e:fe:35:9d:da:91:a9:c5:10:91:e0:98:3d:d6:59:45:d3:be:
         05:00:46:6e:0d:b7:5c:7c:0c:19:65:89:2d:88:37:41:66:29:
         09:2a:7e:06:d7:5a:53:07:db:17:93:21:35:dd:d4:21:91:4d:
         83:08:31:9c:b4:b5:5f:9a:d9:bb:b3:e4:4c:8a:bf:a3:55:9a:
         14:bc:35:2d:36:c9:72:74:26:61:b0:54:07:a6:8e:56:80:af:
         22:6d:fe:08:d2:8f:ad:82:69:d7:bd:7c:74:66:5b:f3:f0:01:
         d1:7f:a3:a1:74:19:12:0a:9c:dc:44:34:2f:ca:10:f3:0f:95:
         e9:ca:39:9b:5b:3a:c8:8a:f1:72:34:18:19:00:d9:fc:aa:28:
         c5:86:96:73:cb:5a:95:7c:62:f1:c2:1e:7c:cd:0c:7e:54:b4:
         28:4d:b1:9e:4a:a9:5b:00:9c:e1:2a:67:6d:b7:76:2b:83:79:
         45:06:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org