Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
File:                     3138392e33392e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          NMp+jDxeaY4W6VNY1y+KUdTBHWvDNH/dZu6Iw+reiFw=
Subject key identifier:   49:9E:00:34:D5:E3:E2:34:ED:9C:11:0A:3B:B7:24:AD:6C:F6:2A:A6
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       3F3782E044F5FE806F5CBE4FA623AD4EA665020C
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 04 Apr 2024 09:18:03 +0000
ROA not before:           Thu 04 Apr 2024 09:13:03 +0000
ROA not after:            Thu 03 Apr 2025 09:18:03 +0000
asID:                     28658
IP address blocks:        189.39.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:37:82:e0:44:f5:fe:80:6f:5c:be:4f:a6:23:ad:4e:a6:65:02:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Apr  4 09:13:03 2024 GMT
            Not After : Apr  3 09:18:03 2025 GMT
        Subject: CN=499E0034D5E3E234ED9C110A3BB724AD6CF62AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:04:31:8b:3d:dc:88:8b:5c:c3:88:e1:f0:
                    2c:f4:42:a0:aa:58:34:22:f9:d2:80:9d:6a:c6:39:
                    88:3b:96:06:44:5a:fb:14:1a:4d:6b:96:08:72:ac:
                    41:ae:02:10:05:83:06:d8:e5:15:e5:29:69:4d:55:
                    63:cb:03:e8:2e:ad:70:7e:0e:32:b1:51:98:95:11:
                    e4:f3:ae:e0:f4:90:b4:83:cc:33:f2:6b:01:3d:a4:
                    bc:72:0e:3b:ca:4f:fd:06:4e:73:eb:e8:00:56:fb:
                    3f:45:a9:31:e6:9c:19:56:d2:fc:79:3d:1c:09:e5:
                    27:f0:39:79:3e:80:77:35:fb:4e:0b:e3:b6:9c:2e:
                    c8:6d:37:c1:37:da:63:32:16:63:fc:f2:0c:75:6c:
                    4f:e7:88:a5:86:72:ea:df:6e:49:3e:40:8e:35:b0:
                    75:82:30:e2:e1:73:e1:94:13:3d:ca:59:a0:bd:a8:
                    c4:dd:90:27:77:4e:90:9c:2e:b3:19:2a:e4:66:52:
                    ea:f0:b6:78:53:f0:ec:2a:1f:1a:a3:c6:ee:ee:59:
                    70:60:6d:32:09:32:7e:03:67:95:fa:08:4e:b8:f3:
                    75:16:63:86:3a:a0:13:17:89:47:14:2a:69:0f:9a:
                    32:55:f5:93:68:c7:dc:e2:a3:f9:d9:8e:47:b3:d8:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9E:00:34:D5:E3:E2:34:ED:9C:11:0A:3B:B7:24:AD:6C:F6:2A:A6
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:d3:1b:73:ca:aa:07:09:7b:40:85:48:2d:cd:e2:f1:cf:
         22:b0:1d:64:46:dc:f1:7d:0d:42:2f:be:cc:7e:0b:e3:a4:c3:
         eb:c9:a2:9c:08:8e:75:5b:15:96:f6:c6:80:54:a2:5e:68:a9:
         65:cd:8a:63:3c:28:3c:91:7c:1d:ff:d2:ad:ee:95:a3:d1:56:
         a7:64:35:d6:e8:dd:35:c3:f5:11:4e:f4:bc:13:b2:55:64:7d:
         ba:41:4d:03:42:7d:08:b3:a0:15:03:d1:3a:2a:5b:12:15:fc:
         bb:7c:04:fd:06:cb:b5:d4:8e:8d:3d:a4:0c:d6:e2:7e:97:99:
         ed:cb:91:fd:58:2b:24:f3:ac:9b:b3:32:79:7d:65:60:b6:32:
         88:8e:ec:a3:b0:b7:d1:86:96:de:99:33:ab:43:79:40:9e:e2:
         9c:82:11:d3:d7:4d:76:2c:05:73:0f:1c:6c:a8:97:e1:93:27:
         91:fd:6d:32:c2:ce:4d:68:bb:e0:fd:d1:72:92:6d:b6:8c:39:
         19:b0:d1:16:44:d6:d2:21:1b:4f:7c:0d:3d:b7:8e:4c:18:39:
         77:4c:c4:a6:b8:43:b0:18:ae:86:ab:ed:24:b5:11:e5:4c:8e:
         a9:ef:ac:c3:4a:5c:d3:ec:72:58:fc:99:97:62:94:31:2a:35:
         d6:72:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org