Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa
File:                     3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (raw, json)
Hash identifier:          Fb9y/FuVpFnJO7W0Q5uh/C8zaImFd4ZbicveEaIis/4=
Subject key identifier:   C3:E3:C6:B2:75:4E:61:EB:7A:8D:A9:7F:13:5A:83:B0:0E:01:EA:EC
Certificate issuer:       /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial:       736FA3E412F2BA136384097BA18E77B79FE5EDC3
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa
Signing time:             Thu 04 Apr 2024 05:12:30 +0000
ROA not before:           Thu 04 Apr 2024 05:07:30 +0000
ROA not after:            Thu 03 Apr 2025 05:12:30 +0000
asID:                     53130
IP address blocks:        187.120.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6f:a3:e4:12:f2:ba:13:63:84:09:7b:a1:8e:77:b7:9f:e5:ed:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
        Validity
            Not Before: Apr  4 05:07:30 2024 GMT
            Not After : Apr  3 05:12:30 2025 GMT
        Subject: CN=C3E3C6B2754E61EB7A8DA97F135A83B00E01EAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:76:41:5d:ca:3e:83:1f:de:1f:10:9e:47:
                    a8:f7:f7:31:e2:b3:fc:2c:f7:ae:76:df:d0:03:53:
                    f4:a1:56:e7:8c:4e:09:fc:a8:64:cf:95:cd:3d:38:
                    b2:2a:44:d0:97:3d:f2:6c:79:43:9c:55:9f:a3:86:
                    67:48:d0:7a:75:77:99:7f:cd:3a:9e:4e:7a:fa:44:
                    c8:db:1c:9b:2d:21:cf:69:e3:fb:3c:21:82:9d:6e:
                    db:91:f5:b2:cc:12:48:cb:9a:b2:dc:65:3b:0c:63:
                    8c:fa:de:7c:5e:24:01:31:a4:6c:5a:16:79:a7:7e:
                    91:cf:2e:2e:c7:38:d4:4f:98:37:f4:f7:dc:c0:1c:
                    21:fb:28:94:0e:25:8b:bd:d3:27:a3:4e:af:b1:37:
                    bb:82:67:14:40:41:32:b2:a1:c1:22:6c:7a:de:c9:
                    49:22:72:2f:a0:cd:d6:7c:14:65:c5:53:ba:b0:88:
                    2d:c3:cb:a9:12:d3:1f:da:57:7e:eb:7f:0b:cf:f6:
                    bf:f4:aa:f1:f6:81:6e:2f:cb:df:a8:de:45:e7:57:
                    a9:24:7b:d2:b1:53:73:ee:07:09:ba:ba:db:a9:78:
                    0c:f7:e7:91:93:9e:f2:66:19:b1:c5:19:99:45:40:
                    06:d1:f0:ad:83:df:62:94:1d:86:4f:e8:ee:aa:67:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E3:C6:B2:75:4E:61:EB:7A:8D:A9:7F:13:5A:83:B0:0E:01:EA:EC
            X509v3 Authority Key Identifier:
                keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:df:d7:61:cf:f1:8c:3e:69:90:51:c4:53:7c:43:ba:5d:68:
         1c:7a:5c:f0:eb:ce:73:ad:68:0a:37:6d:c7:95:d2:e5:2c:91:
         0f:51:50:b5:6d:77:3a:dd:9e:c6:ad:16:b5:e8:66:de:3f:f4:
         73:97:a3:79:71:68:f3:d8:59:5d:53:0b:a2:d8:ef:e7:c2:76:
         2a:ba:18:27:b9:1d:1c:b9:1d:5a:28:f2:6a:f1:d7:19:ae:86:
         94:35:e7:b6:92:e8:a5:8e:3b:4c:36:06:74:0d:b6:89:4e:1f:
         1c:1a:9b:50:0e:2c:21:e1:16:50:2a:86:4b:05:cd:05:e6:25:
         7b:12:de:cf:b3:cf:7a:2a:e5:d0:a4:83:37:30:47:f9:51:5c:
         a1:5a:db:20:4d:60:c4:e5:68:4e:d1:71:66:8e:79:fd:d5:ab:
         51:cc:3a:37:51:62:3d:5a:f6:b7:f2:ee:c5:f9:09:60:d2:2b:
         3c:4d:d5:d2:79:e4:60:3f:7a:05:af:23:5f:f8:84:38:b8:1b:
         88:db:27:e5:96:70:f0:26:5d:7a:6a:fa:a8:df:0d:d3:d6:33:
         e7:d5:cc:78:6e:0f:a5:f8:b0:0b:6a:02:5b:bb:86:6e:d6:28:
         6b:ee:eb:21:52:34:97:69:09:a4:e5:e8:3a:db:f4:9d:6e:e4:
         ae:fc:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:43 2024 by rpki-client on console-fra.rpki-client.org