Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/3138392e35302e3231312e302f32342d3332203d3e20323730363232.roa
File:                     3138392e35302e3231312e302f32342d3332203d3e20323730363232.roa (raw, json)
Hash identifier:          69fEKnPEZnbMrMkwRXAiOL28UVzd2w53clS+DXg6XsQ=
Subject key identifier:   3E:70:81:73:CF:7C:F7:AF:BD:7F:68:43:FA:76:0B:55:22:58:CF:FB
Certificate issuer:       /CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
Certificate serial:       136B06D336628091BEA90AD827D6E3156FB9B716
Authority key identifier: 6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/3138392e35302e3231312e302f32342d3332203d3e20323730363232.roa
Signing time:             Fri 13 Sep 2024 17:55:25 +0000
ROA not before:           Fri 13 Sep 2024 17:50:25 +0000
ROA not after:            Fri 12 Sep 2025 17:55:25 +0000
asID:                     270622
IP address blocks:        189.50.211.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6b:06:d3:36:62:80:91:be:a9:0a:d8:27:d6:e3:15:6f:b9:b7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
        Validity
            Not Before: Sep 13 17:50:25 2024 GMT
            Not After : Sep 12 17:55:25 2025 GMT
        Subject: CN=3E708173CF7CF7AFBD7F6843FA760B552258CFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:ef:c4:4d:eb:41:ad:2d:8b:c6:de:28:7d:
                    8c:34:6b:7e:a6:ff:0d:7d:2e:fe:26:4d:74:4b:a0:
                    0b:8c:fe:7f:ce:e4:9b:1a:98:9b:c2:f6:43:c3:66:
                    24:e7:13:33:38:dc:63:80:f5:9d:4e:72:f3:c5:7d:
                    6a:38:a4:06:68:0f:ed:4a:ad:70:a9:09:2a:2c:52:
                    33:60:31:03:53:16:bd:5d:1d:f5:3a:bc:2b:55:f0:
                    ba:70:73:55:8d:b0:84:7d:9d:5a:b0:b1:99:77:cd:
                    65:3a:f4:4a:f8:12:cb:c0:c8:4c:db:2d:53:ed:4c:
                    9f:69:91:5f:83:33:b0:af:95:ae:01:4c:d0:98:31:
                    46:5f:46:9a:ac:32:8d:22:44:6b:d1:41:45:34:b5:
                    9b:a3:cc:4d:7d:ed:a4:0b:eb:14:5d:83:2b:2d:73:
                    63:45:a5:62:4b:05:3e:68:bf:b3:04:77:0a:df:f6:
                    03:b3:e2:93:f9:54:61:d1:59:6b:bd:2d:86:0b:0a:
                    24:e7:29:d7:e3:db:91:3f:01:52:be:79:d2:8c:4c:
                    11:24:65:fb:c2:45:4f:16:9b:b5:16:ec:77:7b:0c:
                    74:58:c0:90:29:65:b2:c5:d1:18:a5:bc:58:fc:df:
                    0b:bb:f0:b5:b1:b9:ad:00:ad:fc:45:df:0f:e7:38:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:70:81:73:CF:7C:F7:AF:BD:7F:68:43:FA:76:0B:55:22:58:CF:FB
            X509v3 Authority Key Identifier:
                keyid:6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/3138392e35302e3231312e302f32342d3332203d3e20323730363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:90:4b:5a:32:da:e3:0f:cf:49:11:76:bc:92:0c:96:78:ea:
         3c:77:3f:22:77:02:af:fb:11:c6:4c:14:a5:67:cf:09:e3:8e:
         09:ef:10:f4:a2:60:8b:00:10:d0:83:8f:37:42:ad:f5:04:ac:
         d7:d5:b4:a7:75:ec:10:6d:d6:cc:22:fa:b5:7a:e4:ea:01:c1:
         6b:23:81:58:b0:e8:d7:2a:23:04:93:bf:10:eb:b6:0d:4c:42:
         c1:4d:04:2b:61:26:48:4d:93:55:c1:09:e2:17:7c:79:d8:99:
         07:17:6f:cd:d2:c7:5d:10:77:5d:4c:ca:91:3d:c2:ab:b0:76:
         ee:0c:18:b0:a3:7a:74:42:11:20:30:49:2b:60:45:87:fa:ce:
         87:9a:fa:49:c9:ad:06:78:d8:48:2e:43:3e:6d:cf:92:2f:4b:
         e2:06:9b:fe:a8:e9:a0:b3:b1:4c:d6:89:8f:79:c5:7a:6a:20:
         a7:2b:f1:f4:5a:fb:83:92:29:36:65:11:3f:74:d1:68:81:05:
         69:d0:86:94:87:62:c8:3d:4c:7f:3a:3d:86:ea:b1:8b:8c:ff:
         c9:0f:f7:ec:47:b8:f4:a4:d6:f0:c0:00:55:7e:37:08:5d:e1:
         9f:75:4c:c4:c1:32:3b:1a:2a:b1:8d:c2:81:6a:e7:39:49:bd:
         9b:61:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:57 2024 by rpki-client on console-fra.rpki-client.org