Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
File:                     3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa (raw, json)
Hash identifier:          +Qo2hdaxs+gqpmXVdu+T7UKVhOi9Vpk0jBJ6D3/aH9g=
Subject key identifier:   04:FF:F7:BF:02:AD:D4:6C:20:CF:DE:DE:79:7A:AB:4D:E7:24:43:0B
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       6CE68CA88573818D6781C639A179A97FB0C7E454
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
Signing time:             Thu 04 Apr 2024 18:10:11 +0000
ROA not before:           Thu 04 Apr 2024 18:05:11 +0000
ROA not after:            Thu 03 Apr 2025 18:10:11 +0000
asID:                     40356
IP address blocks:        189.126.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
                          rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e6:8c:a8:85:73:81:8d:67:81:c6:39:a1:79:a9:7f:b0:c7:e4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Apr  4 18:05:11 2024 GMT
            Not After : Apr  3 18:10:11 2025 GMT
        Subject: CN=04FFF7BF02ADD46C20CFDEDE797AAB4DE724430B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:b5:ee:78:3b:6a:bb:7c:a7:01:b9:61:b6:
                    eb:e2:ff:a2:c4:05:da:38:d7:1c:32:95:e7:3e:14:
                    8c:f4:c1:f4:c7:b0:d4:4c:d1:33:bc:02:66:4a:7d:
                    ea:13:a8:c7:bb:23:ba:0c:7e:8d:57:a7:a8:89:8a:
                    48:22:46:ec:f7:96:ce:c6:21:97:7f:86:95:96:cd:
                    cc:78:5f:31:1f:ed:6f:78:7d:21:ee:a3:d5:56:08:
                    76:3d:72:0e:10:ae:64:fe:1c:91:a0:3e:d8:38:f4:
                    e9:04:fd:36:79:0a:32:20:16:c1:41:37:5d:6a:f9:
                    68:25:ef:47:1e:aa:d0:2c:8d:96:82:c8:4c:84:26:
                    13:86:8d:f8:8f:fb:b6:c7:f6:9c:0c:60:1f:ce:f1:
                    de:3d:32:e5:76:2b:73:36:35:3e:7a:6b:72:bb:60:
                    3f:6a:2f:ba:15:08:08:1b:6c:47:97:5c:41:f9:f8:
                    99:68:41:ba:e0:74:f1:eb:20:0a:74:3b:2a:16:02:
                    59:b1:a0:f2:ee:c9:5b:d5:eb:df:c7:e8:04:13:5d:
                    0f:fe:5c:b5:6d:40:a4:f2:1c:b8:57:30:af:1f:64:
                    9f:64:bb:0d:ad:29:c8:be:0e:30:b2:cc:a3:1b:64:
                    62:d0:75:0f:35:02:2c:fb:ce:73:d4:21:e9:27:16:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:F7:BF:02:AD:D4:6C:20:CF:DE:DE:79:7A:AB:4D:E7:24:43:0B
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:c0:0e:15:ce:93:15:38:82:cc:05:fc:da:ee:8b:f6:87:
         23:f2:a9:60:fb:e7:75:78:48:d4:72:8f:c3:ea:7a:61:9a:3b:
         51:1c:db:41:f6:df:96:ac:bd:d8:29:67:da:8b:3f:04:4d:72:
         59:da:ed:8b:5d:c1:a5:ad:f5:1e:16:39:6b:a9:0a:be:24:09:
         81:f9:10:ef:52:e8:54:93:6d:a2:66:42:76:84:09:75:8d:22:
         ed:d4:a4:8b:cb:05:61:82:a6:44:2b:f5:16:f3:60:5b:5f:6e:
         1f:c8:a4:59:fa:76:d8:d5:37:d0:df:90:fe:1e:6a:87:4d:66:
         44:68:eb:28:ed:f0:2f:82:77:59:06:67:92:09:5c:48:91:9e:
         94:9c:7f:87:e5:e7:48:88:b0:f7:de:85:be:13:68:69:99:d2:
         94:7d:a9:60:ea:f1:eb:5c:9f:37:d0:c1:d2:01:a5:71:78:bd:
         ea:2f:e4:5b:a1:eb:16:00:3c:8a:cb:ad:9e:aa:f7:78:77:ce:
         f1:b8:ca:35:32:a0:9f:46:61:a3:bc:6f:47:aa:6c:59:e5:9e:
         a7:18:1b:29:00:e1:ff:b7:10:34:34:8b:69:ca:d8:1d:4f:1e:
         ff:c6:34:cc:ce:52:72:31:19:c5:3f:8f:dc:ec:7f:6d:90:dc:
         6f:55:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org