Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3138372e3130332e302e302f32302d3230203d3e203533303938.roa
File:                     3138372e3130332e302e302f32302d3230203d3e203533303938.roa (raw, json)
Hash identifier:          d23SMgSN9QeJmhH+/4/js0N3etvzkech6Fqsm6YoYhY=
Subject key identifier:   1C:9B:76:A9:98:37:64:33:4F:D1:85:21:D4:9F:ED:EB:4D:4D:38:EC
Certificate issuer:       /CN=3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB
Certificate serial:       5F6470B7A1ADC31BD5DE5229A4C49017822C8DB3
Authority key identifier: 3F:F7:C5:31:CE:45:1A:F8:AF:B7:34:38:34:FB:D6:82:B2:CE:2E:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3138372e3130332e302e302f32302d3230203d3e203533303938.roa
Signing time:             Wed 03 Apr 2024 18:32:09 +0000
ROA not before:           Wed 03 Apr 2024 18:27:09 +0000
ROA not after:            Wed 02 Apr 2025 18:32:09 +0000
asID:                     53098
IP address blocks:        187.103.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.crl
                          rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:70:b7:a1:ad:c3:1b:d5:de:52:29:a4:c4:90:17:82:2c:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB
        Validity
            Not Before: Apr  3 18:27:09 2024 GMT
            Not After : Apr  2 18:32:09 2025 GMT
        Subject: CN=1C9B76A9983764334FD18521D49FEDEB4D4D38EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:99:11:ce:49:5d:ac:e2:0b:20:f4:cc:83:
                    1a:3b:73:f5:4c:74:f2:ec:d8:c0:57:d9:f3:4a:3e:
                    ce:4a:a3:c5:f7:21:83:bf:38:d1:81:b2:bb:61:86:
                    55:35:ac:53:8d:61:98:8d:8f:62:ec:5e:e9:10:91:
                    26:b3:73:fd:bd:2c:38:ad:40:2e:d8:87:82:55:fa:
                    d8:1d:77:d1:9d:ec:25:98:4a:b4:3e:8d:89:a3:c2:
                    de:c8:97:2d:06:f8:48:a0:88:0d:57:5c:77:f4:fb:
                    b6:01:02:58:99:6d:3e:c9:1e:c2:dc:62:34:d0:4d:
                    cb:3f:51:c8:04:6b:fc:c4:32:24:08:c1:af:19:d6:
                    9d:78:9a:92:6d:40:9a:15:76:0d:03:2a:55:63:cc:
                    ef:b6:3a:39:26:0f:7e:48:71:ee:8f:44:64:88:07:
                    c8:62:4d:37:47:96:73:38:6a:ec:7d:f7:d5:a2:37:
                    12:8a:91:e1:2c:9f:bc:b7:99:e8:2f:0e:c3:72:23:
                    00:47:ba:70:70:20:f2:df:09:e1:b2:e4:11:22:de:
                    55:af:4c:61:c9:9e:e0:a3:6c:43:88:35:1b:fe:4a:
                    28:3e:f6:46:e8:06:80:07:25:dd:7c:24:27:0f:b3:
                    e9:f4:2a:3c:3d:ee:c4:78:83:98:7d:6b:67:44:84:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9B:76:A9:98:37:64:33:4F:D1:85:21:D4:9F:ED:EB:4D:4D:38:EC
            X509v3 Authority Key Identifier:
                keyid:3F:F7:C5:31:CE:45:1A:F8:AF:B7:34:38:34:FB:D6:82:B2:CE:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3138372e3130332e302e302f32302d3230203d3e203533303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:22:a5:3f:ae:b7:f0:87:10:c9:91:da:f2:b2:26:70:bd:
         81:e5:ef:7d:6d:3b:25:e6:88:79:c3:03:1b:0a:41:75:e5:7a:
         35:66:51:91:56:75:79:cc:bc:3c:75:fa:b3:54:3f:42:96:63:
         9b:18:0d:7a:94:0f:9e:78:2d:f1:4a:23:ec:1f:8f:06:47:ea:
         4e:14:60:a8:6f:39:1b:d7:83:05:84:65:e7:dd:54:94:c3:66:
         75:57:a3:95:38:30:16:cf:e5:92:f1:89:c9:47:d6:b2:2b:4e:
         43:0a:a3:14:4e:27:a4:1c:eb:7a:97:15:40:82:c3:12:ea:ba:
         19:96:52:58:8c:49:eb:9b:1f:5f:b0:8e:2b:3b:81:58:9a:a2:
         77:52:10:ea:2b:1b:ae:f7:95:46:2f:97:ab:41:26:9c:fc:47:
         61:29:e2:5a:53:35:0f:d2:cc:52:5a:5a:5f:cc:94:69:a1:42:
         70:f6:06:e2:8c:69:a5:fc:49:49:f1:f8:eb:08:2a:24:6d:88:
         9d:7f:c2:da:ea:0a:d3:b6:09:e8:53:ff:19:c8:18:b6:9b:e7:
         ab:b3:43:74:2b:d2:26:71:85:45:d0:f1:4c:a8:06:35:06:6d:
         b5:1f:4b:b4:33:c4:17:de:bf:15:d6:ea:2b:8d:76:76:9d:ad:
         ca:f5:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:59 2024 by rpki-client on console-fra.rpki-client.org