Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3138372e3130332e392e302f32342d3234203d3e203533303938.roa
File:                     3138372e3130332e392e302f32342d3234203d3e203533303938.roa (raw, json)
Hash identifier:          uRHemtw5VnV/9mWQ4R/TNZ2d8soDey7f+rElXdTEYk4=
Subject key identifier:   5C:D6:2A:8D:80:54:CF:A3:92:26:07:30:6F:B5:48:E1:72:40:B6:DA
Certificate issuer:       /CN=3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB
Certificate serial:       27EDD6C5BE4B73D500080AE6E428BF0D4FDD96D9
Authority key identifier: 3F:F7:C5:31:CE:45:1A:F8:AF:B7:34:38:34:FB:D6:82:B2:CE:2E:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3138372e3130332e392e302f32342d3234203d3e203533303938.roa
Signing time:             Wed 03 Apr 2024 18:32:09 +0000
ROA not before:           Wed 03 Apr 2024 18:27:09 +0000
ROA not after:            Wed 02 Apr 2025 18:32:09 +0000
asID:                     53098
IP address blocks:        187.103.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.crl
                          rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ed:d6:c5:be:4b:73:d5:00:08:0a:e6:e4:28:bf:0d:4f:dd:96:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB
        Validity
            Not Before: Apr  3 18:27:09 2024 GMT
            Not After : Apr  2 18:32:09 2025 GMT
        Subject: CN=5CD62A8D8054CFA3922607306FB548E17240B6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:46:3b:d7:36:e5:a2:77:8d:40:d6:d1:1c:
                    a7:f8:64:cd:c6:53:fd:32:05:9e:33:4b:60:99:6b:
                    af:b9:73:79:a1:3b:5f:45:7d:fb:6b:b1:59:26:6d:
                    20:e3:1c:3a:70:df:20:34:74:57:10:e6:ae:4c:88:
                    08:aa:df:fc:e7:42:39:1a:cc:b8:dc:8d:2b:73:15:
                    8f:9a:76:a5:ad:1b:f3:27:07:36:57:a9:fc:9f:c1:
                    9a:9b:9e:d7:4f:42:fd:c2:4d:b4:a9:fc:f4:fd:5d:
                    4a:59:b9:b1:da:7d:17:7e:f9:ad:00:cf:57:a4:ce:
                    25:8e:f7:77:1e:c3:1d:da:6e:ee:f6:dc:18:0a:19:
                    f3:af:dc:7f:7a:73:4a:2a:6d:c5:a1:1b:82:e5:63:
                    1d:be:2b:6f:6c:75:58:73:10:53:d7:f6:91:83:91:
                    59:4f:46:ea:18:b3:56:db:4c:81:bd:db:7b:33:26:
                    26:4f:d8:64:79:2b:d2:7e:e9:e8:dc:97:a9:e5:18:
                    63:0e:be:72:a8:6f:1e:8e:0c:b9:87:7c:58:5e:56:
                    ac:19:0b:72:48:3c:eb:86:66:e1:e7:05:ca:9b:9d:
                    dc:02:65:5f:42:87:fe:d3:4b:7a:dd:a4:b2:0a:2b:
                    53:1c:82:9f:c5:e0:01:7f:34:ef:8a:08:a3:f7:f4:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:2A:8D:80:54:CF:A3:92:26:07:30:6F:B5:48:E1:72:40:B6:DA
            X509v3 Authority Key Identifier:
                keyid:3F:F7:C5:31:CE:45:1A:F8:AF:B7:34:38:34:FB:D6:82:B2:CE:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF7C531CE451AF8AFB7343834FBD682B2CE2EBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/1/3138372e3130332e392e302f32342d3234203d3e203533303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:79:4d:4c:49:a3:be:d5:96:0e:0d:11:d0:1d:86:5e:da:
         00:3e:a6:83:5b:e0:76:7d:e0:0b:e1:f7:e1:22:a2:6d:c3:63:
         38:62:19:18:f2:4c:0a:17:f7:6b:c7:2e:56:f5:9e:7c:8a:a5:
         f5:35:54:52:de:62:16:a1:34:ed:8a:d8:cb:ee:09:0b:4c:e1:
         8e:e6:08:56:32:49:9a:84:c0:23:26:91:07:91:dc:9b:4f:6b:
         a0:4f:1f:33:d1:24:94:8a:db:ed:99:1e:ec:fb:36:a8:1a:6d:
         61:30:c9:66:8c:cc:5b:67:c9:01:b7:d4:d9:0d:3c:dd:aa:b9:
         fa:57:64:60:00:05:f8:c6:94:3b:37:33:c4:4e:c3:aa:a9:94:
         ae:ff:22:48:fb:f7:6b:22:96:fd:5b:52:54:0b:d0:17:fe:0c:
         ec:05:45:b4:c0:ea:41:7e:c5:13:3c:9c:59:b3:c7:20:49:a7:
         23:0a:8a:05:78:73:b9:a7:81:31:be:46:0d:97:b5:aa:88:7f:
         67:13:e4:cb:87:be:ec:5d:60:ca:62:c3:2c:1c:4b:e7:89:fd:
         a9:d2:0f:f8:9a:82:41:10:67:81:6e:fe:c6:70:af:27:d8:ed:
         74:b3:52:1d:3d:db:dd:89:81:26:4b:bf:bc:38:ad:55:3b:9d:
         87:76:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:59 2024 by rpki-client on console-fra.rpki-client.org