Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e34382e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          4ZPcU01rwzEH8neQzYr6CncToRl0js0SR4clg8leA0k=
Subject key identifier:   4A:80:A6:54:17:99:7E:67:2C:2A:37:96:3E:84:D5:A3:3A:4B:DE:5C
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       0B326354D703FC0051451ECF38793EB0E4B69C1E
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:31 +0000
ROA not before:           Tue 20 Aug 2024 18:02:31 +0000
ROA not after:            Tue 19 Aug 2025 18:07:31 +0000
asID:                     28128
IP address blocks:        187.19.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:32:63:54:d7:03:fc:00:51:45:1e:cf:38:79:3e:b0:e4:b6:9c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:31 2024 GMT
            Not After : Aug 19 18:07:31 2025 GMT
        Subject: CN=4A80A65417997E672C2A37963E84D5A33A4BDE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:48:24:16:57:d5:89:57:14:21:bf:8b:ff:
                    a6:f2:ee:a4:55:da:df:a2:17:46:f4:e2:5b:e5:dc:
                    92:4b:1c:2e:1c:3a:84:80:be:25:23:4a:c3:7b:a5:
                    35:73:18:51:1d:0b:a8:69:ac:a7:16:ae:6b:fe:15:
                    5a:e7:66:39:dd:53:bb:79:75:d5:96:14:2d:c0:f6:
                    f4:1e:14:e7:61:81:81:2b:97:6f:04:13:99:d0:c6:
                    31:d9:f9:05:56:62:94:41:35:de:e1:d4:0a:f2:12:
                    01:e4:40:88:6a:f4:06:16:f2:fb:ce:cf:a2:5c:e9:
                    5b:f1:10:4e:7f:f1:24:47:24:f2:23:f9:d4:fc:87:
                    68:1c:10:3b:03:bb:a5:1d:a6:73:7f:f4:f9:23:31:
                    48:b9:9e:13:89:13:10:31:f2:6b:32:68:08:f5:b2:
                    9a:54:36:f5:73:43:17:7a:81:1d:93:e3:36:f3:fe:
                    23:27:27:28:e6:8f:3d:6d:c0:30:48:68:7c:3c:ea:
                    12:c4:f3:40:6f:e6:71:25:00:3f:79:a1:9b:3b:2c:
                    00:64:fc:ac:5d:1c:8a:ad:ef:55:9b:a1:ee:2a:1b:
                    40:81:ca:77:5c:23:09:c0:c7:c7:23:09:09:3d:ca:
                    52:05:85:04:6a:64:2c:7c:a7:db:6f:f4:93:77:c8:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:80:A6:54:17:99:7E:67:2C:2A:37:96:3E:84:D5:A3:3A:4B:DE:5C
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34382e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:17:42:d0:0b:d1:ec:56:05:79:7e:54:d3:c2:d1:3f:11:d5:
         01:7d:60:e5:72:7c:a1:d0:f9:79:8b:f8:94:1c:e1:98:d9:a2:
         2b:79:a7:5a:9e:51:d0:ca:25:2e:ba:5f:ab:f6:a0:79:ad:e4:
         7a:0d:00:79:b1:7c:67:71:83:c8:62:cc:cf:a5:eb:52:3f:0b:
         7f:75:3c:18:1e:09:7a:ea:5e:66:73:94:5f:24:f9:6a:cf:c1:
         a5:c4:d5:f6:f0:ca:e5:1d:a9:aa:ca:2c:19:08:56:87:c0:03:
         1b:a9:30:9d:d3:71:f5:90:13:ce:57:f5:91:0d:44:61:bc:0e:
         bc:65:d8:12:45:64:08:cc:30:16:03:5d:14:af:48:7a:21:6a:
         13:53:55:2f:f0:49:eb:26:6e:a9:41:a7:de:08:a3:b9:bf:4a:
         f0:4c:b5:39:3f:75:cf:92:c6:3c:6c:d5:ec:41:2a:2d:17:69:
         60:bd:46:11:f7:5b:1c:3c:6b:45:08:29:8a:f9:7a:47:d1:7d:
         8e:57:55:c7:27:8f:26:b1:ed:f9:a6:d2:f6:47:b5:dd:f5:0d:
         da:17:75:88:82:c4:4f:1c:58:a6:76:e6:90:ed:95:b9:40:74:
         e1:5e:07:25:97:23:89:3f:c1:44:05:30:1d:5a:c8:76:a3:ba:
         1d:b0:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org