Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34392e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e34392e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          BxZAi9stO24bwGN3EqaGET2Phaf80Oi27+Jf7rVv6+0=
Subject key identifier:   50:52:58:BE:98:38:18:D3:F0:77:5A:EB:90:04:D6:B3:14:56:66:66
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       44A7090B97E77568D9501843E48070C78720E57F
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34392e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:34 +0000
ROA not before:           Tue 20 Aug 2024 18:02:34 +0000
ROA not after:            Tue 19 Aug 2025 18:07:34 +0000
asID:                     28128
IP address blocks:        187.19.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a7:09:0b:97:e7:75:68:d9:50:18:43:e4:80:70:c7:87:20:e5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:34 2024 GMT
            Not After : Aug 19 18:07:34 2025 GMT
        Subject: CN=505258BE983818D3F0775AEB9004D6B314566666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:3d:89:10:89:f2:32:da:e0:5e:3e:27:1f:
                    52:ad:63:98:78:46:ba:73:2f:ca:c4:3b:fe:f5:2c:
                    3c:0a:3a:03:03:a4:3f:c5:42:53:73:6a:51:67:6d:
                    70:68:58:6e:81:93:15:9c:5f:0c:87:85:8a:57:74:
                    20:8e:0f:31:a8:0b:28:7a:64:c9:35:8e:16:c6:a4:
                    a5:c7:60:0f:39:45:92:06:3b:f6:0d:93:9f:2c:12:
                    64:09:17:01:1f:52:04:b6:fa:ab:54:ef:f1:9f:d7:
                    f4:6b:9c:b1:ea:f7:f6:b6:a0:55:8c:c0:85:a2:aa:
                    3a:45:c1:3f:0e:dd:e4:51:12:f6:d8:a4:a4:ee:e6:
                    3c:b6:96:cb:66:a9:20:7f:de:6f:bc:51:e4:c7:2f:
                    21:93:b0:af:6e:9b:dc:0e:d1:90:a6:68:79:61:6b:
                    1a:d8:b3:95:81:7f:cd:00:08:b1:97:f3:18:80:48:
                    1a:ff:e3:78:19:56:56:ca:19:88:dc:5c:37:07:96:
                    b5:a3:73:3c:b1:b0:b9:1b:8e:66:e1:9f:0f:01:55:
                    fe:72:86:35:48:c5:f0:7e:06:11:df:78:b7:a6:0b:
                    77:ff:cd:57:9f:ad:43:5f:ef:e4:c6:a3:d3:74:95:
                    03:23:21:14:fb:bb:a1:d5:66:4c:a6:fd:ee:16:15:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:58:BE:98:38:18:D3:F0:77:5A:EB:90:04:D6:B3:14:56:66:66
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e34392e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4c:61:c5:a3:99:2c:47:b8:ab:3d:18:b9:b1:62:9d:fd:37:
         05:25:f1:f6:85:5a:36:fe:13:2c:34:75:05:06:ac:38:5c:7b:
         f0:20:cb:fe:cd:71:3c:9f:a1:13:4f:d1:a7:af:30:c0:03:a0:
         62:b8:8b:55:a3:2d:f3:01:89:e0:99:8d:56:27:dc:cd:de:23:
         0b:a4:55:d8:11:be:29:61:44:6b:09:66:b3:8e:8f:33:58:f7:
         be:db:db:28:76:f5:2d:43:9c:85:1a:05:45:58:09:82:4b:30:
         42:bd:03:dd:27:de:f8:6b:d9:b1:ea:fc:d3:d8:0c:5f:b8:77:
         0a:db:e7:47:95:a4:1f:a2:af:de:9c:87:43:eb:53:41:ea:bb:
         0b:0d:99:5c:bc:20:90:ea:f6:b5:6f:ab:b8:27:c8:37:eb:b8:
         2e:f9:74:cc:72:90:be:f4:df:5a:15:ad:28:e7:c7:ac:7e:eb:
         65:6e:3f:69:50:be:f7:5e:c0:19:9e:81:b8:dc:66:da:aa:92:
         88:05:cd:f4:2e:5a:e6:f9:c2:29:ff:f9:b4:03:be:a5:9b:fa:
         9c:22:bf:ed:b5:9c:a4:a7:e4:eb:c1:54:44:56:72:cc:20:8b:
         ae:ae:35:b1:1b:53:36:51:15:20:f6:8e:b6:3a:50:aa:d4:a9:
         69:90:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org