Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35362e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          Ausp0mVMygIwmN26o0JhFXTGX5CW4tc74NiDVJNMzF4=
Subject key identifier:   C2:E4:C4:31:02:BD:60:78:51:6F:D7:99:2E:89:D3:1F:5B:3C:50:E3
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       70C57E53EB346BDE84BD2A58A06C62ABEECCC72C
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:53 +0000
ROA not before:           Tue 20 Aug 2024 18:02:53 +0000
ROA not after:            Tue 19 Aug 2025 18:07:53 +0000
asID:                     28128
IP address blocks:        187.19.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c5:7e:53:eb:34:6b:de:84:bd:2a:58:a0:6c:62:ab:ee:cc:c7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:53 2024 GMT
            Not After : Aug 19 18:07:53 2025 GMT
        Subject: CN=C2E4C43102BD6078516FD7992E89D31F5B3C50E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:16:2e:48:fb:9c:2c:22:a5:4b:06:b8:21:
                    8a:c9:b3:7d:f2:7d:53:d8:b7:d4:98:77:70:2b:0c:
                    09:9c:99:eb:1c:ec:f6:a4:28:0c:66:53:4a:47:f5:
                    19:75:2f:0c:8e:58:37:b8:02:59:7a:6b:de:d3:dd:
                    d7:0f:c0:64:ee:f9:9d:ca:d7:11:f6:6b:b1:fd:13:
                    59:79:db:84:b6:de:09:c5:40:3c:77:84:bf:01:71:
                    87:aa:46:43:78:4a:56:5e:c9:26:93:62:8d:99:21:
                    d5:e3:a4:e2:bf:76:58:d6:4d:04:fc:7a:bc:7f:82:
                    ab:cf:24:42:2e:32:b0:91:32:f5:15:73:18:23:d1:
                    20:27:31:22:5e:b2:eb:1e:ca:97:69:a6:4c:39:b0:
                    cd:26:dd:44:84:9a:28:21:80:ed:1b:dd:60:8b:6a:
                    34:4d:f5:0a:80:4f:e1:17:f8:80:29:4c:32:fb:e8:
                    84:95:5d:d6:f5:c3:3d:14:00:89:ad:be:95:22:3f:
                    c9:ef:71:26:7e:1e:7f:8c:c3:88:5d:0e:45:54:d8:
                    68:86:b8:e2:59:4f:7d:00:b0:9e:73:18:d1:bf:45:
                    4a:bf:99:c0:a7:12:95:20:63:07:11:75:8d:9e:2a:
                    4f:9d:cf:06:db:42:5c:bb:f0:0e:82:08:a9:72:15:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:C4:31:02:BD:60:78:51:6F:D7:99:2E:89:D3:1F:5B:3C:50:E3
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:8c:2f:a1:9c:34:8d:2a:35:c9:db:8d:85:06:df:82:05:
         f8:33:76:32:c5:7a:34:36:01:51:0d:d9:07:4e:cb:e3:11:73:
         c1:9c:43:db:b7:29:d0:f4:49:97:2c:7b:ae:51:be:a2:53:6d:
         1c:2e:a9:bc:25:02:17:30:40:2c:c1:8f:22:6c:a4:cf:74:0f:
         08:09:33:3c:0d:ed:60:cb:b1:91:c4:70:32:5f:2f:42:c5:e6:
         82:8a:36:cb:f3:17:29:e8:30:b0:ac:06:e3:19:ec:24:49:43:
         7c:86:71:96:ce:73:59:9f:5a:44:68:8a:11:a5:7e:70:bd:98:
         48:4a:4f:8a:0c:a5:3c:86:3c:8c:96:4a:34:5a:21:9b:ce:10:
         87:1f:94:9a:ac:6f:ea:b2:88:87:9a:e6:70:31:b2:e3:36:99:
         68:63:c8:1f:03:4c:66:64:6c:de:e2:28:7d:91:39:c1:08:f5:
         7c:c7:d9:7d:31:55:26:a8:e5:48:b2:be:29:f2:98:ad:6e:72:
         8d:c2:85:40:d2:36:49:44:9d:e3:e2:23:20:39:50:6d:86:d0:
         cc:0c:f2:08:cb:51:4f:18:66:3f:dc:78:6f:5c:59:f1:ed:bd:
         d8:e5:c6:20:ea:35:27:9c:93:11:9e:5e:89:29:1a:10:55:27:
         d4:ff:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org