Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35372e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35372e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          z2VW5KclOj/TEAgsIVXRyKWdYKfgurqsMkoqarz+1W4=
Subject key identifier:   79:91:45:BA:9D:90:B3:2C:B6:30:EC:3E:DE:50:0C:C3:2F:6F:D5:62
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       4AEA83A9D04328F3D967832DB272767C63EAFC
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35372e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:56 +0000
ROA not before:           Tue 20 Aug 2024 18:02:56 +0000
ROA not after:            Tue 19 Aug 2025 18:07:56 +0000
asID:                     28128
IP address blocks:        187.19.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ea:83:a9:d0:43:28:f3:d9:67:83:2d:b2:72:76:7c:63:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:56 2024 GMT
            Not After : Aug 19 18:07:56 2025 GMT
        Subject: CN=799145BA9D90B32CB630EC3EDE500CC32F6FD562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:e1:43:cb:2d:70:4e:96:11:3f:36:fc:0d:
                    6f:7c:2f:79:a7:8b:3e:2c:47:b8:df:b7:85:35:6e:
                    c6:87:b0:03:a6:36:a8:a0:20:18:da:d7:4d:a5:91:
                    b7:8b:b9:65:22:ca:f0:51:f9:f4:11:fa:d5:7a:eb:
                    2a:1d:99:cf:0f:ce:d5:26:5c:97:8c:01:ba:92:dc:
                    b1:a4:84:4b:dc:09:35:9f:3d:d4:ea:fe:7f:08:be:
                    c3:40:e3:47:3d:3d:9e:5c:59:c5:af:98:1d:b8:98:
                    01:ae:3d:60:a5:64:19:ea:66:e7:2f:af:ee:ee:ea:
                    8d:6b:2f:4a:10:f7:18:91:c5:a8:4c:1e:84:c0:ad:
                    d8:b9:81:4e:99:cf:06:b8:55:12:af:ff:ba:97:82:
                    59:4b:67:77:37:22:9b:1c:42:37:05:98:70:ed:b4:
                    7b:a1:89:0b:5c:81:2d:81:bc:61:ff:30:88:04:fe:
                    93:4a:55:61:4e:2b:7f:0e:42:29:a1:69:9f:d4:28:
                    44:b4:76:ba:44:45:a4:c5:b0:be:3f:5a:c5:1c:fa:
                    8c:83:d4:c7:51:3b:4a:f9:5f:5c:96:1a:21:2c:94:
                    33:a6:94:3d:ad:5d:ca:ee:69:e2:1d:60:be:c3:2f:
                    2e:85:6c:69:11:ef:b3:32:fb:85:e4:4a:57:e1:47:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:91:45:BA:9D:90:B3:2C:B6:30:EC:3E:DE:50:0C:C3:2F:6F:D5:62
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35372e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:a4:5d:b7:5c:a2:ed:b8:98:24:0a:e7:09:51:de:e7:43:
         0c:67:2d:d3:6d:ca:e4:45:89:21:b7:e1:6a:04:e4:48:b2:54:
         ff:97:b3:c3:51:93:00:fd:24:c9:f4:f1:23:a1:2d:0a:fa:1c:
         21:43:07:35:be:fb:d3:eb:76:91:fd:d6:bc:ab:c4:55:dc:43:
         f7:86:a5:58:4f:ff:98:68:13:a4:fe:c7:a9:42:08:e6:00:ad:
         fe:1c:70:f2:e6:07:72:48:a2:d0:cf:48:a7:57:36:7d:06:52:
         1d:b4:ab:b1:d5:7e:ac:5e:12:ec:f1:83:b2:b5:88:5e:7c:45:
         05:a1:27:9b:65:1e:aa:95:9a:61:ce:82:01:e0:b3:d5:fc:3a:
         1a:78:e3:2b:1f:88:d3:5e:9f:7e:42:14:ca:97:b1:a4:98:6f:
         72:91:1b:dc:b5:df:a7:07:8a:66:e9:93:f6:13:3b:5a:ee:a2:
         0e:cd:40:16:f7:84:c0:8f:f3:3a:49:af:85:02:ca:a0:8a:bd:
         b2:9b:42:de:e2:6f:69:27:5e:f8:c4:69:22:1b:2c:8b:ea:0f:
         c3:dd:3c:51:be:aa:84:e2:2d:ab:98:00:10:80:13:ab:96:98:
         54:b6:14:57:3f:e2:76:34:f0:12:9a:9f:e6:ee:60:87:7e:06:
         e1:e9:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org