Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36332e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e36332e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          AvxzK0ZQfF+HvpeOyuXgxg1EVLdIQDO/guvdLZiq1po=
Subject key identifier:   3F:A8:2D:76:FF:3D:59:D5:59:5E:21:7D:75:38:B4:BF:68:8A:A3:1A
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       4BC63DE7F6BD735270B7A391128B9C612DCF6FE2
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36332e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:16 +0000
ROA not before:           Tue 20 Aug 2024 18:02:16 +0000
ROA not after:            Tue 19 Aug 2025 18:07:16 +0000
asID:                     28128
IP address blocks:        187.19.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c6:3d:e7:f6:bd:73:52:70:b7:a3:91:12:8b:9c:61:2d:cf:6f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:16 2024 GMT
            Not After : Aug 19 18:07:16 2025 GMT
        Subject: CN=3FA82D76FF3D59D5595E217D7538B4BF688AA31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:70:c3:30:10:95:b3:ed:a3:52:4a:0b:c2:
                    bd:96:b3:82:a1:68:27:94:45:64:d3:f5:73:6b:e7:
                    09:15:49:8b:0b:ec:4a:95:8d:11:82:20:d2:a8:99:
                    69:4b:11:70:f5:1a:80:58:88:7b:6a:b6:75:44:f3:
                    20:23:8f:81:bf:14:5a:cd:e0:86:7c:91:7c:6f:83:
                    40:d4:44:da:14:b0:fc:4c:0a:60:8c:17:4c:ed:3b:
                    2e:4e:49:d9:44:e2:95:87:1e:12:08:61:41:73:74:
                    f8:52:c3:29:4d:bf:7c:06:57:56:48:16:dc:3a:74:
                    98:e6:e7:9d:d0:b0:dc:67:6e:bc:7e:59:11:53:68:
                    14:75:66:03:6a:03:ce:0b:d4:a3:77:64:44:02:96:
                    4e:48:7f:d4:de:79:05:75:46:56:28:95:f5:30:b2:
                    fa:04:03:6c:bd:17:a1:89:64:e1:61:f2:e7:33:de:
                    49:96:e3:d7:5f:74:8c:d5:54:9c:95:1b:4e:79:91:
                    14:50:78:2e:95:e2:e3:36:d0:19:e4:3b:60:7c:93:
                    39:d2:26:16:16:3b:1e:28:92:c6:f7:9b:0a:80:83:
                    8e:ef:d7:f6:97:08:99:7d:3f:1c:91:7d:17:f0:a9:
                    87:91:6e:5d:3e:0b:3a:1b:45:5d:fc:72:01:61:4d:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A8:2D:76:FF:3D:59:D5:59:5E:21:7D:75:38:B4:BF:68:8A:A3:1A
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36332e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:52:ce:88:3d:0e:4d:c4:4a:47:2c:81:9e:1f:da:af:54:36:
         bf:80:eb:eb:93:0a:32:ba:d7:15:6f:52:3d:73:3b:73:97:1f:
         b8:82:4e:31:c6:cf:28:23:43:25:2f:04:02:7c:49:27:d1:4a:
         b0:f5:e0:8d:90:de:f7:cf:0f:ce:f7:d0:d3:2f:cb:ca:90:bf:
         03:68:aa:3e:0a:90:f8:15:4b:37:b8:d0:f1:58:e4:09:6c:dd:
         55:48:ce:74:cd:c7:f9:28:19:eb:9c:b9:be:e6:60:68:c3:92:
         88:9c:76:76:e9:8a:66:71:60:5d:9b:97:c8:c5:ac:e9:c0:6e:
         55:ce:17:3d:25:c5:b3:af:f5:d6:af:c7:69:91:cb:db:04:40:
         73:df:c9:f5:14:20:b2:21:30:e5:53:0d:58:6c:09:3a:7e:58:
         09:73:c3:9f:27:10:28:59:31:c3:56:a7:62:6b:d5:5f:66:18:
         96:e7:1b:d9:79:df:0f:7c:39:6c:40:cf:35:c4:db:5a:9e:f3:
         b0:0b:39:ad:33:8d:df:c8:55:bc:5f:68:52:49:e5:31:25:de:
         f3:30:3c:49:4f:76:83:16:14:e7:76:df:66:3f:1c:40:16:15:
         a3:e0:42:5d:a2:c2:76:92:e4:7b:70:8f:16:13:31:71:99:86:
         fa:b6:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org