Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa
File:                     3138362e3139332e302e302f32302d3234203d3e203533313334.roa (raw, json)
Hash identifier:          Wjj+kZxhqZaXTOdYnvl3hZx2E2fGrPWtRS0r+yOWi5I=
Subject key identifier:   93:AE:A8:B6:02:B6:AE:72:03:87:7C:B4:EA:DD:84:D9:01:69:8D:DF
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       43D0E6F47F23A14DF3227F1C1EE81ED4C3175B00
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa
Signing time:             Thu 04 Apr 2024 04:08:47 +0000
ROA not before:           Thu 04 Apr 2024 04:03:47 +0000
ROA not after:            Thu 03 Apr 2025 04:08:47 +0000
asID:                     53134
IP address blocks:        186.193.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d0:e6:f4:7f:23:a1:4d:f3:22:7f:1c:1e:e8:1e:d4:c3:17:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Apr  4 04:03:47 2024 GMT
            Not After : Apr  3 04:08:47 2025 GMT
        Subject: CN=93AEA8B602B6AE7203877CB4EADD84D901698DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:db:6c:3c:ec:12:ec:5f:de:e0:3c:58:2b:
                    6e:e5:8e:bc:37:fd:28:9f:11:1a:f1:2d:25:3e:13:
                    1a:4c:45:19:54:d9:1a:89:3d:18:49:9d:f2:96:cf:
                    d5:59:6b:28:5a:63:f0:5e:a5:c2:65:04:ff:0e:37:
                    10:57:15:b3:24:84:cb:d7:1d:89:35:91:bd:83:8a:
                    e7:e6:37:2f:6b:c9:46:79:c2:1b:6b:f4:c1:1a:85:
                    27:5f:f5:ca:e3:ee:a0:8a:f4:32:cd:7c:bc:b5:20:
                    e3:4d:62:8b:90:21:b9:b9:06:f2:76:f6:3b:13:25:
                    30:c7:3f:5a:db:8e:2a:8c:40:c9:ee:0c:4e:ec:ac:
                    a8:f9:04:df:09:6d:57:a8:ba:e5:46:5f:d0:01:7d:
                    a3:be:d6:89:71:f8:e0:73:21:57:61:41:d9:73:56:
                    ae:8a:ba:8e:9b:93:8a:7c:64:51:69:d8:22:5d:4d:
                    81:67:cc:ea:6f:67:b4:74:5c:e2:f2:fb:f7:9a:86:
                    28:d5:c5:cf:f8:5e:5a:c8:68:83:72:d2:9e:9b:b1:
                    e8:0d:c9:e7:46:19:aa:eb:84:70:d5:c3:a8:b0:af:
                    f1:4a:71:3a:e1:ea:dc:72:0b:d5:d8:f4:d9:c1:86:
                    33:5f:ba:1d:e7:a4:1d:ac:5e:e9:0b:95:2d:da:96:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:A8:B6:02:B6:AE:72:03:87:7C:B4:EA:DD:84:D9:01:69:8D:DF
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:95:f6:f1:4d:9f:98:81:ec:49:36:ec:b5:bd:de:a4:8c:a5:
         69:ad:cd:c6:63:59:d1:7d:13:ee:15:43:65:fb:64:e3:1d:0d:
         63:16:67:62:28:b8:cb:8f:a7:f4:51:96:fc:46:9f:ad:cc:92:
         68:f2:d0:9a:5e:36:a7:51:67:62:b5:6a:34:94:12:aa:e1:b6:
         25:e0:ad:13:db:5b:ef:eb:0a:ed:d7:37:da:85:60:4e:32:61:
         e0:73:4e:09:38:cb:24:1e:62:63:70:64:e9:d5:6e:2a:88:02:
         71:02:61:4c:8f:5d:ad:ed:da:65:31:de:9f:57:be:d1:98:14:
         17:11:3c:df:52:df:be:19:87:09:b3:d4:a0:4d:1c:30:cb:20:
         83:e5:d9:20:cb:4d:33:94:24:8a:ea:8e:24:50:e8:8f:2a:fc:
         47:73:11:81:83:06:7c:18:43:f6:a2:58:24:6c:da:26:02:df:
         e2:ef:46:2b:24:14:97:e0:86:0a:b6:07:72:fb:4f:ef:67:61:
         d7:05:9a:e6:8b:fc:f7:a6:29:1d:a6:d2:e2:db:c4:4f:a1:14:
         b3:dc:6c:a8:7e:ff:2c:6b:6b:7a:9c:4a:5d:56:ee:f1:e1:cf:
         0b:1f:b5:4e:41:0a:86:5b:55:fc:a6:32:bb:af:5c:7c:21:eb:
         5c:41:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org