Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa
File:                     3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          zgKeUoPo0ry7HxPUGqQkyvwp4VouS17nOhzCaylKTm4=
Subject key identifier:   30:2C:D7:BA:74:87:11:3C:17:6D:BB:E6:D9:3B:C8:2D:37:51:FB:D0
Certificate issuer:       /CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
Certificate serial:       5A8B429C76414566E36FBFA57EC960D19B2E2329
Authority key identifier: 0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa
Signing time:             Thu 04 Apr 2024 12:07:12 +0000
ROA not before:           Thu 04 Apr 2024 12:02:12 +0000
ROA not after:            Thu 03 Apr 2025 12:07:12 +0000
asID:                     263415
IP address blocks:        187.108.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8b:42:9c:76:41:45:66:e3:6f:bf:a5:7e:c9:60:d1:9b:2e:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D48E03F31640B05A5550FBA2E206DC75A155B20
        Validity
            Not Before: Apr  4 12:02:12 2024 GMT
            Not After : Apr  3 12:07:12 2025 GMT
        Subject: CN=302CD7BA7487113C176DBBE6D93BC82D3751FBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:77:6c:6f:20:de:14:6a:22:be:2b:e8:a9:21:
                    c4:86:4f:52:6f:13:32:41:81:ae:b3:0d:8d:3e:b3:
                    88:45:ec:45:d9:79:40:a2:36:ae:08:4a:87:13:71:
                    82:cb:e3:1f:24:1b:b2:0d:7d:66:41:7f:bd:82:73:
                    dc:86:50:e6:68:bb:18:11:08:40:5f:4f:7f:80:0a:
                    da:f1:80:b9:c4:79:46:2c:e2:2e:77:19:05:72:6c:
                    77:83:a6:1a:99:ba:d6:08:c2:f4:98:ab:5c:72:41:
                    2f:39:85:c1:26:4e:eb:8f:69:f9:73:48:e8:04:cd:
                    5e:65:33:85:7d:2a:41:7b:af:fc:37:0c:34:70:93:
                    3c:db:f7:90:4c:24:a8:ad:c9:b2:d1:15:b2:59:81:
                    2e:5a:68:87:81:bc:57:85:c9:2e:cc:28:eb:96:f7:
                    ae:09:d2:82:80:13:6b:c3:04:57:eb:61:b1:63:84:
                    bb:7d:c2:8c:a3:59:a3:2c:88:4e:57:db:0b:1e:82:
                    e2:ab:64:15:56:7c:68:a7:22:d6:26:39:50:07:dc:
                    89:2f:19:44:9c:ba:94:b2:a4:14:af:40:c5:37:74:
                    7e:f8:ca:66:89:1f:4f:eb:60:24:86:3e:9b:d0:2f:
                    1d:3a:30:d1:ee:b5:ba:28:cc:c6:1b:66:93:4e:7c:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:D7:BA:74:87:11:3C:17:6D:BB:E6:D9:3B:C8:2D:37:51:FB:D0
            X509v3 Authority Key Identifier:
                keyid:0D:48:E0:3F:31:64:0B:05:A5:55:0F:BA:2E:20:6D:C7:5A:15:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D48E03F31640B05A5550FBA2E206DC75A155B20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/1/3138372e3130382e3234302e302f32302d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:50:2d:cf:f3:2e:4f:29:1f:97:28:b7:b7:3d:a9:51:e2:
         c5:00:f0:b1:c0:32:41:a4:2d:27:e4:12:78:4e:ff:b0:c0:0c:
         08:80:2f:23:ba:be:68:61:77:b4:df:b9:cf:1c:39:13:1d:72:
         8a:9d:87:32:ac:db:11:3a:ee:27:63:10:3a:6c:b5:17:f4:ca:
         22:a0:ee:1e:6d:f9:e9:c8:6a:8c:f5:c0:c9:41:84:68:87:12:
         d5:11:41:48:b7:d5:4f:d3:e4:13:b7:80:bc:cc:5e:35:e1:39:
         41:be:2e:42:ca:86:10:a7:c5:5f:66:54:aa:12:08:9b:a1:03:
         c3:06:24:4e:2f:c2:7c:36:82:96:59:ee:44:14:c4:b6:ad:ca:
         50:17:2f:6a:ec:75:ac:3b:a6:4b:86:14:e1:fa:34:60:fe:7d:
         1c:95:78:49:ad:60:e8:b6:8c:84:9f:bf:d3:73:95:c3:a5:06:
         65:da:ab:a6:30:ba:95:7f:c2:36:55:41:74:80:0f:7d:30:e5:
         94:67:3f:8a:16:b5:34:90:74:12:1b:66:0c:96:64:05:1c:1d:
         4a:7e:f8:e5:b5:f6:8f:59:f0:cf:e8:7e:ba:f8:c9:8a:7e:d6:
         67:a0:bc:da:24:7d:9d:67:b2:9b:f7:fb:f0:db:58:39:3f:6c:
         49:02:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:20 2024 by rpki-client on console-ams.rpki-client.org