Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          W79xPhpWoLL20nE2X76TMe1cFb4Y6HtAli8x7Yb/nJE=
Subject key identifier:   16:51:17:E7:50:D7:F3:B2:77:BD:7A:3E:A7:74:B8:68:39:43:74:7D
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       02D1CBF1706CDCA79D5279028257D97671E338DB
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 29 Aug 2024 14:22:56 +0000
ROA not before:           Thu 29 Aug 2024 14:17:56 +0000
ROA not after:            Thu 28 Aug 2025 14:22:56 +0000
asID:                     270711
IP address blocks:        189.127.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:cb:f1:70:6c:dc:a7:9d:52:79:02:82:57:d9:76:71:e3:38:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Aug 29 14:17:56 2024 GMT
            Not After : Aug 28 14:22:56 2025 GMT
        Subject: CN=165117E750D7F3B277BD7A3EA774B8683943747D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:1c:b4:73:53:14:e1:0c:fc:6b:0a:62:8c:
                    3a:c2:2e:17:9d:bb:d0:01:ea:b4:f6:e3:a9:d4:47:
                    e5:62:de:71:ac:27:62:70:7a:52:a4:6e:7a:e6:6f:
                    99:17:9f:3a:d3:d0:9e:bd:72:a0:4e:d2:3a:56:b9:
                    50:e0:82:fe:69:c6:08:42:e9:c8:c5:27:b5:06:17:
                    e4:b3:65:06:f0:cf:1e:54:24:dc:d7:22:f2:87:a4:
                    48:33:28:19:76:ff:b6:43:be:8b:a7:e9:35:b7:af:
                    48:24:be:9f:4f:b8:8c:1e:bb:8c:37:69:7e:ca:26:
                    a0:cc:39:0d:04:9f:33:48:95:40:f0:2b:2f:c8:e1:
                    ad:57:97:c0:cd:a0:da:cd:1b:01:a1:99:a5:96:ef:
                    7f:04:0d:dd:56:ff:19:74:ea:90:c4:ce:9b:a4:ff:
                    f3:06:bc:90:88:6d:bf:c0:5a:c2:ed:e8:ad:52:0e:
                    41:8c:fb:cb:17:53:5c:f5:71:90:59:e7:19:d1:55:
                    9f:53:4f:1e:94:c4:a6:49:e3:56:0d:b1:13:c5:16:
                    27:39:d4:73:2c:54:7c:14:8f:c8:2c:15:59:13:69:
                    1e:24:d5:7c:fa:7d:bf:e8:69:55:01:cd:e7:2a:81:
                    32:8a:eb:19:f0:f7:36:41:4d:93:0f:35:56:20:42:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:51:17:E7:50:D7:F3:B2:77:BD:7A:3E:A7:74:B8:68:39:43:74:7D
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:1f:21:55:31:83:d6:16:cb:3f:0e:e7:74:02:c9:c2:9e:
         34:80:19:2b:b6:6a:0b:33:68:d7:61:82:9b:ef:9f:f3:86:83:
         04:ac:35:ab:24:1a:b2:b3:16:49:d9:19:74:bd:db:19:b4:2c:
         c1:12:84:67:8c:ec:19:a2:01:73:17:26:71:32:c7:06:45:79:
         64:8a:47:44:3c:4d:ff:ad:3d:65:1d:5b:17:78:55:24:49:5d:
         73:59:32:12:93:1f:86:00:ed:b7:47:41:9f:1b:7e:31:2b:52:
         52:42:24:4e:d8:9a:f1:21:6b:1d:70:a2:2c:86:86:db:d9:0c:
         f1:a0:61:0e:55:97:7d:f4:8b:21:22:49:fe:55:1f:4e:8b:9a:
         0e:ae:93:8b:e0:7d:81:e1:41:b4:f7:0a:3a:45:7c:c3:5d:a9:
         fd:39:8d:b5:bf:89:b4:d6:4e:a8:36:c0:f8:65:c4:86:98:dd:
         18:97:fa:63:98:3a:7b:47:4f:10:8b:13:c2:98:24:c8:d4:ce:
         a8:44:aa:fd:fc:b9:b6:1f:d7:6e:77:1e:8e:0e:db:5a:e9:94:
         86:04:aa:93:2f:f0:ec:b1:b0:68:ff:05:92:3d:b0:ae:cb:c2:
         6e:18:34:6d:ca:4b:3a:18:6c:f1:31:1f:cc:c1:fd:21:34:eb:
         31:38:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:14 2024 by rpki-client on console-ams.rpki-client.org