Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
File:                     3138372e38342e39362e302f32302d3234203d3e2038303535.roa (raw, json)
Hash identifier:          VV1sAcgB+go62beG54/tA/yO+2RpKjpInLsJzJntkBE=
Subject key identifier:   E4:B8:AA:26:04:17:23:7D:42:32:A0:19:1B:84:1D:4A:59:F9:0A:F7
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       0570A5CC24EBA717E83931F7514C346CEDBDAEAD
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
Signing time:             Fri 17 May 2024 13:49:40 +0000
ROA not before:           Fri 17 May 2024 13:44:40 +0000
ROA not after:            Fri 16 May 2025 13:49:40 +0000
asID:                     8055
IP address blocks:        187.84.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:a5:cc:24:eb:a7:17:e8:39:31:f7:51:4c:34:6c:ed:bd:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: May 17 13:44:40 2024 GMT
            Not After : May 16 13:49:40 2025 GMT
        Subject: CN=E4B8AA260417237D4232A0191B841D4A59F90AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:86:d7:90:34:e6:2b:17:86:29:97:7c:e6:
                    b7:e7:54:a8:6f:54:4b:a4:c9:4c:8e:1a:dd:81:7f:
                    e9:d9:55:43:a7:62:6b:b5:cb:2a:df:36:52:87:3a:
                    13:1f:4f:8f:29:86:6d:8c:97:d7:00:0e:ad:c6:f9:
                    e0:57:eb:5e:4b:55:a2:09:52:b1:19:21:27:b6:ab:
                    c7:c3:15:37:e4:71:f2:f3:c7:83:c9:d7:80:03:fa:
                    f7:48:7a:5a:58:76:c7:df:0c:59:a4:01:58:b9:ba:
                    ab:15:2a:ee:b5:e6:41:96:21:94:9d:76:4c:e2:69:
                    8a:95:a1:7a:49:6e:89:ff:64:80:92:87:2d:c1:c8:
                    3c:ce:74:87:b1:47:cd:47:74:e2:b9:17:c4:fc:92:
                    5f:95:3f:83:c8:48:40:81:24:ed:5a:f3:75:5f:2d:
                    a1:9f:0b:77:28:82:3a:36:6e:64:96:6c:fd:fb:fc:
                    6d:f7:59:82:cc:d2:93:83:6c:78:24:b2:b5:67:38:
                    52:47:d6:69:2e:e8:28:a5:b8:6b:e7:70:31:0a:05:
                    e5:b1:56:72:0f:52:e1:2f:38:38:4d:68:3d:5f:e2:
                    8e:4d:b3:0a:72:71:8d:b0:9d:69:ea:f0:19:1d:59:
                    92:ca:72:08:81:54:ff:75:ae:7a:f8:a0:7c:91:e2:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:AA:26:04:17:23:7D:42:32:A0:19:1B:84:1D:4A:59:F9:0A:F7
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3138372e38342e39362e302f32302d3234203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:64:cd:da:1a:49:a0:a6:f3:38:d1:18:76:df:33:e4:91:ce:
         73:fd:ab:a1:e5:15:f2:9d:64:7b:02:ac:3c:bb:0d:42:b7:15:
         c2:28:c9:27:f9:78:25:cb:3c:04:38:7b:3b:49:01:e3:76:43:
         06:f4:3a:57:1a:13:ea:7c:df:29:14:7f:66:1a:da:a8:f7:2b:
         ad:d7:30:0a:5c:dd:96:14:f6:3f:43:c4:0a:46:cb:d9:2d:73:
         4f:07:90:83:db:c5:44:92:e8:aa:b1:91:88:be:5e:59:83:f8:
         40:e7:48:07:a8:c6:10:39:d3:3b:75:59:eb:9e:b7:6a:65:58:
         4f:6d:43:b4:21:6f:c6:da:63:b5:46:0e:0b:b2:ae:fb:b9:86:
         1a:7a:06:40:20:43:71:82:eb:dc:1e:7d:a3:1f:24:ce:6d:da:
         99:8d:5e:8f:41:2b:cb:7c:31:d5:4c:a2:c4:96:a9:a6:73:8a:
         a2:a4:00:8f:3a:d6:a1:48:57:fb:3d:a3:73:bf:74:3d:45:68:
         0e:5c:62:01:74:dd:20:cc:28:67:e8:19:db:c0:ad:5e:e4:a3:
         09:25:ed:d1:22:eb:38:81:4f:1f:7a:2e:ca:60:e8:2c:ea:30:
         89:df:8b:ee:0a:6e:52:8a:b0:c1:2f:ed:12:c3:2d:c5:25:45:
         cd:b8:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:57 2024 by rpki-client on console-fra.rpki-client.org