Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa
File:                     3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa (raw, json)
Hash identifier:          DPZ3NUoZ+a00bidBsYrlEmpx5XB+h+jtZpTjx1vR1jA=
Subject key identifier:   C4:8E:B5:62:AD:67:CF:78:03:E8:93:45:8E:B4:51:AC:10:06:61:8F
Certificate issuer:       /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
Certificate serial:       272CF50BB78AC7C5DCA78FAF2702499FE0CC197A
Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa
Signing time:             Thu 04 Apr 2024 01:56:59 +0000
ROA not before:           Thu 04 Apr 2024 01:51:59 +0000
ROA not after:            Thu 03 Apr 2025 01:56:59 +0000
asID:                     262727
IP address blocks:        189.113.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl
                          rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2c:f5:0b:b7:8a:c7:c5:dc:a7:8f:af:27:02:49:9f:e0:cc:19:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
        Validity
            Not Before: Apr  4 01:51:59 2024 GMT
            Not After : Apr  3 01:56:59 2025 GMT
        Subject: CN=C48EB562AD67CF7803E893458EB451AC1006618F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:61:18:00:e9:1e:89:16:4a:8b:85:27:0d:
                    d6:95:40:86:13:dc:b0:cf:09:a1:88:bd:92:a0:28:
                    4d:21:56:30:cf:cc:b3:74:a6:33:fc:0b:4f:79:70:
                    08:54:f3:2a:08:99:7f:0f:22:8f:65:6d:03:9b:f7:
                    0d:b7:33:a9:86:c4:52:6e:0b:82:c1:71:30:4e:76:
                    bd:94:b8:74:d1:2c:98:55:37:ae:bb:a1:52:9b:4e:
                    c2:40:b0:23:8d:60:7a:65:ec:4c:85:e5:52:9c:90:
                    71:cb:0f:c5:2e:ba:27:08:9a:2a:a9:a2:2e:61:0d:
                    9f:f0:f3:f1:07:43:74:51:88:01:6f:60:06:5e:14:
                    97:e6:08:75:7f:90:0b:d6:c0:c8:04:09:b7:97:09:
                    aa:77:75:a1:cb:bd:1d:88:51:93:a6:fa:1f:11:3b:
                    b8:9f:c1:c8:45:e7:ce:87:6b:e8:06:45:8e:71:91:
                    08:56:c2:5d:3b:13:85:05:06:44:a3:94:57:69:6e:
                    71:24:41:8c:3f:e8:47:b7:5e:00:4f:08:c1:4a:f6:
                    b3:f0:9d:82:ac:81:e0:6d:c4:85:c2:de:6b:78:9f:
                    cc:a9:4a:3a:33:e5:6e:69:7e:1e:96:02:b6:9a:d8:
                    5c:1c:07:cf:7f:c5:aa:88:c4:0a:48:e4:e2:f9:93:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:B5:62:AD:67:CF:78:03:E8:93:45:8E:B4:51:AC:10:06:61:8F
            X509v3 Authority Key Identifier:
                keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:81:35:16:67:05:5f:c1:3c:2b:b2:ac:97:7b:8f:df:af:36:
         f8:b9:ca:4b:68:10:19:f8:e2:5a:e8:2d:de:65:fd:2b:30:77:
         b6:1e:e4:28:13:12:74:13:90:b4:cd:94:42:0a:fc:aa:1d:c3:
         ed:a5:98:dd:2e:4b:df:13:a8:b7:83:7a:fd:51:37:1c:fd:0c:
         ed:98:47:8d:ff:12:6e:a5:a7:90:1c:c9:ae:19:99:41:c2:e9:
         bb:00:40:10:b4:dd:0c:8f:df:b0:55:23:0f:5a:b5:8b:2d:e2:
         c0:dc:36:97:7c:18:37:6d:77:54:9d:72:bf:c7:01:27:5e:6f:
         c4:a3:2b:38:64:b7:b6:9d:37:83:47:78:11:8c:05:af:78:ae:
         f7:0d:58:f1:e3:97:4d:7f:bd:a0:fb:0f:ff:e9:67:65:4d:41:
         b4:98:f9:53:c4:93:68:5f:d4:83:fa:c9:22:4e:1d:a6:34:aa:
         7b:5c:d3:f7:78:33:2a:4c:9d:51:83:cc:4a:e9:22:f4:2c:bb:
         87:e8:0b:1a:3f:bb:69:2b:0a:96:71:f6:73:60:e5:d9:44:41:
         1d:81:b5:a9:c1:42:92:41:08:30:94:92:1e:f7:82:10:50:66:
         a7:7f:0f:47:12:7e:7a:1a:81:89:db:8f:7b:72:b1:2a:f6:71:
         0d:0d:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:38 2024 by rpki-client on console-fra.rpki-client.org