Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33382e302f32342d3234203d3e203238323233.roa
File:                     3138392e3132362e33382e302f32342d3234203d3e203238323233.roa (raw, json)
Hash identifier:          WM57bw8CzLm+PNJXIo05NBx0Idi3JV/W/4+cR1O3LZo=
Subject key identifier:   96:ED:57:98:9C:E9:84:9D:A0:55:00:F1:80:9F:27:7C:BD:03:FF:41
Certificate issuer:       /CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
Certificate serial:       4E9B61496F68E7A70A1F589BC90FE7295D945299
Authority key identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33382e302f32342d3234203d3e203238323233.roa
Signing time:             Fri 26 Jul 2024 13:09:27 +0000
ROA not before:           Fri 26 Jul 2024 13:04:27 +0000
ROA not after:            Fri 25 Jul 2025 13:09:27 +0000
asID:                     28223
IP address blocks:        189.126.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9b:61:49:6f:68:e7:a7:0a:1f:58:9b:c9:0f:e7:29:5d:94:52:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
        Validity
            Not Before: Jul 26 13:04:27 2024 GMT
            Not After : Jul 25 13:09:27 2025 GMT
        Subject: CN=96ED57989CE9849DA05500F1809F277CBD03FF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:4d:69:4e:ce:79:69:a3:7c:f0:b1:17:97:
                    41:3a:a2:b9:52:d0:4a:e7:9a:9b:6e:9c:27:1c:92:
                    62:36:23:58:78:da:a4:51:02:2a:03:0c:bc:6c:b3:
                    ea:b0:e0:62:10:a2:3e:18:cd:02:6d:e5:a2:8a:1f:
                    d6:df:95:a8:ce:61:44:56:98:b9:1e:23:04:3f:e9:
                    34:51:b6:eb:03:21:f6:57:7f:c2:50:d4:80:83:ca:
                    da:aa:af:b5:52:fe:f8:aa:19:5f:11:0a:7a:fa:89:
                    bf:db:4b:42:76:64:fd:b1:a3:66:71:34:d8:03:97:
                    82:58:ea:7d:da:31:e2:a8:f1:bd:47:5e:2c:15:c4:
                    ca:8d:5b:06:22:5b:03:db:0e:2f:36:92:7d:27:77:
                    f3:58:bd:e1:b0:8e:64:a9:02:8b:54:73:57:e4:cb:
                    3a:b4:08:fd:65:19:d4:7d:97:0d:53:f8:fb:cb:b1:
                    8f:70:1e:5a:4c:f6:88:6a:b8:21:cd:02:83:ac:3f:
                    08:25:ee:37:53:10:c7:a7:a0:67:61:aa:55:ca:0e:
                    27:89:29:c4:75:e5:07:1d:34:a9:26:7e:fb:08:30:
                    3b:d2:61:ff:bc:03:f3:d3:ec:60:1f:fa:59:4b:e9:
                    2e:e0:34:d6:1f:47:c9:55:47:d8:9a:2e:81:87:26:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:57:98:9C:E9:84:9D:A0:55:00:F1:80:9F:27:7C:BD:03:FF:41
            X509v3 Authority Key Identifier:
                keyid:87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33382e302f32342d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a2:ae:ca:2e:59:fe:cd:2d:72:ef:b6:96:01:06:38:7f:eb:
         c2:7e:2a:d7:ff:2e:2c:b8:95:40:32:82:d1:f8:d1:7d:6e:a8:
         06:18:93:54:26:72:56:f9:37:3e:07:e2:11:eb:54:89:de:7e:
         fe:81:b4:54:e7:33:5f:18:2f:87:a1:e6:6d:e4:a3:74:11:58:
         b6:d8:2d:1a:f5:88:dd:72:b6:37:7e:09:ba:5d:e5:e2:e1:5b:
         eb:70:3e:1e:db:94:14:f9:e8:ee:87:50:0e:be:82:29:bd:03:
         9c:f4:51:00:39:64:13:e4:c4:55:04:50:71:f5:ab:7d:c8:db:
         a1:25:91:a3:bf:41:37:8c:80:ea:ad:af:79:95:99:bf:e3:bc:
         18:38:9c:11:34:67:fe:2f:0b:d1:af:1d:b4:5c:8c:5f:f5:7c:
         6c:2f:0f:37:a1:0c:e2:18:b5:80:a7:bb:e8:0d:3c:37:03:b4:
         d3:05:68:0e:d0:43:8a:95:47:c1:48:7f:5a:24:5b:41:9b:f9:
         d3:60:a4:42:99:20:9f:62:f5:d0:a4:c4:58:2e:82:6d:97:c4:
         85:d9:64:31:41:cf:da:69:d7:ec:96:09:e6:74:93:7c:d5:90:
         d3:20:54:64:91:c1:59:8f:12:de:b9:c2:74:b7:a8:88:b1:1b:
         1c:07:7b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:27 2024 by rpki-client on console-ams.rpki-client.org