Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
File:                     3138372e34392e31322e302f32322d3332203d3e203238313338.roa (raw, json)
Hash identifier:          O5bGsG8EeVAqN1lRYwLxOgL1fsJJ2q0Lx4/DY8065iY=
Subject key identifier:   2E:61:00:F5:23:E5:85:99:C1:9E:AC:4F:E3:5E:61:CA:B1:E7:17:F7
Certificate issuer:       /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial:       260DCD9BA04559E60DEC14075DAAA88C422B05B0
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
Signing time:             Mon 15 Apr 2024 14:27:50 +0000
ROA not before:           Mon 15 Apr 2024 14:22:50 +0000
ROA not after:            Mon 14 Apr 2025 14:27:50 +0000
asID:                     28138
IP address blocks:        187.49.12.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
                          rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0d:cd:9b:a0:45:59:e6:0d:ec:14:07:5d:aa:a8:8c:42:2b:05:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
        Validity
            Not Before: Apr 15 14:22:50 2024 GMT
            Not After : Apr 14 14:27:50 2025 GMT
        Subject: CN=2E6100F523E58599C19EAC4FE35E61CAB1E717F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:0b:b2:83:46:af:93:18:f6:b3:7c:19:2d:
                    ba:99:3c:cb:fb:17:94:6b:13:25:12:04:dd:20:f9:
                    89:5e:34:88:77:22:eb:75:12:e6:31:4b:2b:b7:59:
                    ea:d8:2f:27:fd:d6:f0:52:36:9d:70:e8:3f:c2:a3:
                    2a:d7:37:30:d5:17:11:ba:e2:3d:61:ad:cb:cb:6b:
                    45:f5:4c:87:c2:aa:ea:da:9c:80:aa:69:7a:4c:36:
                    8b:b2:0f:30:64:4c:fa:e5:b2:fc:b4:55:f1:be:f2:
                    24:5e:fa:9f:dd:db:aa:d8:b4:17:ab:92:2d:98:7b:
                    f1:6b:f6:8d:24:69:2b:a7:87:a6:6d:b0:7f:68:78:
                    ac:99:5f:10:a2:a3:29:ef:6a:94:5b:92:b2:5f:4e:
                    23:b6:3b:da:e0:cb:cd:c0:47:f6:55:95:d9:a8:87:
                    b9:af:0c:3d:74:30:d8:95:f9:cb:01:a9:54:c5:49:
                    0a:36:49:be:1e:09:d9:9f:91:30:68:20:e5:60:52:
                    bc:8b:ca:f9:44:8d:05:a1:5c:72:e7:4a:0b:3a:0a:
                    57:91:05:e0:1a:21:87:8e:a9:b3:e2:36:e2:f5:7b:
                    c1:8f:35:40:c4:97:e3:02:71:53:78:b9:81:20:2a:
                    22:8e:94:a0:f7:bd:2a:5c:7c:08:61:6a:52:f2:be:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:00:F5:23:E5:85:99:C1:9E:AC:4F:E3:5E:61:CA:B1:E7:17:F7
            X509v3 Authority Key Identifier:
                keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:8a:f9:ab:5f:e7:92:a8:8b:f7:d0:18:53:61:a1:19:cd:
         f4:04:3e:0c:1d:df:7b:b7:14:46:79:13:7b:2d:d5:08:b9:f4:
         10:92:b9:b9:80:33:77:a9:71:e4:04:77:53:ae:ab:ec:31:8c:
         8c:3b:80:5f:37:99:e4:09:22:38:c9:03:88:d0:d0:d3:91:4c:
         3b:61:98:21:aa:e3:fb:0a:af:e2:c2:59:ac:a2:ec:5a:07:f6:
         d9:b1:c3:e4:2a:54:19:b1:b4:ac:de:fa:41:38:6c:f2:91:a7:
         26:7b:cc:1b:c9:32:e5:4e:a1:bf:a9:b3:e6:b0:4d:28:91:58:
         6f:cd:b8:e0:eb:94:32:61:a3:2c:53:53:78:2b:5c:3d:1d:c7:
         ec:c0:d0:7d:2e:b5:73:4e:e8:76:7b:49:13:ab:37:7c:cd:8a:
         b2:0b:b4:93:84:50:63:7d:ef:df:e4:ad:0e:ac:d2:4b:03:29:
         5c:5f:b9:34:fd:bf:5d:f6:fa:11:00:7f:d0:a4:6f:62:22:c6:
         73:ed:2f:c3:a2:3f:9a:d3:75:bb:1e:8f:19:3d:46:48:2c:28:
         82:99:e5:00:11:5a:cf:ad:22:a7:cc:d2:eb:b9:93:76:b4:3a:
         72:9d:67:1a:54:c8:4f:eb:68:0d:d3:aa:e5:f3:34:0b:ec:1e:
         78:16:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org