Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa
File:                     3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa (raw, json)
Hash identifier:          xLilbRRmOfwN0SKQLOoOQb0OndByy4vg7+/cZNPzM84=
Subject key identifier:   37:39:6E:20:65:D3:92:01:A7:B9:BE:67:FC:E1:72:9A:C0:93:5D:BB
Certificate issuer:       /CN=A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C
Certificate serial:       0D16DC254E3E7D33E9CC3B7FB84BF8E569E439BE
Authority key identifier: A3:C4:E7:D2:04:36:2B:3A:03:17:6A:CF:88:4F:C0:B9:1E:9D:FE:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa
Signing time:             Fri 30 Aug 2024 20:17:52 +0000
ROA not before:           Fri 30 Aug 2024 20:12:52 +0000
ROA not after:            Fri 29 Aug 2025 20:17:52 +0000
asID:                     262644
IP address blocks:        187.17.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.crl
                          rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:16:dc:25:4e:3e:7d:33:e9:cc:3b:7f:b8:4b:f8:e5:69:e4:39:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C
        Validity
            Not Before: Aug 30 20:12:52 2024 GMT
            Not After : Aug 29 20:17:52 2025 GMT
        Subject: CN=37396E2065D39201A7B9BE67FCE1729AC0935DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:d4:a0:a3:51:65:a1:41:fe:31:cf:8d:91:
                    f9:61:93:51:0b:9d:be:e0:61:66:79:03:f0:af:2b:
                    c0:7a:0c:4d:0b:3a:21:39:a4:3e:eb:d7:fb:e9:7c:
                    73:ad:72:22:1b:54:b0:d0:c3:b9:bf:b1:6c:3d:d5:
                    f2:33:b5:a1:27:89:6b:79:4d:c8:d5:ed:79:a7:25:
                    12:46:db:03:9f:4c:4c:32:74:59:35:8c:ab:86:94:
                    06:3d:9d:35:4e:57:1b:8a:09:bb:2e:a9:91:19:d7:
                    a2:52:d5:8d:90:8f:f7:f9:23:f6:44:d8:d4:b2:c0:
                    42:89:c2:d7:24:bc:44:be:78:62:19:e1:cc:5d:c5:
                    04:35:f4:fe:d5:99:d7:b8:cb:3d:e2:f5:fe:76:70:
                    f8:2a:53:f7:56:ae:5f:8c:04:21:5f:54:52:10:64:
                    70:59:ff:88:be:8a:6a:02:00:ed:fc:bd:32:25:a2:
                    f9:57:35:c2:fb:51:ec:be:33:93:03:9b:f6:e1:68:
                    0d:54:b5:e3:c3:82:5e:36:f4:92:f9:d6:54:e1:4b:
                    d9:29:60:02:8f:86:a6:18:f9:13:ba:57:0a:5a:03:
                    21:63:44:17:2f:52:70:53:d0:cb:14:74:b2:bf:a2:
                    db:cb:4f:00:c7:90:17:89:51:f6:3b:f5:5f:fe:ad:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:39:6E:20:65:D3:92:01:A7:B9:BE:67:FC:E1:72:9A:C0:93:5D:BB
            X509v3 Authority Key Identifier:
                keyid:A3:C4:E7:D2:04:36:2B:3A:03:17:6A:CF:88:4F:C0:B9:1E:9D:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3C4E7D204362B3A03176ACF884FC0B91E9DFE1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3234203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:e3:30:28:2c:3e:0e:99:d8:e6:53:94:ca:95:c6:80:fa:
         d1:d1:35:6b:e6:19:89:1e:32:93:e2:de:9a:d2:c2:b1:c3:8f:
         c6:1e:fa:dd:49:f2:5a:0f:48:81:c9:bb:03:59:0c:35:a3:bd:
         3e:96:b5:fa:d7:7a:ea:f8:72:4f:19:10:9e:6e:69:ca:b6:3b:
         50:fb:dc:e3:23:77:b9:60:61:db:60:c7:55:1f:7a:ee:8f:39:
         44:74:8f:4c:b4:c1:33:bc:73:4c:6c:42:d4:c2:55:c3:4a:15:
         28:a2:8c:46:a9:28:15:cb:b6:7f:95:4b:04:df:03:bc:80:c7:
         ce:82:71:b6:e8:7e:9a:13:6d:ac:e8:c3:89:39:68:15:61:30:
         20:8c:49:80:13:8e:2e:24:66:07:6a:42:98:35:e8:65:88:df:
         30:de:97:fd:f5:56:e6:a6:f5:48:f4:e7:c6:2d:34:e7:f3:1f:
         8e:5e:55:2c:80:35:78:d3:37:1d:18:7e:78:ad:d0:6a:bc:bb:
         9c:ed:7d:28:e1:57:34:7e:6a:f7:c2:16:64:7d:e4:cc:2c:fc:
         1f:e2:d4:da:12:72:15:3c:e0:e2:3e:b3:9f:28:8d:24:99:05:
         ff:90:5b:ee:8f:06:1a:c2:e3:c7:77:e1:db:f7:05:5b:67:02:
         2e:b9:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:59 2024 by rpki-client on console-fra.rpki-client.org