Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138372e3130382e31362e302f32302d3332203d3e203533313639.roa
File:                     3138372e3130382e31362e302f32302d3332203d3e203533313639.roa (raw, json)
Hash identifier:          m7jQIhmcYjYtktr31rl9q+EoZKupRYpgXEi3hG1UH1M=
Subject key identifier:   06:E0:56:34:12:33:6C:93:07:D1:53:90:9F:90:5E:F0:6E:EF:ED:F0
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       1DD3FF5F4F5804376A35748EE85C38448721BA92
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138372e3130382e31362e302f32302d3332203d3e203533313639.roa
Signing time:             Wed 03 Apr 2024 21:08:10 +0000
ROA not before:           Wed 03 Apr 2024 21:03:10 +0000
ROA not after:            Wed 02 Apr 2025 21:08:10 +0000
asID:                     53169
IP address blocks:        187.108.16.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d3:ff:5f:4f:58:04:37:6a:35:74:8e:e8:5c:38:44:87:21:ba:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Apr  3 21:03:10 2024 GMT
            Not After : Apr  2 21:08:10 2025 GMT
        Subject: CN=06E0563412336C9307D153909F905EF06EEFEDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:c0:86:e2:bd:ad:84:8a:bd:e7:86:7c:92:
                    3f:2d:d6:ec:08:39:78:6b:02:e2:21:a7:05:e9:d1:
                    ce:c2:96:b1:e0:ea:84:90:25:a4:d8:17:83:20:28:
                    f4:87:35:4a:23:e4:b1:76:5e:a3:70:ad:f7:16:8e:
                    f7:e8:ff:54:fe:c3:77:17:fb:d6:c1:01:f3:ee:bd:
                    98:89:62:b1:8d:c8:47:17:f7:15:de:15:27:76:76:
                    1b:57:7c:8c:90:b0:da:96:22:26:cd:f4:aa:f7:60:
                    55:15:07:12:8f:97:32:f8:94:15:ee:77:8f:6e:dd:
                    77:6f:33:8a:d9:4a:70:67:86:d6:5d:6b:f3:54:09:
                    71:b0:2e:2f:44:47:23:01:f5:a6:c0:dc:91:a6:37:
                    47:53:c7:c6:84:5a:02:fc:1f:39:5c:8c:e1:1d:07:
                    a3:a0:84:5f:b2:a9:7c:98:18:40:36:dc:29:fa:8e:
                    99:27:a4:81:ab:bb:a2:6a:38:6e:d5:ca:29:11:b5:
                    f8:3f:e0:f0:d2:ba:b8:13:93:3e:3e:b5:c4:28:98:
                    f7:99:d0:2f:25:41:b0:20:e8:c7:5a:e3:20:22:67:
                    b1:8b:12:61:14:91:05:55:dd:be:26:bf:6d:05:84:
                    fd:d9:a8:07:22:7d:1c:2a:51:9e:4f:19:72:96:db:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:56:34:12:33:6C:93:07:D1:53:90:9F:90:5E:F0:6E:EF:ED:F0
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138372e3130382e31362e302f32302d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:de:ec:c9:54:6b:00:d8:26:4c:33:7d:38:a7:42:fe:32:35:
         39:f7:1b:8a:8c:0a:c1:db:19:5a:7f:b0:01:33:c1:36:d8:c4:
         be:0c:a2:7f:59:2e:4f:80:2f:b0:04:e8:8c:91:16:84:4d:d7:
         62:a0:c8:77:1a:a8:33:cb:66:fe:73:d2:d8:76:d4:39:3a:5d:
         20:72:b2:95:25:33:23:04:80:a3:c7:07:d2:1a:5f:13:90:25:
         a7:c2:06:a9:98:c1:cd:85:de:c6:b2:82:30:26:b1:d0:f4:ca:
         a5:9f:b6:43:08:b2:ce:5d:54:ac:a0:46:78:d1:34:56:24:65:
         94:94:82:88:8c:33:14:0c:a4:86:b1:b3:e9:d2:19:2a:82:29:
         25:f4:46:5e:89:67:a4:a5:ae:73:b0:f1:7c:78:58:e1:82:cf:
         0a:da:1f:0c:74:29:b2:53:85:9c:92:0c:34:6f:bf:04:fd:63:
         9a:b4:ad:c0:ea:3e:fa:71:40:71:4c:0b:5a:c7:08:10:99:83:
         2c:fe:25:af:0e:e9:f1:db:fd:b0:bf:0d:2c:62:fc:8a:ed:fc:
         e2:4a:26:ba:7a:49:04:74:3d:02:02:98:a5:9a:bc:d3:33:d4:
         a0:c8:ed:cf:c4:71:e6:68:08:1b:91:dd:2f:39:f1:a0:a9:37:
         76:2f:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:12 2024 by rpki-client on console-fra.rpki-client.org