Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138392e3132362e39362e302f31392d3332203d3e203237373135.roa
File:                     3138392e3132362e39362e302f31392d3332203d3e203237373135.roa (raw, json)
Hash identifier:          kM5WkD1MOvmqE8MKivqIaJcuzwaT2Wd4P3SK4wZStXk=
Subject key identifier:   75:59:51:75:79:FA:AC:A4:7D:F6:74:A6:BF:94:9A:E0:22:E6:C2:0E
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       371BF9EB9CDA2344B41DC9A9B470DBECBCC2C37D
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138392e3132362e39362e302f31392d3332203d3e203237373135.roa
Signing time:             Thu 04 Apr 2024 01:16:59 +0000
ROA not before:           Thu 04 Apr 2024 01:11:59 +0000
ROA not after:            Thu 03 Apr 2025 01:16:59 +0000
asID:                     27715
IP address blocks:        189.126.96.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1b:f9:eb:9c:da:23:44:b4:1d:c9:a9:b4:70:db:ec:bc:c2:c3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Apr  4 01:11:59 2024 GMT
            Not After : Apr  3 01:16:59 2025 GMT
        Subject: CN=7559517579FAACA47DF674A6BF949AE022E6C20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ad:e9:a9:97:d6:9d:f0:dc:94:2f:f2:a7:1d:
                    40:7c:37:cd:cf:c0:31:51:91:45:e9:8a:a0:5d:cb:
                    a4:84:89:d5:f7:7f:75:f5:7a:91:b4:24:d4:81:4f:
                    ad:b9:c2:8f:1f:cf:d1:59:21:a7:2e:c2:bd:72:c4:
                    80:52:fd:21:99:66:4c:e1:28:e8:23:dd:15:6e:b8:
                    96:c3:71:0e:03:26:c5:4d:37:b9:1b:8b:b4:f3:85:
                    46:03:78:9b:ee:47:40:18:3c:72:33:3c:26:31:e1:
                    66:be:bd:6c:81:0a:76:84:39:1f:12:fc:58:8b:d9:
                    a8:fc:46:55:a9:c4:fa:87:40:bc:a6:e1:b0:d4:07:
                    aa:ee:c4:62:b0:aa:00:01:42:0e:e8:33:33:c7:12:
                    68:44:ce:76:37:30:f5:0c:01:6d:91:95:41:4f:ae:
                    18:d9:b1:2e:f2:16:bf:c3:5b:a1:40:2b:dd:e9:a1:
                    57:78:ea:bd:74:47:16:cc:d7:f0:a8:94:94:88:f7:
                    f6:31:2e:fb:09:ef:35:62:78:a1:e4:b0:31:0d:8b:
                    7e:7c:74:6a:7e:3f:9b:eb:aa:9f:97:8d:19:11:65:
                    ab:c5:e5:1f:46:50:36:62:3d:d0:0d:99:e3:7b:79:
                    f5:de:53:9a:09:31:79:69:7b:ce:09:37:34:79:69:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:51:75:79:FA:AC:A4:7D:F6:74:A6:BF:94:9A:E0:22:E6:C2:0E
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138392e3132362e39362e302f31392d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:11:e8:e5:6b:00:90:38:12:23:86:c1:d4:a3:e9:2e:fe:4f:
         fd:29:e1:fc:40:04:40:25:81:75:a0:ac:dc:e4:8f:62:c3:53:
         ed:49:53:20:60:96:ed:cd:f1:1e:01:7c:fb:84:f4:04:2e:23:
         cd:41:1e:a9:fc:a0:ba:3f:f7:ae:c7:71:96:f6:4c:06:f1:17:
         b4:3d:85:87:1f:ad:61:e1:4f:6c:51:bf:11:c8:74:78:96:1c:
         8c:9d:8e:a9:3e:15:b9:52:3b:e6:ba:1d:33:f0:0d:43:cb:65:
         6a:31:05:02:3a:0b:80:90:10:6d:9d:9c:de:18:65:ab:65:0d:
         6c:76:1e:1f:c3:11:66:fc:12:bf:f8:ab:00:11:9d:a5:c0:5b:
         52:66:e3:e6:bb:b5:d5:1f:e8:a2:3b:59:7f:1f:51:46:8f:d8:
         20:ad:b0:44:1e:4a:63:bc:60:9e:74:92:cd:c1:2d:25:eb:1b:
         1d:b3:f3:9b:01:e6:02:7f:27:7d:fc:e8:17:fa:35:fa:53:6d:
         f6:d4:dc:6a:83:ef:f9:9e:14:af:c5:d6:84:aa:10:1e:7a:07:
         65:51:42:30:21:01:79:be:cd:e7:06:de:03:95:04:ae:65:5a:
         af:fb:5f:3f:15:23:15:ce:5b:c2:50:5f:17:1b:69:2e:1b:a7:
         b9:4c:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:36 2024 by rpki-client on console-fra.rpki-client.org