Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31322e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          KU6sfl353hQJsYAT/b/G/lMxpMzr0u+TBmwcJsched8=
Subject key identifier:   A9:22:24:BC:D2:39:22:E5:FA:14:71:32:9B:93:27:00:35:1B:41:A7
Certificate issuer:       /CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
Certificate serial:       0C56E64B28ECB8C7B7CEAA40FE2E104F0516EE72
Authority key identifier: FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32342d3234203d3e20323730353737.roa
Signing time:             Tue 22 Oct 2024 21:08:45 +0000
ROA not before:           Tue 22 Oct 2024 21:03:45 +0000
ROA not after:            Tue 21 Oct 2025 21:08:45 +0000
asID:                     270577
IP address blocks:        187.94.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:56:e6:4b:28:ec:b8:c7:b7:ce:aa:40:fe:2e:10:4f:05:16:ee:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
        Validity
            Not Before: Oct 22 21:03:45 2024 GMT
            Not After : Oct 21 21:08:45 2025 GMT
        Subject: CN=A92224BCD23922E5FA1471329B932700351B41A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:69:05:57:78:72:48:0c:52:1b:e8:22:1c:
                    9c:de:0d:f5:0e:41:d0:af:d5:3b:00:1c:55:0b:9a:
                    3b:43:5b:00:c6:08:77:32:e9:e3:a8:3d:d8:d4:8a:
                    6e:83:d6:d3:75:ff:b8:35:5c:ab:b5:df:a4:60:23:
                    af:16:f7:fb:a2:9d:96:10:7c:e0:fc:23:79:ae:9c:
                    a3:33:30:09:a4:cf:17:7a:bd:9a:94:3d:e2:0c:c6:
                    32:cc:85:10:17:d2:bd:7a:fe:50:45:6b:f9:93:67:
                    32:df:23:95:6e:ee:e8:dd:45:68:99:1c:e2:c5:b2:
                    51:d2:60:78:87:f5:97:7f:7e:29:ff:96:45:79:94:
                    53:bf:61:29:7d:20:d0:b0:dd:fd:98:81:6b:89:a0:
                    c0:bf:ab:ef:3e:e2:73:55:02:be:34:bf:67:ea:58:
                    e3:1e:11:06:4f:76:80:68:d4:ea:bb:d9:ec:7e:46:
                    a7:2f:9d:cb:4d:83:95:34:32:07:81:0b:20:b7:08:
                    1a:b0:07:90:69:39:44:c5:b9:32:7f:52:cf:6e:f4:
                    d0:d7:ca:33:b7:76:5e:5a:4e:a9:21:5d:24:a5:47:
                    ad:ba:d3:04:e1:a5:61:38:05:fa:22:01:c2:9f:34:
                    58:61:94:1a:6a:79:08:dd:58:0d:cb:36:b5:c3:f1:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:22:24:BC:D2:39:22:E5:FA:14:71:32:9B:93:27:00:35:1B:41:A7
            X509v3 Authority Key Identifier:
                keyid:FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:a3:0a:42:99:fb:4c:6f:67:bc:34:75:aa:b3:c6:c5:ef:
         f3:91:9a:a2:aa:59:c3:43:b9:c6:23:d0:7a:78:8b:33:1a:99:
         99:4d:53:21:20:e7:6e:1b:4f:23:24:c6:de:a9:cc:0f:e3:cb:
         37:a3:3b:25:8c:4c:f1:08:a6:62:b1:c1:11:02:a2:0c:44:90:
         fc:56:93:37:e0:58:27:81:ee:d8:4a:44:cf:60:30:d4:11:02:
         d2:8c:5f:71:cb:ab:cf:f8:64:4a:97:e6:aa:c1:4c:b9:7a:cc:
         36:cb:d6:34:6e:6c:79:9c:09:a1:2c:e3:3a:6d:57:df:33:f2:
         59:2c:bc:e8:40:ad:d7:a0:bd:63:3a:4b:81:5e:af:7c:94:a0:
         4d:dc:a0:29:5e:13:c2:1e:09:3b:1d:a0:21:75:a0:44:ab:a3:
         17:01:70:fd:4e:af:c9:53:26:7e:fa:c9:dd:51:7e:ca:24:f0:
         11:ba:fd:57:39:e2:25:e8:54:b3:95:f8:a4:61:fa:a7:17:94:
         4b:0e:dc:64:3d:88:7f:ae:b1:af:b5:f0:f4:d7:2a:2b:40:a7:
         b2:f8:e0:37:ef:de:33:7f:da:0f:5a:c7:58:6e:d1:cc:b2:ab:
         cd:1c:6c:f6:b6:f6:b6:a1:a7:b0:52:c1:24:8a:7f:26:79:01:
         78:85:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org