Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31332e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          GpjzQynH3sm8QMs05vxft5A/OHkZteKZvoRwDv4/eZA=
Subject key identifier:   2F:A8:75:E9:99:00:25:BB:02:0D:52:F1:28:A4:DF:A3:67:A5:38:0E
Certificate issuer:       /CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
Certificate serial:       31D825B50060AEC14892C1FDF782EAB69A84828E
Authority key identifier: FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa
Signing time:             Tue 22 Oct 2024 21:08:46 +0000
ROA not before:           Tue 22 Oct 2024 21:03:46 +0000
ROA not after:            Tue 21 Oct 2025 21:08:46 +0000
asID:                     270577
IP address blocks:        187.94.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d8:25:b5:00:60:ae:c1:48:92:c1:fd:f7:82:ea:b6:9a:84:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
        Validity
            Not Before: Oct 22 21:03:46 2024 GMT
            Not After : Oct 21 21:08:46 2025 GMT
        Subject: CN=2FA875E9990025BB020D52F128A4DFA367A5380E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:af:11:05:91:61:01:b4:36:25:f6:55:62:
                    ad:f4:67:f1:13:51:8f:70:e4:d0:cd:f9:23:0a:00:
                    c1:62:39:ae:0e:7a:41:80:1a:5c:5c:fc:4a:de:22:
                    0f:64:60:87:7d:f0:83:28:b4:c6:56:65:56:82:bc:
                    dc:7f:e8:37:1c:68:07:7a:f9:d2:ea:ed:0b:58:0b:
                    be:db:10:fd:e0:31:ab:0f:17:e9:93:c6:73:4f:80:
                    c6:db:b4:d0:6b:76:e7:b4:41:b4:ef:94:98:dc:f5:
                    7d:54:1c:0b:db:da:f8:40:60:eb:ed:d5:c5:2b:71:
                    b7:eb:c6:17:2d:75:c2:3a:29:de:c0:27:7d:7d:bf:
                    bc:32:0c:c8:34:14:6c:d6:e8:01:dd:6e:df:1b:75:
                    18:02:1b:ac:be:26:7c:5b:67:02:fa:45:83:6f:31:
                    ef:f8:c5:1e:77:e3:83:f4:fd:53:41:3d:8e:bc:df:
                    23:54:96:10:a0:54:05:44:61:36:93:cb:e3:fd:48:
                    93:22:4c:3c:59:53:49:e1:c8:1f:25:09:42:7a:2a:
                    8a:0b:89:dc:3e:8d:e5:fa:0f:ba:2e:97:f6:30:9e:
                    ed:f3:b6:79:cd:b8:24:aa:84:7b:c0:69:95:69:3d:
                    b9:ec:b4:f7:fa:06:71:dc:70:f1:07:88:96:e0:56:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:75:E9:99:00:25:BB:02:0D:52:F1:28:A4:DF:A3:67:A5:38:0E
            X509v3 Authority Key Identifier:
                keyid:FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31332e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:23:e0:37:f2:34:aa:20:d6:d1:70:7f:7c:f2:e7:f9:7b:
         31:ab:ef:1f:2c:a7:e8:62:43:8e:0e:bd:20:cf:70:fe:28:d2:
         ea:52:71:43:5a:c8:a2:86:56:c2:18:33:7b:96:36:29:8d:c4:
         73:d1:03:b7:59:ec:69:35:ae:be:b7:9b:78:f4:02:9d:83:09:
         37:3f:af:44:dc:fe:cc:a4:16:43:d8:ee:5a:0f:bc:8f:3b:02:
         46:a3:ff:e6:3a:af:56:d7:e7:7c:d2:96:24:a5:ac:6f:a8:4d:
         45:77:5c:c6:e9:12:04:40:93:84:a7:02:66:c9:bb:72:3b:70:
         96:15:bd:a9:2d:e1:fd:88:7d:25:df:14:c5:d4:14:50:a7:cd:
         de:7c:ed:6b:19:0b:e1:95:89:d2:93:9c:3d:b8:90:19:2a:e9:
         1e:9a:fa:6b:a9:40:59:52:4b:84:e9:28:f5:92:dd:87:26:32:
         c3:1c:a0:39:fa:35:54:df:e9:0a:79:fe:0f:5a:4a:88:e0:cf:
         d9:5f:82:8c:29:e1:a5:95:72:98:1a:3d:8c:52:55:91:10:81:
         5f:4f:c9:5b:ab:97:2f:ba:64:ae:f5:48:d4:0a:26:92:1c:e9:
         f1:e9:09:01:d2:91:10:85:ea:ac:c1:5f:69:07:0c:b1:81:16:
         22:93:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org