Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa
File:                     3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          LKNp0pTU4RS7haWecXJ8peLUpLWVWtfJHP22XQsML4Q=
Subject key identifier:   A8:43:F5:CE:56:D2:AC:BF:74:83:B5:79:AD:82:49:E8:FB:C5:DD:E9
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       400E29A4D1D90EB33AC74CEB075434870F006868
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 17 May 2024 13:50:40 +0000
ROA not before:           Fri 17 May 2024 13:45:40 +0000
ROA not after:            Fri 16 May 2025 13:50:40 +0000
asID:                     22356
IP address blocks:        189.124.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0e:29:a4:d1:d9:0e:b3:3a:c7:4c:eb:07:54:34:87:0f:00:68:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: May 17 13:45:40 2024 GMT
            Not After : May 16 13:50:40 2025 GMT
        Subject: CN=A843F5CE56D2ACBF7483B579AD8249E8FBC5DDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:60:1a:b9:b2:37:53:62:a6:31:31:05:bd:
                    b4:69:15:fe:df:a8:ef:02:1c:f9:26:64:47:ba:13:
                    de:43:5e:5d:df:eb:e3:c6:60:4e:09:47:52:8e:b2:
                    2a:30:31:de:03:81:eb:58:56:fb:32:28:dd:4b:10:
                    e6:a5:5e:16:a0:b8:b1:1c:be:9c:10:e5:32:8e:24:
                    c3:c1:c8:a1:10:c8:d4:d1:69:24:e7:bf:29:af:25:
                    a0:6a:57:32:e5:11:36:76:5c:8b:59:7d:e5:46:99:
                    d1:7e:79:21:31:56:40:6b:4a:5a:8d:c3:14:be:1f:
                    76:7d:2c:e5:27:ee:0d:b9:9f:79:e8:81:fc:e4:69:
                    ba:9b:8b:fa:90:c4:a5:c0:27:a4:c8:63:bc:91:e7:
                    ed:84:a7:b9:69:78:7d:e1:37:7d:e4:74:6e:96:6d:
                    3f:bf:b0:23:f5:30:75:d2:0a:d7:f1:03:98:1a:e5:
                    f9:b4:84:4c:39:32:21:82:96:5e:60:5f:6a:e2:68:
                    21:37:a5:46:ba:96:94:e5:ed:62:05:e4:fa:91:12:
                    bf:c2:58:ef:27:fc:8e:ab:c6:dc:6b:30:50:37:ca:
                    fa:f8:e0:8b:79:1c:7d:da:1e:1b:c0:7c:2e:f8:b6:
                    2c:b5:f1:c5:0b:6a:ec:c6:7c:1a:50:76:60:d2:ad:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:F5:CE:56:D2:AC:BF:74:83:B5:79:AD:82:49:E8:FB:C5:DD:E9
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138392e3132342e39362e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:28:12:68:c9:12:f3:1f:a6:cf:ab:65:23:b2:f1:97:4a:37:
         2b:68:c7:2f:8f:4c:bb:9b:bb:dd:ed:84:31:0d:21:da:de:83:
         8d:4d:54:15:f0:b5:10:7d:d9:53:c5:07:c0:e1:a7:04:56:41:
         dc:fe:00:35:60:b9:a7:e2:d7:ef:bc:d5:38:c2:c9:d2:99:7e:
         a9:b9:01:bf:0e:8a:40:cf:80:b1:7e:7d:7a:71:ff:e9:f4:3d:
         8e:91:80:64:fd:f3:6f:cc:c7:3c:7d:7d:92:ad:42:c0:6c:06:
         82:0e:3c:2e:85:22:7c:70:7f:36:81:c4:40:6c:d2:b3:cc:37:
         25:e9:1f:c3:b5:04:e1:fb:c9:80:66:be:9f:39:ca:42:6c:e1:
         54:03:ba:b2:69:57:6e:ee:21:76:f5:eb:51:b5:8b:d6:d3:7f:
         e7:97:e4:40:21:2a:d9:d0:55:2f:16:66:b3:9b:2b:41:53:ee:
         58:95:b7:7b:a4:30:e3:0d:00:4c:4c:2c:ee:30:5f:76:48:5a:
         a2:75:7d:2e:ae:1c:f9:13:09:aa:43:8f:fa:de:3c:a2:ca:4c:
         48:06:13:df:2f:85:7f:8a:04:da:9e:0b:df:02:12:6f:93:25:
         74:39:e2:9f:8b:b0:fb:9b:d0:fa:6b:1d:19:b2:d2:2c:92:f0:
         fb:3b:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:13 2024 by rpki-client on console-fra.rpki-client.org