Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138372e34352e3137362e302f32302d3234203d3e203533303535.roa
File:                     3138372e34352e3137362e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          ffuPP0DGd3BlvDWdDBTN33il+xhRPpdtB93iaawOVr8=
Subject key identifier:   F1:4A:DE:FC:B4:EE:90:1D:74:C6:65:98:F4:D8:45:BE:2A:F3:E9:BD
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       312D490A722DE08C31B70E94CA089EA26DED3986
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138372e34352e3137362e302f32302d3234203d3e203533303535.roa
Signing time:             Wed 03 Apr 2024 20:20:28 +0000
ROA not before:           Wed 03 Apr 2024 20:15:28 +0000
ROA not after:            Wed 02 Apr 2025 20:20:28 +0000
asID:                     53055
IP address blocks:        187.45.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2d:49:0a:72:2d:e0:8c:31:b7:0e:94:ca:08:9e:a2:6d:ed:39:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Apr  3 20:15:28 2024 GMT
            Not After : Apr  2 20:20:28 2025 GMT
        Subject: CN=F14ADEFCB4EE901D74C66598F4D845BE2AF3E9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:6e:95:65:d3:51:92:3b:72:83:e8:b8:91:
                    e9:71:d4:26:e8:04:4d:24:65:eb:bb:31:1e:bd:9f:
                    d8:bf:63:83:de:21:d1:27:5a:95:27:5c:dd:41:33:
                    b2:96:1c:23:85:76:40:01:cd:18:ae:9a:da:4d:9a:
                    a9:1c:e1:e6:5e:24:13:d6:6c:38:e0:e1:c7:54:d3:
                    c2:a3:a6:63:0f:f3:53:63:54:e6:b0:e3:66:14:59:
                    bd:3f:1d:ec:e6:b3:3d:a4:e6:d8:c3:b0:e1:31:5e:
                    8e:5e:04:2d:c8:97:3e:89:e4:89:91:2d:a6:d2:ef:
                    f7:d8:60:97:d1:20:45:d7:12:d4:88:ac:61:78:a8:
                    ab:61:a0:00:dd:c5:57:23:2d:7e:7c:8c:9f:7d:4a:
                    e7:2e:b0:e3:68:0a:c2:a8:2e:79:78:84:76:14:13:
                    b3:44:e9:07:3f:ab:18:a2:27:f1:29:a6:7a:e5:46:
                    03:c7:69:62:7c:8b:c1:1b:1c:a4:c4:b8:34:87:1b:
                    0d:af:76:7a:0d:c3:de:7c:09:88:58:ed:8e:37:59:
                    ab:f8:79:7d:95:aa:07:1e:80:70:2f:17:11:ef:04:
                    0a:8e:45:7f:55:eb:cb:2e:62:16:ee:e3:f1:82:a0:
                    5d:6c:e2:de:ba:60:67:e2:8d:e9:d8:78:25:31:c7:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:DE:FC:B4:EE:90:1D:74:C6:65:98:F4:D8:45:BE:2A:F3:E9:BD
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138372e34352e3137362e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:08:49:ef:94:54:f8:bf:af:51:ef:62:29:5a:d2:51:d6:
         71:0d:76:2c:89:87:b7:ca:3e:d6:d5:59:04:39:8c:9c:58:c1:
         35:8a:34:6f:d0:c3:c4:c4:c2:06:2f:49:40:33:87:0c:ef:34:
         bc:6e:ab:67:9a:bd:21:c9:1f:85:7e:d6:b8:61:8f:9a:e8:66:
         8e:fd:6e:d2:3e:fb:64:cc:be:63:85:a7:24:09:80:d7:46:ac:
         44:bb:cf:17:07:da:fe:77:6b:d0:cb:e6:98:b0:e8:c4:a7:90:
         9b:15:71:1d:2f:8b:fd:1e:34:82:97:67:97:0b:b2:fc:1c:41:
         c1:de:3f:41:94:25:af:7c:d4:ef:33:6a:47:c3:0c:50:b0:b6:
         63:c1:b6:70:8b:a6:c8:6a:a4:f0:db:d8:bf:26:a4:c3:f0:dc:
         fc:1d:ed:fb:9f:71:01:3c:b1:ba:33:c5:78:8d:e1:fd:b2:0b:
         c7:fa:48:74:e4:c5:4d:20:37:81:a6:a9:44:2e:4c:12:7c:a8:
         b7:01:90:fc:48:44:c6:83:73:27:8b:3c:02:14:1b:17:9f:7e:
         57:e8:c7:ce:8b:0e:61:24:80:70:c1:99:4c:5a:42:53:96:8b:
         80:8c:85:8a:f6:63:a9:4a:3e:ab:b0:86:2a:fa:7f:b5:6d:7c:
         24:51:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:06 2024 by rpki-client on console-fra.rpki-client.org