Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3234203d3e203238323736.roa
File:                     3138392e31342e36342e302f32302d3234203d3e203238323736.roa (raw, json)
Hash identifier:          n9vFUhyh0ivrUxtVL5dGtSmvSfuUezdFgc71LW9vxgc=
Subject key identifier:   B3:59:C0:55:4F:1F:D3:7A:B7:88:0C:13:5C:5D:DC:94:37:0F:82:64
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       75997B34A1F9CCB738253264D6970224E3EDE581
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3234203d3e203238323736.roa
Signing time:             Wed 05 Jun 2024 19:19:24 +0000
ROA not before:           Wed 05 Jun 2024 19:14:24 +0000
ROA not after:            Wed 04 Jun 2025 19:19:24 +0000
asID:                     28276
IP address blocks:        189.14.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 15:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:99:7b:34:a1:f9:cc:b7:38:25:32:64:d6:97:02:24:e3:ed:e5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Jun  5 19:14:24 2024 GMT
            Not After : Jun  4 19:19:24 2025 GMT
        Subject: CN=B359C0554F1FD37AB7880C135C5DDC94370F8264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:c3:44:bd:6c:72:a0:07:39:bf:08:1b:39:
                    86:3d:0f:81:39:73:d1:16:57:fd:8d:eb:06:a5:30:
                    cc:e9:90:09:43:e0:01:d9:58:a7:d1:ef:db:36:f9:
                    ac:01:67:7f:91:be:15:bc:ca:2d:27:1c:f6:20:26:
                    4b:ca:7b:21:40:fe:63:ce:a4:05:cf:37:d2:81:b2:
                    00:97:d5:e9:e7:0d:cf:40:c9:eb:61:5e:3b:7e:84:
                    62:78:f9:4c:c0:f4:e3:a3:ec:e2:c7:47:a0:67:8f:
                    46:35:55:54:aa:fe:34:44:f4:98:84:97:c3:b0:85:
                    6b:a8:9e:e4:27:df:bb:11:06:57:4d:81:1a:3e:5c:
                    56:db:ab:b3:73:27:07:72:aa:4b:13:c3:c1:17:a6:
                    a3:2d:be:f3:a9:01:1f:77:a7:a7:ca:c1:9e:23:cc:
                    ad:7d:a9:24:93:22:57:db:94:10:4a:e4:42:6f:1c:
                    16:11:5f:20:9b:23:07:6d:55:17:bf:77:1c:a3:64:
                    55:e6:b1:12:98:2b:4a:03:52:99:9d:aa:c4:95:af:
                    0e:59:f9:70:ea:06:fd:74:ed:39:1d:e4:50:71:91:
                    d9:08:75:86:c5:86:b1:68:38:ae:a2:1f:ab:48:9b:
                    0b:28:10:21:3c:24:0e:1e:08:6f:92:ca:ae:9c:a1:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:59:C0:55:4F:1F:D3:7A:B7:88:0C:13:5C:5D:DC:94:37:0F:82:64
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32302d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:64:65:fa:72:9c:44:36:ec:55:e1:1e:53:e1:23:4f:57:89:
         17:e9:ab:b4:4d:b5:ee:c2:f3:ae:8d:7e:95:36:09:d9:53:50:
         2c:03:75:8c:80:be:e4:dc:7a:62:bb:f1:44:3b:7b:49:c2:00:
         c3:af:2a:13:6e:9c:40:e2:d0:98:5c:92:76:20:0b:c2:14:f6:
         b1:41:a9:a1:fd:ca:9d:52:05:54:88:a0:e8:51:0f:ea:62:0d:
         1d:58:50:c5:55:1b:98:5b:00:ca:8d:7d:7b:7e:eb:ec:ab:1f:
         d8:37:d6:3b:5e:8c:51:21:f8:f5:4d:79:3b:e8:f4:08:fb:80:
         ec:1f:aa:6f:e3:95:ec:e1:1a:84:a1:73:d6:5e:e3:b2:e2:3e:
         7b:91:79:aa:0c:40:c8:9c:0d:a5:f6:64:94:d7:9a:d7:4a:3b:
         91:2a:62:69:a6:76:b0:13:6e:e2:c6:7f:87:83:82:31:a7:b2:
         29:48:72:bd:f3:50:91:79:0d:f9:a3:93:15:5e:98:27:b1:3b:
         34:c7:fd:1b:b4:e2:49:37:52:53:99:b1:48:89:b5:7f:ee:3c:
         8a:3f:62:87:18:1a:eb:5a:92:58:90:79:6a:8b:a4:41:de:16:
         f7:25:39:f5:45:4d:d6:6b:06:ff:1d:f4:17:fa:4e:eb:fe:ef:
         93:11:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 18:18:58 2024 by rpki-client on console-ams.rpki-client.org