Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32312d3231203d3e203238323736.roa
File:                     3138392e31342e36342e302f32312d3231203d3e203238323736.roa (raw, json)
Hash identifier:          V6MUrIX4gJ64bfxQtpO4CfANW62V5eq0+WqYsYN6ufw=
Subject key identifier:   D8:D8:A9:9D:E4:A3:10:BB:54:4F:64:E0:9B:EB:00:50:CA:B9:FF:2D
Certificate issuer:       /CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
Certificate serial:       5DC98DF86E101440FEA8172A307896019F75B909
Authority key identifier: 8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32312d3231203d3e203238323736.roa
Signing time:             Tue 23 Apr 2024 19:04:09 +0000
ROA not before:           Tue 23 Apr 2024 18:59:09 +0000
ROA not after:            Tue 22 Apr 2025 19:04:09 +0000
asID:                     28276
IP address blocks:        189.14.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c9:8d:f8:6e:10:14:40:fe:a8:17:2a:30:78:96:01:9f:75:b9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Validity
            Not Before: Apr 23 18:59:09 2024 GMT
            Not After : Apr 22 19:04:09 2025 GMT
        Subject: CN=D8D8A99DE4A310BB544F64E09BEB0050CAB9FF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e6:12:9b:07:50:48:d1:6a:ea:64:01:23:e9:
                    1b:0f:c7:80:fe:89:13:0a:da:36:e4:4b:41:c5:e6:
                    5f:11:09:95:a8:82:c8:16:88:85:d6:75:e9:18:d0:
                    07:1f:b1:f2:08:fc:ed:18:ac:e5:d2:1e:b3:62:3a:
                    70:5f:de:69:8d:a1:20:ba:ec:f8:23:8c:b0:eb:3c:
                    52:14:e6:9c:d1:ab:9f:a6:09:11:64:56:00:09:53:
                    26:23:27:0a:6e:0d:5b:7d:ad:db:ee:37:e1:27:95:
                    25:b8:5f:65:14:8b:9c:ac:e3:66:3e:ac:4b:84:3e:
                    83:70:af:49:6d:6c:7a:06:6c:5c:55:97:d3:e3:40:
                    de:a2:68:7c:d5:b1:ba:0c:64:2d:d5:ba:b0:b3:54:
                    2a:95:f1:c5:fa:f3:81:5f:8d:7f:91:04:59:db:21:
                    af:00:ad:31:f1:23:c7:7c:db:bb:ce:89:d8:91:33:
                    5b:91:0c:48:3c:83:3f:59:20:00:e1:6f:bb:05:b6:
                    14:9c:75:ce:05:06:0f:07:fd:0c:dd:ef:65:e4:0a:
                    ba:1b:d1:fd:e1:b9:55:6f:63:39:71:76:4b:93:b2:
                    04:01:c7:7e:37:d7:42:25:63:c5:4b:ad:16:02:b1:
                    a9:73:d5:8f:72:0b:4c:17:4d:85:5d:60:7a:f5:f8:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:A9:9D:E4:A3:10:BB:54:4F:64:E0:9B:EB:00:50:CA:B9:FF:2D
            X509v3 Authority Key Identifier:
                keyid:8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138392e31342e36342e302f32312d3231203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:10:dc:e4:6f:f9:89:87:21:84:65:0e:9e:a7:59:c3:da:9d:
         09:c5:8e:b0:3d:21:ff:a0:6c:00:a1:2f:86:76:67:fa:88:c1:
         db:23:c2:ad:b7:af:e0:92:be:d4:2c:d3:6f:b0:07:55:e8:75:
         99:8b:16:f7:e1:b2:82:3e:c1:ff:53:43:e4:8f:d6:1b:bf:70:
         82:db:3f:87:fe:21:e0:e2:e1:aa:61:67:20:56:58:35:f1:8e:
         68:be:63:c5:4a:09:c0:00:d9:99:bf:90:94:cc:ac:54:6c:b8:
         be:03:17:2c:fa:d2:b9:9e:f2:c0:77:cc:5f:06:19:7e:63:d4:
         79:6b:d0:89:b9:20:6e:e6:73:6e:89:2f:14:81:6a:a8:f3:33:
         da:91:0d:e9:f8:3a:53:c6:54:b8:31:a4:bb:98:1e:37:53:ab:
         a0:10:9d:23:32:84:f4:f6:f5:54:63:d2:4a:c1:f6:ec:38:de:
         7d:b5:74:4b:97:f8:cf:a8:0e:3b:e3:e2:7f:85:2d:77:06:70:
         55:29:be:3c:80:c2:c1:60:e1:65:ca:71:0b:e4:99:6d:2f:ce:
         9a:f2:e8:3a:88:de:9e:5b:4d:ad:cb:64:40:98:02:f2:2e:01:
         8f:51:25:41:09:69:a6:49:fd:3e:d4:36:96:d6:84:c9:5d:6a:
         58:bb:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:18 2024 by rpki-client on console-fra.rpki-client.org