Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa
File:                     3138372e32342e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          AF9ILvPSfKO1ZHcvS71xSEAsat1sCoFmv29/hjr9g4I=
Subject key identifier:   B0:AF:C0:75:EA:AF:E7:3B:6E:6D:3B:4B:72:68:CF:57:48:53:FE:90
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       1D631AFC302ABAF71805EC4940DAE5CF4573628D
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:07:18 +0000
ROA not before:           Tue 16 Jul 2024 14:02:18 +0000
ROA not after:            Tue 15 Jul 2025 14:07:18 +0000
asID:                     22085
IP address blocks:        187.24.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:63:1a:fc:30:2a:ba:f7:18:05:ec:49:40:da:e5:cf:45:73:62:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:02:18 2024 GMT
            Not After : Jul 15 14:07:18 2025 GMT
        Subject: CN=3082010A0282010100D1554C074CE9E0B481D694D2C03D4A1F5846BE5122E25C9B54477DB0B8533FF5F483C11B0FF76E6C9E86DB2FCED0D3180C86FEE91C0497C2211B74FF20F74307683D7839F83F96CF38BC2E34AAD4FC7B537849B7E7A13AD4A2C187F97BB085265280E5E9525DA1209D959E2EF9B6E2EF47C3930564B6FCC7E0CE109B426F6D68CE86B2494116331D48B2AC4BF07EEF4AA75340896CFF47F68DBC51D389511A743DD569361E0B5E88D56C11BF42774FFBEA3AB856CD89080E9A658ECAD5D688A5DE168C5D84AE0DFD67447F24A23A4A9BEA1FEA8C174EA895B186FB2A9786003D89477D41C4E7D7A81CEA65FCB95E2F2DB1E1E7BEC9EB7BC90F12274E80D5C8590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:4c:07:4c:e9:e0:b4:81:d6:94:d2:c0:3d:
                    4a:1f:58:46:be:51:22:e2:5c:9b:54:47:7d:b0:b8:
                    53:3f:f5:f4:83:c1:1b:0f:f7:6e:6c:9e:86:db:2f:
                    ce:d0:d3:18:0c:86:fe:e9:1c:04:97:c2:21:1b:74:
                    ff:20:f7:43:07:68:3d:78:39:f8:3f:96:cf:38:bc:
                    2e:34:aa:d4:fc:7b:53:78:49:b7:e7:a1:3a:d4:a2:
                    c1:87:f9:7b:b0:85:26:52:80:e5:e9:52:5d:a1:20:
                    9d:95:9e:2e:f9:b6:e2:ef:47:c3:93:05:64:b6:fc:
                    c7:e0:ce:10:9b:42:6f:6d:68:ce:86:b2:49:41:16:
                    33:1d:48:b2:ac:4b:f0:7e:ef:4a:a7:53:40:89:6c:
                    ff:47:f6:8d:bc:51:d3:89:51:1a:74:3d:d5:69:36:
                    1e:0b:5e:88:d5:6c:11:bf:42:77:4f:fb:ea:3a:b8:
                    56:cd:89:08:0e:9a:65:8e:ca:d5:d6:88:a5:de:16:
                    8c:5d:84:ae:0d:fd:67:44:7f:24:a2:3a:4a:9b:ea:
                    1f:ea:8c:17:4e:a8:95:b1:86:fb:2a:97:86:00:3d:
                    89:47:7d:41:c4:e7:d7:a8:1c:ea:65:fc:b9:5e:2f:
                    2d:b1:e1:e7:be:c9:eb:7b:c9:0f:12:27:4e:80:d5:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:C0:75:EA:AF:E7:3B:6E:6D:3B:4B:72:68:CF:57:48:53:FE:90
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138372e32342e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8c:e8:16:f3:8b:f1:0d:ec:aa:72:52:8c:73:22:bb:cd:b9:91:
         44:b5:07:30:bc:f9:0f:46:a5:4b:95:c9:0c:26:98:a3:80:ca:
         c1:9d:06:0f:bd:ac:99:5f:bf:df:a0:fe:07:94:f0:7c:0f:51:
         68:5e:fd:78:42:4b:68:61:af:0a:55:47:0b:ed:44:af:1a:65:
         cf:a0:f8:ac:28:3f:ce:c4:b0:f7:82:ab:35:81:8e:f9:61:6e:
         34:19:a2:9f:f7:97:26:c7:06:ad:2f:40:9a:c6:b8:db:5f:56:
         9b:b7:de:a5:49:e2:0c:08:7d:7d:c3:33:13:35:6d:15:70:85:
         0a:99:d0:06:8a:82:52:ba:42:77:c9:80:57:32:0e:2e:16:6f:
         38:b9:46:8c:2e:10:69:38:6e:3c:c3:13:d3:e0:ef:19:17:e3:
         bf:39:bd:aa:14:d4:b3:8f:f2:be:80:57:8a:b2:21:e9:3f:a8:
         2b:a9:2f:f2:00:0c:85:8b:4b:3a:3b:22:99:2b:97:53:8e:92:
         2b:d3:eb:b7:01:37:fc:57:03:cb:82:01:a3:1e:c7:c4:ff:c7:
         ed:9f:c2:b7:f6:ca:b7:57:a7:65:2d:32:74:c3:ac:33:b5:00:
         69:ac:79:b9:e6:c7:08:c2:d6:5f:b6:1e:0b:a5:05:45:16:38:
         87:25:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org