Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
File:                     3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa (raw, json)
Hash identifier:          eEMzs8mz187/n8YGW+FfO1fHewLl23tWmJ5OwU+dAMM=
Subject key identifier:   15:BE:DB:1D:66:D9:F9:63:66:06:76:C4:16:E1:1D:A8:DB:AD:85:D2
Certificate issuer:       /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Certificate serial:       5CE187C51466183C5D07BFCF075B5431C0C8B4D5
Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
Signing time:             Wed 03 Apr 2024 19:24:54 +0000
ROA not before:           Wed 03 Apr 2024 19:19:54 +0000
ROA not after:            Wed 02 Apr 2025 19:24:54 +0000
asID:                     271033
IP address blocks:        187.84.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl
                          rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 20:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e1:87:c5:14:66:18:3c:5d:07:bf:cf:07:5b:54:31:c0:c8:b4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
        Validity
            Not Before: Apr  3 19:19:54 2024 GMT
            Not After : Apr  2 19:24:54 2025 GMT
        Subject: CN=15BEDB1D66D9F963660676C416E11DA8DBAD85D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:dc:ea:f0:76:b6:b0:fc:3d:bc:a8:cc:00:
                    86:1b:8c:07:9c:48:af:de:da:39:8a:2e:16:69:9a:
                    e9:64:04:c9:a0:9f:76:00:cc:de:f6:71:e5:c6:e3:
                    da:7f:58:86:50:fd:d6:3d:31:60:8c:01:c0:67:56:
                    ae:fe:05:19:7d:9c:43:9f:4f:3b:ce:e8:a1:40:e6:
                    67:6b:b6:74:3c:d3:9f:1f:b3:b7:cd:80:89:cd:bc:
                    3f:1f:b0:45:bc:d8:f5:da:e7:cf:55:ee:2e:7a:9b:
                    ef:30:ec:fb:b7:22:8b:52:5c:76:9a:19:25:5b:b5:
                    6a:47:6a:2e:b9:a3:a8:48:5f:5f:cb:95:cd:8a:1c:
                    c0:08:94:55:a5:a0:ae:a7:db:4a:66:16:cc:12:87:
                    f3:b1:64:4d:b8:b4:5f:83:3f:30:01:10:1d:46:35:
                    c7:ae:f0:70:c8:e5:5b:a4:5b:0a:3c:19:b8:6a:b9:
                    07:76:e8:9e:ae:34:aa:43:7c:4b:dd:c3:0e:10:9d:
                    4d:a8:8b:b8:31:8a:eb:79:a2:12:51:87:af:30:34:
                    cd:23:07:dc:d0:78:a1:2c:a5:8e:f7:7b:5a:d5:69:
                    e4:72:2f:25:dd:39:d0:a0:11:27:3c:e8:5c:3f:04:
                    cb:62:ef:ac:74:a9:c4:a4:02:57:5f:9d:8b:9b:20:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:DB:1D:66:D9:F9:63:66:06:76:C4:16:E1:1D:A8:DB:AD:85:D2
            X509v3 Authority Key Identifier:
                keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:75:fc:8e:70:01:31:66:57:38:21:ce:ec:74:a9:35:fd:b6:
         b5:e7:b9:70:1d:6f:03:88:1f:1b:3b:5a:33:51:45:0c:fb:b1:
         28:e9:d6:45:89:69:3e:0a:e7:b3:fd:37:0b:84:c6:b0:82:ab:
         0d:20:13:67:56:c7:cd:00:83:cc:78:18:ff:2d:6b:54:d7:5c:
         e9:2b:e1:33:62:cd:c2:b4:33:ee:35:63:fa:2e:5c:8e:0e:0a:
         29:36:0f:87:24:fd:71:b8:5d:90:89:01:29:68:7c:9d:15:32:
         65:b7:27:0f:4b:c2:cb:65:3b:66:5a:08:01:4f:c2:23:0d:d6:
         69:38:10:8b:ae:5f:aa:8f:0b:b2:2e:75:4c:27:0e:e6:fb:6e:
         8d:5a:17:c7:4a:20:17:01:61:b1:a0:d4:b5:0a:0f:4f:24:34:
         68:df:71:4a:25:72:c0:c5:1e:b7:bc:d0:0b:ae:d9:04:0c:e5:
         9c:f8:ad:9e:43:88:d8:30:83:53:fd:60:2c:a0:f0:fe:3e:35:
         03:62:f8:f4:7f:70:af:e3:eb:64:14:c4:45:52:0c:ab:5b:04:
         17:90:a8:b6:36:65:29:f5:df:ef:6e:ca:e1:d0:77:67:1c:d7:
         54:f3:ab:89:de:65:be:cf:4d:9a:5d:92:18:9c:22:3d:3c:00:
         47:1c:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:26:53 2024 by rpki-client on console-fra.rpki-client.org