Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e34352e38302e302f32342d3234203d3e203238313335.roa
File:                     3138372e34352e38302e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          y5y4+gNibtJYwv749hUo/dNbgUSp6WlfWwa/sUP9ZYk=
Subject key identifier:   20:11:16:7A:5B:36:E3:5F:5A:06:AF:88:C6:DA:43:E4:F7:4C:61:99
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       491F552F5ED946440E5C7A35EC5C42C804A9D8FD
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e34352e38302e302f32342d3234203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:43 +0000
ROA not before:           Thu 04 Apr 2024 20:05:43 +0000
ROA not after:            Thu 03 Apr 2025 20:10:43 +0000
asID:                     28135
IP address blocks:        187.45.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1f:55:2f:5e:d9:46:44:0e:5c:7a:35:ec:5c:42:c8:04:a9:d8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:43 2024 GMT
            Not After : Apr  3 20:10:43 2025 GMT
        Subject: CN=2011167A5B36E35F5A06AF88C6DA43E4F74C6199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:7d:28:4e:88:9e:b2:d4:e4:01:3e:14:41:
                    bf:90:50:1e:a6:d1:62:0d:87:73:15:01:2d:af:8e:
                    72:d3:45:58:88:af:90:5d:c5:fd:ce:c9:eb:e7:93:
                    12:70:b9:0e:75:2c:e1:4b:b2:7a:45:dc:57:a8:83:
                    6e:b3:8a:d1:b4:ee:42:74:fe:e5:82:92:f0:1f:6e:
                    b6:7d:ac:5f:08:35:30:0f:73:f8:37:e6:69:27:33:
                    da:25:c4:bc:2d:08:c7:3f:60:db:8f:09:fe:6c:71:
                    30:a0:73:44:6d:90:dd:b8:b7:17:d2:53:11:fd:77:
                    16:12:db:93:ed:70:ad:40:f2:b4:75:aa:78:49:f8:
                    07:62:66:7b:e6:6b:5d:ec:b6:d5:28:82:87:36:0f:
                    f3:37:38:a2:82:9c:98:f3:0f:39:af:c0:9f:94:c1:
                    ee:62:85:6b:b4:f5:c3:e6:4e:57:a5:01:a2:7b:8d:
                    c3:70:15:33:56:37:2d:45:db:53:d7:62:8d:46:67:
                    c6:39:14:43:2f:4f:0e:09:f0:1a:53:b7:33:3b:f8:
                    85:27:2b:85:32:37:69:8a:01:2c:12:37:3d:5b:19:
                    ea:81:d9:b6:49:19:a8:49:8b:d4:2c:18:00:98:39:
                    b0:32:62:7c:77:a4:2d:9c:89:a1:37:90:35:75:46:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:11:16:7A:5B:36:E3:5F:5A:06:AF:88:C6:DA:43:E4:F7:4C:61:99
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e34352e38302e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:64:21:2f:f4:8f:20:fd:b7:a8:70:6a:b4:7b:ef:c6:3d:1e:
         58:3b:d2:85:27:e6:c2:50:34:5a:56:fe:01:b8:00:c2:92:9a:
         ef:36:64:1c:e0:79:17:ae:a8:27:8f:b6:85:35:8a:fb:c4:fd:
         3e:36:b3:65:36:fa:1b:b6:03:d1:3e:86:c7:f4:49:db:87:4d:
         a6:54:4a:fa:5c:70:8e:64:6f:28:9a:aa:52:27:12:db:8d:64:
         0a:7a:45:ab:92:40:94:39:db:67:d2:87:68:1f:2c:40:bc:69:
         50:50:4d:70:b6:8f:4c:07:ec:47:2f:db:0d:c1:1a:79:4b:01:
         67:87:32:bc:a1:53:12:c8:eb:51:a8:5b:90:35:75:53:5c:cc:
         91:12:24:c5:72:ea:38:87:0b:0d:58:21:e2:b0:59:6e:50:e8:
         34:bb:e7:2c:76:4f:dc:c7:9d:c1:ce:0b:23:95:41:c8:d5:fb:
         c3:28:0c:4a:6f:fa:b2:11:0f:49:77:4f:d0:45:a7:e3:30:10:
         17:af:0a:bc:d8:ff:65:08:c9:8c:9d:4e:c1:79:ea:d3:12:8e:
         bd:9a:46:0e:d1:2d:de:de:61:fa:0b:31:53:44:ba:8a:05:92:
         45:24:92:bd:51:fd:56:41:a3:dc:f9:27:19:31:4f:51:fa:62:
         26:db:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org