Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e302e302f32302d3230203d3e203238313335.roa
File:                     3138372e38362e302e302f32302d3230203d3e203238313335.roa (raw, json)
Hash identifier:          Ia7OrwBfhQgcsiDNcsDF7J5JGOGXy23hmD6nuVON6b8=
Subject key identifier:   28:C9:D6:F5:D9:52:49:06:DF:7F:8E:E4:D9:78:94:41:AE:01:1D:98
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       611BBB304BDD4D79A5DD805F443A0DA165FA048A
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e302e302f32302d3230203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:41 +0000
ROA not before:           Thu 04 Apr 2024 20:05:41 +0000
ROA not after:            Thu 03 Apr 2025 20:10:41 +0000
asID:                     28135
IP address blocks:        187.86.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1b:bb:30:4b:dd:4d:79:a5:dd:80:5f:44:3a:0d:a1:65:fa:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:41 2024 GMT
            Not After : Apr  3 20:10:41 2025 GMT
        Subject: CN=28C9D6F5D9524906DF7F8EE4D9789441AE011D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:58:c0:2c:41:e3:22:df:b9:03:dd:d2:4b:
                    3d:06:1d:88:8a:b9:c9:c8:e6:a5:0a:dc:79:8f:74:
                    7b:6f:ce:8a:ba:6f:de:4f:b9:02:3d:de:aa:73:b4:
                    74:ca:95:6a:d3:e7:e7:00:ea:ba:57:cd:12:ea:4f:
                    65:1f:ac:9a:7f:61:2d:ad:14:c3:63:08:c3:b7:6e:
                    f7:21:fa:5b:b2:d6:dc:ea:85:6f:c1:fb:57:05:1b:
                    45:0d:3f:c6:fd:37:22:9b:ee:bd:b8:ed:6f:67:a3:
                    5f:02:08:8f:7f:9f:b9:18:c9:7c:9e:fa:e5:db:ac:
                    93:5b:9b:eb:ff:91:ff:c2:64:87:de:c9:4e:d9:74:
                    f4:52:e6:80:37:23:af:94:c5:5b:8d:d9:97:73:46:
                    51:8a:fe:d8:c8:22:c5:a4:94:fb:2c:34:d3:5b:c4:
                    9b:92:7c:5c:99:9a:d7:00:1e:0b:0e:01:c8:93:bf:
                    49:49:7b:8a:14:1c:19:39:7c:5d:cc:ec:c8:67:99:
                    d6:d9:d0:e3:5a:b8:7f:53:06:86:96:38:96:26:54:
                    ae:e5:63:52:d2:42:29:6b:22:71:55:94:b6:82:ae:
                    d4:49:dd:ea:21:00:ba:26:4c:0c:c2:51:44:6a:bf:
                    e9:62:bf:be:61:de:cd:ce:48:fc:69:00:b4:ae:62:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:D6:F5:D9:52:49:06:DF:7F:8E:E4:D9:78:94:41:AE:01:1D:98
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e302e302f32302d3230203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:32:64:0b:b6:f9:af:20:d7:db:5f:cc:ad:8a:9e:93:8d:f9:
         7d:ea:f7:3b:66:f1:8f:1f:a6:bc:cd:2a:cc:6e:29:cc:5f:7e:
         e5:85:ce:85:e9:a2:20:3f:5f:b9:3b:9a:f0:ff:15:5f:55:53:
         39:7d:32:12:7c:54:04:8b:6c:d9:33:fa:2d:a2:c6:91:3c:8f:
         14:d2:9d:54:08:67:71:2e:5f:40:9f:aa:94:f0:33:c5:68:10:
         a2:75:eb:dd:13:52:39:59:87:7f:3e:b7:5d:79:0e:3b:0c:49:
         d7:1d:57:eb:7f:2e:50:3c:6f:09:39:22:d6:97:9b:3b:d2:39:
         49:e6:23:0f:1c:39:b2:32:ec:f3:e1:38:98:cc:b6:ef:47:04:
         58:04:86:df:37:ac:52:57:bb:92:4b:35:c9:5e:49:c4:bc:85:
         67:a3:af:98:33:00:9d:67:ed:85:91:c3:ca:3e:f5:3a:74:7b:
         b7:81:23:09:ca:6f:e0:02:9c:aa:53:af:3a:cf:57:37:fa:a1:
         80:35:00:9e:68:48:79:c1:29:15:42:00:e7:05:92:49:2a:1e:
         e7:c9:a7:40:5e:2a:d9:2a:07:00:b5:7a:27:c0:3b:c3:20:e3:
         51:06:f7:86:db:34:06:e8:18:56:b8:b8:ae:ba:63:63:f4:40:
         a8:45:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org