Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e31332e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e31332e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          7Or9heIGKzBCJj1u81VcluzllBjqJKgf/QuJ3dziv6k=
Subject key identifier:   8E:94:82:D6:F6:66:E2:CB:36:6E:C8:58:FE:FD:9F:A7:B7:43:7A:87
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       0CFF22C26DB84A1441BFCB7109009E965B198E81
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e31332e302f32342d3234203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:41 +0000
ROA not before:           Thu 04 Apr 2024 20:05:41 +0000
ROA not after:            Thu 03 Apr 2025 20:10:41 +0000
asID:                     28135
IP address blocks:        187.86.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ff:22:c2:6d:b8:4a:14:41:bf:cb:71:09:00:9e:96:5b:19:8e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:41 2024 GMT
            Not After : Apr  3 20:10:41 2025 GMT
        Subject: CN=8E9482D6F666E2CB366EC858FEFD9FA7B7437A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:ae:77:93:ee:69:58:4c:5f:92:9c:92:cf:
                    59:23:68:4f:42:4c:da:41:52:12:7e:77:60:36:7a:
                    13:8c:9e:10:36:3b:e7:bc:52:f0:59:68:e9:33:b4:
                    1b:8e:3d:0c:f3:dc:4b:ae:85:a6:30:c2:56:2b:fb:
                    36:e2:a8:82:f6:b9:d9:fb:02:42:7e:0e:49:fb:e7:
                    13:72:62:da:6f:65:97:53:ef:db:0b:f4:83:e9:12:
                    13:76:78:95:a4:3f:f8:f9:71:6f:30:c0:90:82:47:
                    4f:4a:d3:e3:a7:17:86:30:24:49:92:f1:ae:e0:18:
                    f8:03:c0:0a:59:f6:e6:fd:8d:cd:2e:40:61:f0:91:
                    a3:2e:67:07:9f:d8:3c:99:d0:15:9c:64:e3:b2:02:
                    96:80:62:04:30:1e:13:f8:70:9b:46:c6:06:5a:c3:
                    21:59:29:13:99:c8:ea:eb:06:d6:1a:ce:05:d6:a0:
                    82:88:f5:15:94:d8:72:2d:24:7f:4c:73:35:66:d3:
                    61:67:62:1f:b0:60:7d:0c:3a:88:48:76:c1:77:ad:
                    fe:0b:16:38:8e:03:34:17:cc:02:75:65:d0:9e:43:
                    24:aa:69:a0:51:af:ef:e5:a1:76:ee:cb:1c:8c:d8:
                    d3:cd:17:11:c5:30:81:87:48:08:1c:19:a1:3f:53:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:94:82:D6:F6:66:E2:CB:36:6E:C8:58:FE:FD:9F:A7:B7:43:7A:87
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e31332e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:26:f3:06:d0:d5:65:9e:9c:59:c1:65:50:79:9e:21:03:
         3a:05:a4:f0:ab:99:a1:5c:7b:1f:75:86:7b:3c:a9:d1:d6:b8:
         92:c2:38:73:01:89:00:22:5e:a3:bd:91:b4:eb:07:b5:7e:2e:
         9f:93:a2:5b:d3:04:1d:e1:20:c9:26:1f:1e:c0:0f:41:8b:6b:
         6e:30:7a:3d:af:9c:69:de:b3:29:7d:98:a4:04:b2:58:a0:78:
         b8:60:87:e3:0d:79:de:1c:c2:cd:ef:08:00:9c:b3:a9:8e:7e:
         84:d9:ea:17:17:a2:eb:c9:fc:05:ed:5c:4d:84:1a:e1:74:75:
         87:8f:9d:c4:d8:3a:8b:e7:42:28:36:30:ba:7d:e6:c5:23:07:
         cc:12:f8:83:f4:ff:2f:38:eb:ab:3b:16:04:c5:3d:56:c5:b3:
         22:e1:0c:30:da:f7:e4:a9:f8:fd:e4:70:89:97:fd:17:66:ec:
         b7:c4:20:1a:5b:f3:e1:e5:6c:0c:a0:4d:25:06:1f:b2:39:61:
         a8:83:0f:94:45:be:62:b6:d2:c9:1f:d7:89:ce:69:bd:3a:04:
         a9:ef:92:9b:81:e5:ca:6c:fc:3b:12:77:81:9a:a0:80:38:1b:
         91:8a:e2:2f:98:83:b0:0c:53:62:8e:06:ba:9c:5f:36:0c:66:
         e3:cf:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org