Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e32342e302f32322d3232203d3e203238313335.roa
File:                     3138372e38362e32342e302f32322d3232203d3e203238313335.roa (raw, json)
Hash identifier:          v0gMYJguItKOD8bemXbitQ/JMEAsJNH9DveYvM720jc=
Subject key identifier:   57:BC:3C:90:1A:2E:57:00:D0:76:EC:C9:C6:73:E2:E5:38:11:02:15
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       1298A2E49A4DC8E088574B981CDB419A245286DE
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e32342e302f32322d3232203d3e203238313335.roa
Signing time:             Thu 04 Apr 2024 20:10:42 +0000
ROA not before:           Thu 04 Apr 2024 20:05:42 +0000
ROA not after:            Thu 03 Apr 2025 20:10:42 +0000
asID:                     28135
IP address blocks:        187.86.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:98:a2:e4:9a:4d:c8:e0:88:57:4b:98:1c:db:41:9a:24:52:86:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Apr  4 20:05:42 2024 GMT
            Not After : Apr  3 20:10:42 2025 GMT
        Subject: CN=57BC3C901A2E5700D076ECC9C673E2E538110215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:97:bb:e7:73:57:07:3b:26:ad:ec:f3:22:
                    59:2c:96:3d:86:13:d2:46:24:7e:5c:0e:a2:61:31:
                    ec:7f:40:f8:0f:03:40:b4:2c:6b:e7:31:79:12:36:
                    e9:b4:67:49:7c:7f:c6:dc:bb:e8:fc:dc:49:9c:cd:
                    6f:e4:65:4f:41:64:dc:bb:b3:da:fb:32:9a:f3:9f:
                    01:1e:55:66:5c:c1:31:54:2b:4c:ef:f2:95:96:23:
                    c4:4e:05:e7:4b:cd:45:7e:10:56:57:27:2d:aa:f8:
                    33:5a:3e:83:dc:9a:9e:b6:71:4a:4e:f8:c7:c5:83:
                    8b:66:4e:24:d1:69:09:24:ab:8c:36:2a:bd:f1:0e:
                    bc:3c:79:04:64:76:d5:7e:f5:fb:7f:a6:c6:43:66:
                    5d:16:e2:21:87:04:1b:2b:96:56:50:7f:75:c4:8e:
                    cf:cf:06:9c:ec:f8:e2:21:a5:22:db:a8:0e:ab:a2:
                    77:19:c6:9b:de:1b:7e:b9:6d:d2:71:28:6a:b7:25:
                    b0:8c:cf:b0:49:98:28:e7:8d:87:7c:72:89:23:a4:
                    50:00:8b:b3:2b:c6:00:15:83:4a:e1:ed:13:0f:fc:
                    a8:16:17:27:dd:51:e5:0c:0d:99:14:fd:14:eb:ca:
                    c1:86:a2:74:89:85:97:6e:37:b1:30:5d:42:15:1b:
                    5a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:3C:90:1A:2E:57:00:D0:76:EC:C9:C6:73:E2:E5:38:11:02:15
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3138372e38362e32342e302f32322d3232203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ca:66:75:0e:12:d1:84:f7:3f:25:f5:55:66:a2:83:ee:63:
         45:09:9e:0c:c3:9f:43:d8:d5:aa:70:5a:f9:5e:17:c6:46:59:
         9c:90:34:4d:2f:cb:61:d4:4b:6b:d7:1e:f2:d5:87:e0:8c:5e:
         1a:cf:6e:57:e8:38:8d:e4:44:98:6f:3d:7d:05:e1:f2:6c:0d:
         14:ff:be:df:16:f1:76:7a:be:36:41:54:7c:28:b8:10:ae:28:
         c6:fb:93:1a:0e:03:e5:62:46:7a:92:18:72:5e:87:38:f4:4b:
         4c:00:54:a5:3e:b9:2e:8d:76:64:f0:e9:86:72:fd:a7:9e:0b:
         01:b3:36:28:9b:41:f0:79:ee:88:50:60:2c:b9:c4:76:88:ea:
         77:fc:e5:9c:41:26:bb:9d:66:92:c0:e7:48:e2:c3:b3:be:dd:
         71:61:09:e9:39:e9:74:af:92:99:ab:35:2e:7b:84:33:2f:ee:
         26:37:b8:43:a3:2f:4e:a9:4b:b8:e6:2a:0f:98:18:c6:af:6f:
         ab:3f:ef:9f:8a:df:a8:8c:25:b7:29:48:8d:9f:e8:be:42:44:
         e9:4a:64:6b:8b:64:98:a0:63:b2:87:eb:92:93:5c:5a:d6:28:
         90:20:ea:c7:0d:6a:69:93:1c:2d:84:2d:77:3c:5c:56:75:49:
         8e:8d:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org