Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
File:                     3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa (raw, json)
Hash identifier:          jHX8rKTJIVzH1nDn1ZKmg7Dc/AgHN8F973eXTDMc5Pc=
Subject key identifier:   77:9C:D8:4A:EA:50:8D:94:86:59:22:3C:16:EB:74:78:A4:36:71:2A
Certificate issuer:       /CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
Certificate serial:       12E67D37DC231C0B831E2F5FC19904DC9FA66851
Authority key identifier: 4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa
Signing time:             Mon 18 Nov 2024 14:45:10 +0000
ROA not before:           Mon 18 Nov 2024 14:40:10 +0000
ROA not after:            Mon 17 Nov 2025 14:45:10 +0000
asID:                     270704
IP address blocks:        189.127.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e6:7d:37:dc:23:1c:0b:83:1e:2f:5f:c1:99:04:dc:9f:a6:68:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E954E92398DE10004D8805C61AFDF6831FA4AA5
        Validity
            Not Before: Nov 18 14:40:10 2024 GMT
            Not After : Nov 17 14:45:10 2025 GMT
        Subject: CN=779CD84AEA508D948659223C16EB7478A436712A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:01:f8:d3:5d:55:30:d7:3f:bf:8a:d1:09:
                    61:13:c8:ba:78:45:31:db:0b:d0:e9:34:20:19:a5:
                    a6:bf:43:10:97:6d:0e:7d:0c:1d:35:53:72:90:89:
                    e3:5c:66:80:51:fb:2b:6b:33:68:27:32:44:cc:89:
                    2e:8d:e7:43:4e:9f:91:fc:a7:04:e4:18:10:03:22:
                    e8:86:25:ee:5c:cd:9b:fc:00:47:d2:17:fd:83:d0:
                    78:9f:12:9e:ea:40:a0:d2:1c:04:72:10:99:31:15:
                    c4:cb:4d:3f:3b:df:c0:28:50:4c:58:b6:09:7e:ef:
                    79:8c:dd:34:82:67:ef:cd:02:43:8f:53:ac:4c:fb:
                    2a:fb:e9:81:be:ed:6d:78:d6:48:99:c7:63:a9:a5:
                    3b:37:ca:b6:92:e3:ef:13:71:40:99:f0:d4:85:c7:
                    b8:c9:53:bf:69:32:4f:b7:f4:1e:58:a7:42:00:3b:
                    a8:0c:39:9b:33:2e:69:bd:49:ff:45:b6:bf:5d:1b:
                    18:87:86:08:dd:24:93:fb:c7:34:64:d3:f5:25:a7:
                    d9:b4:bc:01:00:65:f0:9e:77:8d:90:7a:c5:be:e2:
                    67:0e:89:7c:bf:41:5b:bc:a9:b0:f3:39:15:ca:59:
                    19:13:e9:9e:df:6c:28:c3:c5:a8:a8:a5:21:7b:76:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:D8:4A:EA:50:8D:94:86:59:22:3C:16:EB:74:78:A4:36:71:2A
            X509v3 Authority Key Identifier:
                keyid:4E:95:4E:92:39:8D:E1:00:04:D8:80:5C:61:AF:DF:68:31:FA:4A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/4E954E92398DE10004D8805C61AFDF6831FA4AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E954E92398DE10004D8805C61AFDF6831FA4AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134352e302f32342d3234203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:58:ba:c2:c4:7d:c8:96:6b:6c:91:69:96:25:33:e7:bd:ae:
         70:67:ad:ec:15:50:80:4f:d2:7a:d9:7c:95:8c:c0:0f:06:5f:
         62:71:3d:58:6c:02:6e:49:ea:26:9b:e6:e0:91:93:52:a9:02:
         14:1b:3b:99:fc:63:9b:78:fb:36:54:35:5b:f7:8a:cc:21:e0:
         ee:2a:a3:25:c5:60:55:70:30:ca:1d:d9:4a:51:2b:4c:19:71:
         fe:e5:f9:d2:f3:59:b4:0f:91:d3:66:28:6c:e1:8f:d5:1f:30:
         96:f2:2e:fc:fb:dc:fa:16:71:87:ed:1b:db:1e:3e:53:bb:dc:
         7b:ea:46:a2:1e:37:50:c5:ab:16:36:cf:83:55:5a:80:6a:8e:
         3d:3f:9b:cb:dd:36:a6:1f:37:71:d0:73:cf:b2:d7:21:c5:da:
         22:f3:97:83:19:d1:9e:5e:d2:5d:be:c5:d3:50:5e:5e:49:c5:
         fe:7f:01:d2:51:3f:38:98:12:5f:31:27:a6:be:39:73:94:b7:
         76:fd:2b:62:6e:2c:34:7e:fe:da:6e:9c:cd:f3:6d:83:00:75:
         c3:3a:03:29:db:ff:22:fc:d6:47:4b:99:67:8c:ce:ed:3a:93:
         aa:33:13:3d:fc:50:11:81:70:5c:79:bc:52:6d:e8:f9:f3:e0:
         f1:6f:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:14 2024 by rpki-client on console-ams.rpki-client.org