Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3234203d3e203238333730.roa
File:                     3138372e34352e3134342e302f32302d3234203d3e203238333730.roa (raw, json)
Hash identifier:          4OSBTaqgPOxtNljkaIxC3vztl0+rh41iSB8p9iu8rX8=
Subject key identifier:   F5:F7:E2:ED:40:7B:88:B4:BB:66:E3:A2:65:5E:46:CA:DD:A0:39:40
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       4C11CA5FC7BEDCB13B8521D316409212E3BD1860
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3234203d3e203238333730.roa
Signing time:             Thu 04 Apr 2024 01:32:04 +0000
ROA not before:           Thu 04 Apr 2024 01:27:04 +0000
ROA not after:            Thu 03 Apr 2025 01:32:04 +0000
asID:                     28370
IP address blocks:        187.45.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:11:ca:5f:c7:be:dc:b1:3b:85:21:d3:16:40:92:12:e3:bd:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Apr  4 01:27:04 2024 GMT
            Not After : Apr  3 01:32:04 2025 GMT
        Subject: CN=F5F7E2ED407B88B4BB66E3A2655E46CADDA03940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:2d:92:fa:8c:44:f9:86:ec:5b:47:45:c4:
                    fc:f3:6f:30:12:2a:15:f2:c0:2d:ed:41:e3:0c:ed:
                    d4:39:77:45:44:1e:3f:b6:26:9c:ed:84:aa:ec:50:
                    bd:1d:2f:b8:7f:77:3b:b7:dc:66:f2:3d:3d:34:6d:
                    83:92:41:76:de:14:f0:20:b2:e8:a3:1f:6a:89:7b:
                    da:c7:11:a7:b8:d9:1f:c9:1e:f7:66:2f:3a:4e:fe:
                    ae:15:6f:07:29:12:28:70:13:39:23:d8:77:29:c8:
                    5b:5e:88:c4:bf:a7:2c:a8:2a:e5:74:57:bb:b3:67:
                    8a:1f:bd:11:05:36:81:87:1f:db:58:6e:8f:f0:78:
                    26:27:d3:07:56:1e:5b:e8:74:13:a7:87:7d:69:4d:
                    40:18:2d:61:ac:ee:58:09:a8:5c:71:ba:28:37:b6:
                    70:c6:f8:fc:cd:56:c2:bc:e0:b0:b6:9d:40:d6:44:
                    34:fd:c1:95:71:6d:17:96:1c:16:b6:1a:e8:11:6e:
                    f2:5d:ba:82:55:17:38:da:2a:2c:99:38:28:3e:5b:
                    1c:95:56:79:03:89:3b:f4:6c:1c:d5:46:bf:76:11:
                    ab:00:21:27:f7:1e:bf:88:f4:ea:c5:d3:72:c6:92:
                    75:de:1d:7b:69:2e:dd:ce:95:78:88:74:5c:36:7d:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:E2:ED:40:7B:88:B4:BB:66:E3:A2:65:5E:46:CA:DD:A0:39:40
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/3138372e34352e3134342e302f32302d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:b2:12:65:43:d2:8f:71:50:7c:24:40:0b:ec:13:7c:26:32:
         b5:4f:45:5a:52:28:1f:e9:c8:50:7c:b5:48:9f:5e:3e:33:a1:
         f3:a2:c6:9e:6c:96:96:48:d3:05:2f:e0:b6:09:ad:e0:e2:b5:
         83:73:a3:31:8d:b7:38:43:ca:ba:11:3f:77:f3:cc:70:36:cc:
         92:18:19:19:9f:a9:1a:b2:df:7c:4f:7e:99:2a:83:50:91:ba:
         21:55:a6:62:ef:66:10:d4:b2:95:3b:94:88:7d:a6:0d:77:2f:
         00:34:90:7f:58:41:1a:cd:91:3f:a9:7d:4d:e2:ef:55:c2:34:
         cc:2b:38:71:99:89:6b:33:22:c9:dc:af:08:79:bd:06:94:00:
         45:2e:8f:ba:f3:2a:08:4f:49:38:37:96:2a:35:4f:3d:af:74:
         88:6a:5e:03:18:cf:a5:fe:f3:fd:89:af:0f:2e:c3:27:e9:4b:
         fb:ff:df:83:93:9d:45:62:fb:84:d1:8e:fe:c5:6e:91:ec:92:
         33:d3:8c:41:ab:5d:c3:93:b7:bb:48:33:47:e2:b8:40:54:fb:
         db:4e:c9:2b:ed:4e:06:57:e1:48:6c:08:f2:32:b2:aa:d1:2c:
         83:f7:70:d8:5d:5c:83:02:18:9e:4a:53:da:1e:78:50:0d:72:
         89:0a:60:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTBHKX8e+3LE7hSHTFkCSEuO9GGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNDA0MDQwMTI3MDRaFw0yNTA0MDMwMTMyMDRaMDMxMTAvBgNV
BAMTKEY1RjdFMkVENDA3Qjg4QjRCQjY2RTNBMjY1NUU0NkNBRERBMDM5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKy2S+oxE+YbsW0dFxPzzbzAS
KhXywC3tQeMM7dQ5d0VEHj+2JpzthKrsUL0dL7h/dzu33GbyPT00bYOSQXbeFPAg
suijH2qJe9rHEae42R/JHvdmLzpO/q4VbwcpEihwEzkj2HcpyFteiMS/pyyoKuV0
V7uzZ4ofvREFNoGHH9tYbo/weCYn0wdWHlvodBOnh31pTUAYLWGs7lgJqFxxuig3
tnDG+PzNVsK84LC2nUDWRDT9wZVxbReWHBa2GugRbvJduoJVFzjaKiyZOCg+WxyV
VnkDiTv0bBzVRr92EasAISf3Hr+I9OrF03LGknXeHXtpLt3OlXiIdFw2fWlJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9ffi7UB7iLS7ZuOiZV5Gyt2gOUAwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzEzODM3MmUzNDM1MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuy2QMA0GCSqGSIb3DQEBCwUAA4IBAQArshJlQ9KP
cVB8JEAL7BN8JjK1T0VaUigf6chQfLVIn14+M6HzosaebJaWSNMFL+C2Ca3g4rWD
c6Mxjbc4Q8q6ET9388xwNsySGBkZn6kast98T36ZKoNQkbohVaZi72YQ1LKVO5SI
faYNdy8ANJB/WEEazZE/qX1N4u9VwjTMKzhxmYlrMyLJ3K8Ieb0GlABFLo+68yoI
T0k4N5YqNU89r3SIal4DGM+l/vP9ia8PLsMn6Uv7/9+Dk51FYvuE0Y7+xW6R7JIz
04xBq13Dk7e7SDNH4rhAVPvbTskr7U4GV+FIbAjyMrKq0SyD93DYXVyDAhieSlPa
HnhQDXKJCmC+
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org