Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
File:                     3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (raw, json)
Hash identifier:          CesGgrIDPVVr2M5PyEHI+TVeBJhM5VMw4ABotuCTZZg=
Subject key identifier:   D2:C0:B8:73:C1:57:79:6E:48:82:D0:50:E9:43:00:BD:C7:7D:35:A9
Certificate issuer:       /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial:       48F354AC804F9CAFA43F76DFA01D76C1621A417F
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
Signing time:             Thu 04 Apr 2024 08:03:03 +0000
ROA not before:           Thu 04 Apr 2024 07:58:03 +0000
ROA not after:            Thu 03 Apr 2025 08:03:03 +0000
asID:                     53120
IP address blocks:        187.111.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
                          rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f3:54:ac:80:4f:9c:af:a4:3f:76:df:a0:1d:76:c1:62:1a:41:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
        Validity
            Not Before: Apr  4 07:58:03 2024 GMT
            Not After : Apr  3 08:03:03 2025 GMT
        Subject: CN=D2C0B873C157796E4882D050E94300BDC77D35A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:59:6a:90:ef:ce:a0:ff:fd:a3:5b:18:60:
                    b2:52:4b:eb:66:9b:71:66:95:89:f3:89:06:6c:00:
                    09:8c:ac:e9:f4:56:94:ec:30:4a:9f:c4:37:7f:f0:
                    b6:2b:72:3e:9c:2c:1b:50:b5:61:27:ee:26:07:fc:
                    5c:8e:22:19:2a:86:18:19:9c:ec:7e:54:88:5c:3a:
                    ec:c3:01:aa:6a:72:97:34:56:bd:1d:08:1d:c8:ac:
                    cc:25:57:15:96:62:f4:0b:dc:fb:5a:d2:ff:ed:41:
                    5f:71:53:9c:b0:a6:ce:92:ea:4c:d6:db:71:43:43:
                    9f:b3:05:29:65:e7:4c:32:b0:fc:49:8c:f7:c4:00:
                    8b:9c:47:00:d9:a9:5c:23:8f:ee:18:9a:23:cc:f3:
                    b8:81:c3:5b:2c:fb:7c:89:fe:f3:9a:73:3f:d3:ba:
                    56:de:2c:e8:e5:76:bc:c0:bd:7d:d0:a0:4a:de:42:
                    71:5b:21:e4:e8:9a:28:89:3b:2b:61:88:a9:9c:59:
                    df:35:de:ea:d3:f2:73:6c:62:b0:39:f9:82:86:ef:
                    b6:1c:33:69:dc:f9:40:b1:2c:a7:38:d7:db:d9:2c:
                    12:c7:1d:39:5a:56:39:a1:d7:68:9c:0d:63:13:1d:
                    13:51:34:10:e6:e6:5a:a7:bb:f3:1e:7b:af:4e:40:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C0:B8:73:C1:57:79:6E:48:82:D0:50:E9:43:00:BD:C7:7D:35:A9
            X509v3 Authority Key Identifier:
                keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:bf:26:f2:ee:9b:04:18:6f:c3:37:19:6f:68:e7:b5:4e:
         43:9e:2f:07:00:64:1a:16:98:fa:9c:68:b2:27:36:2c:8b:68:
         03:1e:9d:12:0f:e0:be:0e:af:64:d6:de:3e:c8:75:1c:18:9b:
         0c:06:a6:8a:e6:69:46:e1:1c:f7:d5:90:cb:92:30:23:ba:fb:
         03:a0:fc:23:03:de:d6:93:f0:d0:59:59:b7:6e:85:cb:55:00:
         48:f4:61:fa:2c:ce:33:f8:2a:5e:d1:97:b8:4f:0e:a3:1a:d6:
         d8:92:2e:46:20:ca:1b:84:92:21:b7:7d:1d:14:8a:2d:97:13:
         79:13:ee:a4:14:fe:09:ed:dd:f8:00:98:40:51:a2:8c:fe:16:
         96:ab:40:d6:1b:59:06:52:55:07:50:26:9a:66:7d:46:46:5a:
         a3:a2:44:fe:b9:91:cf:02:de:c1:35:90:c1:c9:f4:26:d0:b9:
         04:c5:3b:07:f7:54:60:a3:94:d5:fe:53:91:47:3a:92:c5:3c:
         f5:3e:02:49:78:93:e0:e7:2d:c9:f6:fc:c3:90:41:90:6d:d8:
         7c:f8:64:18:ed:8b:ce:42:91:50:fd:8e:66:59:eb:06:68:fe:
         df:84:4b:19:4e:4d:1c:21:3b:54:9c:e3:96:83:3d:07:29:76:
         6f:94:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org