Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3231203d3e203238333238.roa
File:                     3138392e31342e3139322e302f31392d3231203d3e203238333238.roa (raw, json)
Hash identifier:          pUc/Nxa/j77wmT1jFdBswBlp83nMaDyGvN0szt4iTNo=
Subject key identifier:   CC:C8:29:E5:FD:E8:2F:1E:FF:F8:AD:D8:08:16:91:7D:16:C0:87:E7
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       5874A1B49F3F5C990A93908ED2D95F8D4A3789C8
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3231203d3e203238333238.roa
Signing time:             Mon 29 Jul 2024 12:21:58 +0000
ROA not before:           Mon 29 Jul 2024 12:16:58 +0000
ROA not after:            Mon 28 Jul 2025 12:21:58 +0000
asID:                     28328
IP address blocks:        189.14.192.0/19 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:74:a1:b4:9f:3f:5c:99:0a:93:90:8e:d2:d9:5f:8d:4a:37:89:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Jul 29 12:16:58 2024 GMT
            Not After : Jul 28 12:21:58 2025 GMT
        Subject: CN=CCC829E5FDE82F1EFFF8ADD80816917D16C087E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:07:0d:9e:99:c7:27:92:71:04:cb:97:a3:
                    95:d8:f1:1f:8b:c2:63:8e:78:f0:4f:1b:a3:13:73:
                    6b:da:fb:58:58:3e:d2:45:ac:aa:65:c3:db:d1:d3:
                    66:ea:8a:1c:da:29:0d:cb:e7:b2:a7:5c:ab:c3:1e:
                    2f:cc:9a:7d:96:88:be:ff:47:29:f4:e9:63:ce:50:
                    12:c0:91:8f:08:c6:27:9f:30:2a:4d:37:f1:f9:94:
                    ce:80:0c:76:04:10:9d:17:fb:a3:a9:77:e2:bd:47:
                    ec:ed:fb:ca:c9:88:67:53:6a:36:a4:de:28:55:81:
                    96:d3:5a:23:8a:1e:6e:ae:ad:d5:b6:37:ad:fd:53:
                    cf:c9:b1:88:51:65:ae:94:21:99:f0:fd:18:83:17:
                    e0:74:f7:db:b4:b8:39:25:9a:5e:14:ed:b5:1d:58:
                    bb:cd:0e:56:c1:df:71:4d:ce:aa:38:67:97:c0:a8:
                    69:ce:38:cf:dc:f0:9d:f4:7d:29:4e:65:8a:e1:37:
                    97:1a:7b:da:f8:1a:93:1b:e2:35:93:e0:67:c2:d3:
                    ce:c7:a6:82:a0:58:86:cd:d5:b8:37:3c:e5:9a:17:
                    47:63:3e:56:35:a7:57:42:32:bb:3e:48:e5:59:16:
                    ca:76:6d:d8:34:93:d9:b5:5a:19:ba:77:85:e9:f0:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C8:29:E5:FD:E8:2F:1E:FF:F8:AD:D8:08:16:91:7D:16:C0:87:E7
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3231203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:c1:3f:3b:b0:88:09:b5:3b:9a:54:34:09:b3:2b:89:ac:
         4f:01:d3:4d:dd:4b:99:25:e1:7e:93:9e:a5:e4:42:de:73:61:
         f7:48:01:4e:a3:4c:f2:c6:ac:70:1a:85:a2:54:3c:f6:f2:41:
         e0:5c:1f:6a:f8:cd:95:00:0d:fe:c0:4a:02:30:33:59:a8:fb:
         0c:a0:50:e8:75:e5:02:fe:26:5b:d9:27:eb:31:f3:ec:2e:28:
         fc:00:7f:58:aa:e6:af:be:05:46:b2:8b:3b:f4:ee:2b:8a:9c:
         51:e1:2d:86:82:8c:85:07:ff:f6:73:5d:30:70:87:66:f7:d2:
         46:80:4b:aa:5d:25:cf:1c:f2:e9:62:fa:88:82:27:75:64:69:
         a8:7e:3d:1c:07:c7:86:f4:bb:23:0c:d1:34:ec:8a:e9:35:8e:
         72:6b:2f:80:c9:73:48:e9:81:c9:7d:6e:e1:2e:a5:2b:68:46:
         60:af:44:38:f7:e8:12:e6:4f:01:68:12:3a:09:5f:4c:02:a0:
         75:9b:80:73:51:42:5f:42:2f:5a:e1:90:dc:2d:31:0c:19:8c:
         24:86:ba:b4:73:ab:91:a0:ad:e9:0c:0a:25:d0:a9:f6:83:c9:
         58:52:37:67:64:fd:a6:86:b0:a4:6a:7b:1e:24:8b:d9:61:4f:
         7a:4b:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:07 2024 by rpki-client on console-fra.rpki-client.org