Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230312e302f32342d3234203d3e203238333238.roa
File:                     3138392e31342e3230312e302f32342d3234203d3e203238333238.roa (raw, json)
Hash identifier:          pvqnFOQHmAqPk4VPtRudAxkpRsa5MUm6ySwItwNRzMo=
Subject key identifier:   68:81:B1:D0:35:09:02:1A:F3:9E:1F:89:D8:8C:F6:F0:B3:B1:04:8B
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       0C280BA63469D638E51D2A00D4C7F380E06A96CE
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230312e302f32342d3234203d3e203238333238.roa
Signing time:             Wed 24 Apr 2024 21:38:42 +0000
ROA not before:           Wed 24 Apr 2024 21:33:42 +0000
ROA not after:            Wed 23 Apr 2025 21:38:42 +0000
asID:                     28328
IP address blocks:        189.14.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:28:0b:a6:34:69:d6:38:e5:1d:2a:00:d4:c7:f3:80:e0:6a:96:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Apr 24 21:33:42 2024 GMT
            Not After : Apr 23 21:38:42 2025 GMT
        Subject: CN=6881B1D03509021AF39E1F89D88CF6F0B3B1048B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:de:fe:82:00:6c:53:15:8f:19:83:37:76:
                    6b:0e:89:18:18:dc:18:30:a2:bc:19:eb:aa:ab:bc:
                    57:03:b3:52:21:22:f8:99:a1:0e:fd:34:05:db:6a:
                    b4:b8:a9:db:aa:c9:3d:a3:2f:29:6b:27:14:8f:a3:
                    e0:4a:c2:d7:d5:1a:5f:37:9a:ba:14:7d:72:ea:6a:
                    8a:70:60:66:12:64:92:a7:5b:9c:95:c1:f6:02:0a:
                    e1:3c:b8:a0:7f:fb:df:e4:15:e7:7d:fc:26:1e:80:
                    7c:7c:e1:8c:8a:d2:f0:2e:75:72:5e:2f:b5:d2:a9:
                    a9:32:95:31:af:a3:a2:96:a8:ee:dd:90:0b:dd:94:
                    86:08:f0:42:d9:ba:91:03:c6:f6:04:32:5c:76:81:
                    72:24:6d:8e:a2:27:75:f0:f3:7e:f9:8f:e3:5b:76:
                    91:f4:02:4d:3c:64:c5:68:6d:e0:72:70:fd:f4:88:
                    53:dc:37:4c:6e:d7:50:d5:c2:68:b2:40:5f:96:c4:
                    3f:8e:be:24:89:71:3d:e5:cb:3a:f1:42:c9:70:28:
                    6d:50:e4:25:d7:9c:6a:e4:06:2e:87:00:00:d8:94:
                    4a:2b:01:11:d8:57:91:78:0b:14:b8:42:13:8d:cb:
                    1a:92:15:97:3c:9f:0d:f0:a7:78:ed:a9:eb:88:2b:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:B1:D0:35:09:02:1A:F3:9E:1F:89:D8:8C:F6:F0:B3:B1:04:8B
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230312e302f32342d3234203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:da:c0:4c:cd:e4:31:80:5f:e2:87:41:be:d7:50:94:ea:cd:
         0a:3b:ef:2d:ad:16:4c:dd:19:b1:84:97:41:d7:7f:ed:cb:b5:
         93:37:45:82:97:1c:df:90:e0:a3:75:f3:cf:0f:c5:e8:5f:7c:
         78:cb:4c:1e:fa:36:23:96:67:ab:4b:f0:61:a7:38:c1:b9:c6:
         98:9e:c3:85:d1:02:f8:fa:1c:ce:52:6c:b7:6f:51:2e:20:18:
         94:20:35:79:e8:6c:3e:4d:ab:dd:2d:10:6f:72:76:a1:50:9d:
         56:3b:79:fa:d6:23:28:ca:e4:34:61:1d:5a:2c:b2:cd:88:b4:
         a0:7c:02:49:c4:30:18:df:dd:07:df:cf:e8:aa:1a:95:d6:19:
         a9:ca:48:4b:21:6d:b9:58:a6:4a:97:2e:44:25:c4:95:bb:9b:
         98:c1:f2:73:02:2e:20:9d:37:c0:7b:ba:5a:bf:11:9c:1c:6c:
         11:d8:34:04:c7:cd:a5:3b:68:b4:42:8a:e7:f0:19:18:5c:5f:
         c1:d7:e4:8d:ab:cb:74:ef:5b:53:67:8c:88:8d:02:f0:9e:de:
         47:02:33:e8:4a:6d:a4:d7:57:b6:99:f5:f9:93:dc:98:8e:04:
         f7:23:7f:0d:11:e5:57:0e:8e:b7:b9:49:0b:a4:f2:1b:59:de:
         61:d6:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:07 2024 by rpki-client on console-fra.rpki-client.org