Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3234203d3e203238333238.roa
File:                     3138392e31342e3230382e302f32302d3234203d3e203238333238.roa (raw, json)
Hash identifier:          3ahk9hf1hxWXiz5OSdL2uZOmoFFtTs6vIDb7oUpLD0k=
Subject key identifier:   12:B3:80:23:A7:DC:8E:FE:B8:72:92:6D:E8:17:56:2E:D0:4B:FF:3C
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       5058B5B90B9C826026B38F6D7390962492EE7F9D
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3234203d3e203238333238.roa
Signing time:             Mon 29 Jul 2024 13:50:27 +0000
ROA not before:           Mon 29 Jul 2024 13:45:27 +0000
ROA not after:            Mon 28 Jul 2025 13:50:27 +0000
asID:                     28328
IP address blocks:        189.14.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:b5:b9:0b:9c:82:60:26:b3:8f:6d:73:90:96:24:92:ee:7f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Jul 29 13:45:27 2024 GMT
            Not After : Jul 28 13:50:27 2025 GMT
        Subject: CN=12B38023A7DC8EFEB872926DE817562ED04BFF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:5c:8e:e5:4a:99:fb:a5:50:41:19:44:ad:
                    86:9f:6d:1b:e8:b5:a9:f4:d8:db:d5:2b:8f:c8:56:
                    07:1a:ad:37:49:8e:ca:25:ca:bf:a8:bd:58:df:45:
                    08:fa:3c:41:80:0c:f0:6d:ef:e5:fb:44:73:52:77:
                    2f:ce:03:34:e5:f8:96:06:21:0a:dd:29:c2:d3:f5:
                    15:23:6e:4d:7f:a4:36:0e:0b:0b:44:d3:b4:ed:91:
                    1c:e0:20:2b:81:be:0a:7a:ef:0b:f9:f9:3d:d4:5e:
                    3f:ac:a7:f5:f0:83:27:15:d8:49:6b:5f:96:3b:fe:
                    6f:3d:1d:66:4d:3c:3c:17:41:ed:56:38:3b:21:48:
                    d5:c6:00:a1:66:b5:ed:4e:6b:2a:45:9e:a8:12:7b:
                    55:5f:43:be:95:2d:2a:cd:4c:b6:13:d8:07:d5:7b:
                    70:cb:bf:9e:df:e2:60:9e:54:e8:58:82:39:51:ec:
                    13:af:86:94:16:ed:d9:a4:99:b1:d7:31:18:dc:f0:
                    e8:2b:03:e0:59:1c:5e:07:62:49:62:ad:2c:32:35:
                    9e:10:fd:33:48:cc:ff:ee:0d:cf:03:18:8e:af:21:
                    52:2a:6c:51:44:53:6e:92:37:e5:d5:f0:43:67:e7:
                    9b:70:79:68:f7:4b:3d:ac:86:68:9f:02:00:6f:f0:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:80:23:A7:DC:8E:FE:B8:72:92:6D:E8:17:56:2E:D0:4B:FF:3C
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3230382e302f32302d3234203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:d2:4d:0a:13:6d:7f:1f:fb:db:82:cf:ad:56:39:a8:62:
         4b:7a:c1:e9:9b:1f:22:a5:63:f1:21:49:7e:72:e5:d4:bc:36:
         d1:cd:b0:1f:b0:bc:72:fe:cd:45:dd:6c:dc:ed:8a:34:c7:68:
         5a:b1:12:39:7a:ea:01:17:b0:e8:24:27:82:af:b7:58:0e:0b:
         73:66:61:f5:64:a2:67:23:e2:63:f7:78:35:c2:d7:f5:52:3b:
         51:d9:df:a7:dd:ee:5b:e2:90:29:d1:f4:b7:c6:af:fc:99:56:
         35:8d:1f:a5:9e:20:69:ce:c2:5a:cd:83:0b:6d:0f:cf:68:fc:
         87:04:2d:30:93:b7:7e:d0:a7:e4:fe:07:80:50:29:b8:8a:da:
         15:0c:4c:c9:c2:eb:97:1b:ca:bb:ec:45:d8:e1:5d:37:69:23:
         6a:53:6d:57:f3:5e:44:54:07:8c:07:65:a6:38:b2:2f:3e:0c:
         0b:7f:ca:30:56:17:92:ff:e5:e0:f5:70:cc:0f:54:51:a0:ee:
         84:a8:a5:7d:21:96:09:34:b2:cc:da:bb:4e:80:6f:1d:48:f5:
         49:8d:f2:31:e2:33:04:43:9a:bf:ea:61:9c:cf:32:52:61:f2:
         52:a6:c6:54:bf:fa:e9:2c:dc:cc:e8:e5:06:28:ff:18:1d:6c:
         9e:9b:c2:15
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUFi1uQucgmAms49tc5CWJJLuf50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2
QkY2NTc4NTAeFw0yNDA3MjkxMzQ1MjdaFw0yNTA3MjgxMzUwMjdaMDMxMTAvBgNV
BAMTKDEyQjM4MDIzQTdEQzhFRkVCODcyOTI2REU4MTc1NjJFRDA0QkZGM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfVyO5UqZ+6VQQRlErYafbRvo
tan02NvVK4/IVgcarTdJjsolyr+ovVjfRQj6PEGADPBt7+X7RHNSdy/OAzTl+JYG
IQrdKcLT9RUjbk1/pDYOCwtE07TtkRzgICuBvgp67wv5+T3UXj+sp/XwgycV2Elr
X5Y7/m89HWZNPDwXQe1WODshSNXGAKFmte1OaypFnqgSe1VfQ76VLSrNTLYT2AfV
e3DLv57f4mCeVOhYgjlR7BOvhpQW7dmkmbHXMRjc8OgrA+BZHF4HYklirSwyNZ4Q
/TNIzP/uDc8DGI6vIVIqbFFEU26SN+XV8ENn55tweWj3Sz2shmifAgBv8ClJAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUErOAI6fcjv64cpJt6BdWLtBL/zwwHwYDVR0j
BBgwFoAUWy0t8Kkto3M91yJVFaY+PWv2V4UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YV1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZI
LzAvNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2QkY2NTc4NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QjJEMkRGMEE5MkRBMzczM0RE
NzIyNTUxNUE2M0UzRDZCRjY1Nzg1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
V1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZILzAvMzEz
ODM5MmUzMTM0MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzMz
MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEvQ7QMA0GCSqGSIb3DQEBCwUAA4IBAQBjK9JNChNtfx/7
24LPrVY5qGJLesHpmx8ipWPxIUl+cuXUvDbRzbAfsLxy/s1F3Wzc7Yo0x2hasRI5
euoBF7DoJCeCr7dYDgtzZmH1ZKJnI+Jj93g1wtf1UjtR2d+n3e5b4pAp0fS3xq/8
mVY1jR+lniBpzsJazYMLbQ/PaPyHBC0wk7d+0Kfk/geAUCm4itoVDEzJwuuXG8q7
7EXY4V03aSNqU21X815EVAeMB2WmOLIvPgwLf8owVheS/+Xg9XDMD1RRoO6EqKV9
IZYJNLLM2rtOgG8dSPVJjfIx4jMEQ5q/6mGczzJSYfJSpsZUv/rpLNzM6OUGKP8Y
HWyem8IV
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:16 2024 by rpki-client on console-fra.rpki-client.org