Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
File:                     3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          wbAJJa7TRyYO99o9ZPo7rSNUiNtmafxGnM3FjAu/6Tw=
Subject key identifier:   28:14:C6:41:92:01:7A:ED:83:70:FA:49:D9:4B:0D:25:54:A5:F8:BF
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       7A6056C226D1470334B1BE0B5E4B9C9E365EEEBE
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
Signing time:             Thu 04 Apr 2024 23:37:57 +0000
ROA not before:           Thu 04 Apr 2024 23:32:57 +0000
ROA not after:            Thu 03 Apr 2025 23:37:57 +0000
asID:                     28279
IP address blocks:        186.208.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:60:56:c2:26:d1:47:03:34:b1:be:0b:5e:4b:9c:9e:36:5e:ee:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Apr  4 23:32:57 2024 GMT
            Not After : Apr  3 23:37:57 2025 GMT
        Subject: CN=2814C64192017AED8370FA49D94B0D2554A5F8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:af:6d:5f:1f:18:f6:77:7c:5b:cf:ce:c0:
                    c8:8e:3a:9c:a2:52:9b:94:00:80:2d:5e:72:16:18:
                    ee:e6:00:44:6d:cd:4e:65:a4:9a:7a:c0:ab:f7:43:
                    7a:b4:02:3f:bd:47:b2:16:2b:a9:5d:2a:9a:3c:83:
                    23:4b:8a:60:de:b7:83:58:ec:6d:21:8d:1a:f5:98:
                    6b:59:62:7c:b8:f3:87:0d:d7:d5:73:05:f8:80:6e:
                    b8:19:90:ae:39:e6:c4:c4:8b:17:f6:3c:a0:dd:a8:
                    85:e4:21:2e:d8:6e:ed:d8:e3:30:4f:bb:03:02:72:
                    89:5b:41:93:a0:31:4b:16:4b:3e:01:b4:06:d7:16:
                    eb:68:fe:4e:ce:8b:b9:6d:ef:6e:aa:d8:be:e5:03:
                    4d:65:82:fb:d4:3e:1f:e0:f2:27:70:6f:5b:b8:cd:
                    4d:0d:e0:e0:aa:c9:f0:e3:d7:d3:74:12:e7:81:2c:
                    7d:07:b1:bb:c4:c7:34:ee:0b:1b:28:da:9c:b4:25:
                    1f:34:18:a1:1a:53:90:ab:c9:46:f6:ac:f5:f9:18:
                    8d:e9:e2:3f:e0:22:93:36:ca:3c:d3:fe:fc:c5:d3:
                    ae:ed:48:51:0c:b6:96:ac:57:5d:8b:b6:9d:1c:9a:
                    9e:e5:13:03:4f:8b:17:73:ee:cd:f0:b6:fe:89:6a:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:14:C6:41:92:01:7A:ED:83:70:FA:49:D9:4B:0D:25:54:A5:F8:BF
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:3b:a5:4e:fd:8d:d4:95:c9:a2:e6:b9:58:90:39:3e:b0:
         4e:30:af:35:97:57:cd:0d:80:af:8b:94:bc:61:8f:df:93:f1:
         b9:86:0d:f6:ee:c8:21:58:41:16:bb:a0:5d:75:64:1a:2c:69:
         eb:b5:c4:69:fe:fe:fd:b1:f9:36:61:52:1a:09:6d:3e:ac:85:
         49:29:b6:5d:48:1f:87:51:44:bd:9a:20:cd:5f:2a:1a:90:e0:
         e8:3b:64:a8:4b:aa:dd:4d:c0:2e:e1:53:53:ae:17:82:91:40:
         de:5e:3f:ac:6f:9a:cb:bb:a6:7b:7e:da:5e:13:1a:47:c3:cd:
         15:ed:a4:e7:9b:89:6b:4c:7d:22:2f:6b:ce:7c:8b:a9:91:84:
         27:2a:e3:bb:65:e5:69:9e:2d:34:6f:66:28:04:df:a7:d1:92:
         02:3c:e0:da:67:61:e6:40:73:35:d1:19:18:da:68:cc:e4:df:
         56:9c:73:24:e6:af:92:a7:3e:fe:45:9c:73:ec:57:da:aa:d5:
         c8:75:a1:b9:60:93:a9:70:c3:a6:05:e6:3d:82:01:e2:c4:23:
         79:d3:e3:1b:db:99:c5:ff:ba:c2:89:c2:9c:d3:04:2b:35:52:
         99:3c:b0:1f:7c:5b:c8:c1:85:6d:72:5d:a3:16:8c:d2:aa:33:
         e3:18:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org