Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138372e31392e39362e302f32302d3234203d3e203238313330.roa
File:                     3138372e31392e39362e302f32302d3234203d3e203238313330.roa (raw, json)
Hash identifier:          nSrNemdvmY1v2RUKo04heyIz//hIecAcM2L+2glhg9M=
Subject key identifier:   3C:08:16:C4:E9:D0:C6:AB:E0:22:13:8D:51:D9:97:FF:32:E4:5E:68
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       346A9AC9D8B2502B5EADBF6C47AEA43740FB1CF6
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138372e31392e39362e302f32302d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:49 +0000
ROA not before:           Thu 04 Apr 2024 07:27:49 +0000
ROA not after:            Thu 03 Apr 2025 07:32:49 +0000
asID:                     28130
IP address blocks:        187.19.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6a:9a:c9:d8:b2:50:2b:5e:ad:bf:6c:47:ae:a4:37:40:fb:1c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:49 2024 GMT
            Not After : Apr  3 07:32:49 2025 GMT
        Subject: CN=3C0816C4E9D0C6ABE022138D51D997FF32E45E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:62:9b:f2:f7:83:3d:66:18:57:65:a6:13:
                    16:bc:19:f3:aa:d2:4f:58:50:09:e4:b4:f7:95:40:
                    a3:d7:89:15:05:0d:6b:cd:de:a0:e5:4f:42:71:10:
                    48:f4:c0:e1:a0:ad:41:4e:4c:4e:b0:23:7a:3d:1c:
                    ee:d9:9a:e2:9e:e0:7d:a6:84:61:55:c6:7c:0e:3b:
                    ee:db:f3:83:8f:a7:b1:27:18:1e:3c:24:08:fa:fa:
                    27:6a:02:95:65:c3:70:7c:c1:17:cf:12:d5:b6:8a:
                    a9:cf:ec:39:c9:b7:54:94:50:03:f2:a8:5b:00:ba:
                    29:c8:92:93:9e:f7:52:86:74:66:18:3b:9d:16:80:
                    dc:9e:24:58:c2:47:00:c8:b2:ef:f3:86:41:ed:68:
                    73:94:3e:65:3e:c4:89:c9:fd:b6:f0:5d:72:a2:0f:
                    da:f0:87:e3:0a:85:82:6f:a9:51:78:66:42:fd:64:
                    83:48:69:8f:31:49:50:a9:9f:c8:73:29:37:1e:6d:
                    33:26:34:c4:85:11:c4:56:94:e4:ef:dd:d1:08:9a:
                    77:d3:42:0a:fd:d4:9c:33:ac:cd:e5:16:37:c2:20:
                    e2:ff:01:02:4b:aa:99:1c:80:de:df:1a:59:32:ef:
                    cc:0b:52:77:ac:da:97:07:42:08:56:65:b7:8e:2e:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:08:16:C4:E9:D0:C6:AB:E0:22:13:8D:51:D9:97:FF:32:E4:5E:68
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138372e31392e39362e302f32302d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:45:cd:ec:ee:e0:1d:85:88:ea:2f:eb:c2:e1:82:15:fc:
         12:e5:93:af:91:94:ff:4d:b1:79:1e:3a:d6:34:3b:89:c3:46:
         d1:fe:2a:3b:d2:2b:4f:cc:c5:7a:28:86:3c:e6:4e:48:f0:40:
         cb:76:e2:d5:f8:f6:cc:e5:8a:db:5d:13:72:65:0a:82:ab:48:
         19:62:e3:ba:52:11:c9:37:d4:f6:83:08:f7:61:b6:6a:65:e5:
         0a:fd:28:b2:f5:eb:dc:71:ed:9a:b4:eb:8e:83:19:56:dd:a9:
         83:1c:57:cf:5b:fc:91:88:fd:6b:22:41:07:6e:eb:a3:b9:45:
         27:06:56:5f:bb:d5:99:32:f4:8f:8d:80:04:d2:bb:ad:4f:56:
         37:1c:c7:a5:c8:07:89:4c:69:7c:a8:51:e0:1b:fd:08:41:fd:
         69:0a:cf:e3:96:6b:65:01:aa:89:25:9b:4e:40:8c:8c:bf:f1:
         54:a8:bc:31:c4:90:0d:91:38:07:91:f1:31:7f:e8:43:5f:2d:
         25:62:95:e8:f8:f8:74:aa:bf:16:ed:7a:44:96:bb:71:fe:7b:
         91:c4:d9:27:4d:4c:d9:29:cf:f8:bd:be:57:2b:fc:a8:9e:70:
         e6:a9:d6:79:3c:e5:19:d5:d2:8e:04:8a:99:79:32:b4:04:c6:
         d4:89:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:23 2024 by rpki-client on console-ams.rpki-client.org