Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/3138372e33332e35362e302f32312d3234203d3e203238313934.roa
File:                     3138372e33332e35362e302f32312d3234203d3e203238313934.roa (raw, json)
Hash identifier:          /sRGBfQx1ZAUu85YiCAwYnuCwvR+P/AOIgNBexkVzNA=
Subject key identifier:   B4:FE:B7:98:C5:D2:C8:E4:B5:C3:31:BA:92:A5:67:3B:07:6A:0B:8B
Certificate issuer:       /CN=04E982D7D294A7E0F87DE970AF764F81059CF205
Certificate serial:       EF7B7987AA23DB11FDA9E3A9FA9D6B332CCB51
Authority key identifier: 04:E9:82:D7:D2:94:A7:E0:F8:7D:E9:70:AF:76:4F:81:05:9C:F2:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E982D7D294A7E0F87DE970AF764F81059CF205.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/3138372e33332e35362e302f32312d3234203d3e203238313934.roa
Signing time:             Thu 04 Apr 2024 18:44:56 +0000
ROA not before:           Thu 04 Apr 2024 18:39:56 +0000
ROA not after:            Thu 03 Apr 2025 18:44:56 +0000
asID:                     28194
IP address blocks:        187.33.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/04E982D7D294A7E0F87DE970AF764F81059CF205.crl
                          rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/04E982D7D294A7E0F87DE970AF764F81059CF205.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E982D7D294A7E0F87DE970AF764F81059CF205.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ef:7b:79:87:aa:23:db:11:fd:a9:e3:a9:fa:9d:6b:33:2c:cb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E982D7D294A7E0F87DE970AF764F81059CF205
        Validity
            Not Before: Apr  4 18:39:56 2024 GMT
            Not After : Apr  3 18:44:56 2025 GMT
        Subject: CN=B4FEB798C5D2C8E4B5C331BA92A5673B076A0B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:e2:30:bc:05:20:cf:23:c2:10:37:f1:a7:
                    76:34:0f:c2:ac:6d:20:98:6e:c4:3d:d8:94:9c:1a:
                    0e:70:82:6d:68:85:f1:d9:88:3d:72:36:7f:1d:93:
                    95:b6:91:7c:7c:45:4d:9d:7d:31:ef:10:56:de:ee:
                    09:e7:c4:4d:be:cd:dd:a8:1a:ed:02:33:07:73:a9:
                    f0:c1:cb:9c:76:52:7e:39:cf:6d:ff:a3:1d:e5:57:
                    72:79:9b:b7:91:f2:cb:98:2b:97:a1:e3:56:fe:cd:
                    9f:82:f9:b6:51:5e:ac:d1:a2:fc:37:9e:d5:51:67:
                    e9:26:37:81:ec:e4:ce:a6:6e:97:aa:5d:20:ab:b3:
                    45:33:bd:3a:37:8f:a8:7e:f6:ea:d0:70:60:06:f2:
                    1e:b6:ac:5c:8d:1d:3b:70:d1:13:5c:aa:22:84:a7:
                    1a:b9:47:3d:5e:63:3b:f4:fc:d9:29:fc:08:5f:a4:
                    76:a8:3b:a5:a5:a7:ef:92:38:e5:88:e8:c0:0e:0f:
                    79:6f:37:c1:e6:4e:2d:e1:13:84:5c:4b:80:3b:ce:
                    95:6d:6e:59:bb:88:84:da:b1:06:ca:65:01:f7:94:
                    97:e0:78:17:58:5f:c5:d3:bd:f6:34:fd:e7:b1:22:
                    e5:15:c9:e0:52:3b:c6:54:d3:08:0e:85:98:c0:4f:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:B7:98:C5:D2:C8:E4:B5:C3:31:BA:92:A5:67:3B:07:6A:0B:8B
            X509v3 Authority Key Identifier:
                keyid:04:E9:82:D7:D2:94:A7:E0:F8:7D:E9:70:AF:76:4F:81:05:9C:F2:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/04E982D7D294A7E0F87DE970AF764F81059CF205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E982D7D294A7E0F87DE970AF764F81059CF205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/1/3138372e33332e35362e302f32312d3234203d3e203238313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:51:45:18:53:ce:c3:d1:1b:5a:4b:16:bf:c9:c4:81:72:3b:
         6c:ad:e7:2c:8d:67:4f:da:74:ff:19:15:5a:7c:3c:c9:12:3b:
         ba:d2:ae:2c:b7:76:c7:3e:69:c4:5c:2c:fc:af:b7:73:27:3f:
         56:e6:4c:8b:e2:a6:b5:12:80:43:13:d9:13:00:88:0c:8e:35:
         45:91:23:28:26:c3:2a:c3:26:f4:23:19:ca:f0:b3:1e:b1:59:
         6a:b7:c8:5c:2f:97:51:6c:c0:7f:73:f7:83:3b:39:1d:1a:c2:
         83:a7:19:b6:ae:e9:9d:70:93:f6:b1:b6:2c:2c:7b:85:51:1f:
         6c:12:47:c6:f9:aa:ad:c4:46:ea:36:2d:94:c8:cb:38:b1:02:
         88:4a:50:fa:3d:53:c4:cc:50:35:95:2b:80:e2:3b:4d:a6:63:
         fa:e8:da:36:7c:2e:0e:2e:73:e1:d6:69:22:b8:80:aa:04:d7:
         13:90:b2:9d:5e:01:27:a8:ae:a3:e9:a8:00:a7:be:73:62:93:
         6e:4b:8b:bd:b2:b0:70:cf:65:19:0f:92:b1:33:92:e6:35:1a:
         aa:09:92:27:d8:27:bb:b6:66:61:89:56:f6:d1:f5:91:8f:c7:
         1d:62:40:88:dd:5e:21:04:2f:cd:b8:6f:5d:a1:80:f5:e2:57:
         37:62:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:34 2024 by rpki-client on console-fra.rpki-client.org