Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa
File:                     3138392e3132372e33322e302f32302d3234203d3e203238323332.roa (raw, json)
Hash identifier:          fiQyoz41jCDTznErk/QYZRokJsGnZtqhEGrH58LAdn0=
Subject key identifier:   D4:54:0E:87:F9:26:F3:1F:C0:5E:C2:03:7A:4B:F9:F8:22:EA:A8:F3
Certificate issuer:       /CN=99C2A53A53B7161516985068CD39F465FE646938
Certificate serial:       7AA16A5443E354F7FFAB77AB58588C2AA9186D67
Authority key identifier: 99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa
Signing time:             Mon 23 Dec 2024 16:40:19 +0000
ROA not before:           Mon 23 Dec 2024 16:35:19 +0000
ROA not after:            Mon 22 Dec 2025 16:40:19 +0000
asID:                     28232
IP address blocks:        189.127.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl
                          rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:6a:54:43:e3:54:f7:ff:ab:77:ab:58:58:8c:2a:a9:18:6d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C2A53A53B7161516985068CD39F465FE646938
        Validity
            Not Before: Dec 23 16:35:19 2024 GMT
            Not After : Dec 22 16:40:19 2025 GMT
        Subject: CN=D4540E87F926F31FC05EC2037A4BF9F822EAA8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:45:61:66:4c:d1:9c:2d:a4:f0:a5:50:de:
                    b7:08:c2:e2:ca:6e:a7:36:8b:c2:8a:e6:a1:82:a4:
                    d5:d8:31:70:7b:d4:3f:05:70:62:95:d1:d2:fc:06:
                    39:1e:74:30:c6:c0:f8:87:e8:47:44:70:cb:3a:e5:
                    e2:3d:3e:f3:4b:a5:ae:aa:86:b6:ee:76:c7:9a:10:
                    bc:5c:c2:c9:97:b9:9c:b9:49:e1:08:01:08:ef:85:
                    35:ab:d0:f6:02:07:16:e1:7f:9a:16:68:90:28:a5:
                    0a:49:27:6e:7e:3e:cf:91:29:64:e0:76:ae:eb:9c:
                    9e:e4:66:e0:2d:3f:7a:c6:2e:be:9c:2c:c5:aa:92:
                    b6:75:a5:53:33:42:e2:85:f6:31:21:cf:47:ac:14:
                    42:bb:89:53:ec:c4:ed:e3:42:95:09:c2:c7:a5:a3:
                    8d:02:58:18:6f:08:9c:7c:5d:59:ac:d9:0f:a8:a5:
                    59:82:ed:16:87:fd:58:a6:db:e4:4b:0d:36:35:05:
                    da:63:74:01:38:de:96:ef:07:2c:c8:15:63:a1:1f:
                    28:1c:b8:3c:8e:d0:cf:53:e2:49:ff:62:8b:c0:8a:
                    24:15:ea:2f:70:4b:b5:6b:8d:13:73:ee:0a:18:45:
                    f9:a4:91:65:20:08:83:c6:0f:d8:e4:10:57:30:03:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:0E:87:F9:26:F3:1F:C0:5E:C2:03:7A:4B:F9:F8:22:EA:A8:F3
            X509v3 Authority Key Identifier:
                keyid:99:C2:A5:3A:53:B7:16:15:16:98:50:68:CD:39:F4:65:FE:64:69:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/99C2A53A53B7161516985068CD39F465FE646938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C2A53A53B7161516985068CD39F465FE646938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/3138392e3132372e33322e302f32302d3234203d3e203238323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:71:20:cc:8e:7c:f9:ff:2a:2c:5e:89:e7:b9:91:84:24:17:
         de:06:9d:32:46:16:f1:61:df:6e:67:12:32:d2:e9:44:d0:de:
         bd:6c:31:6f:f8:ec:7a:d8:90:21:9f:b0:0e:13:de:8f:5f:e3:
         d1:3e:4c:82:3e:ed:e5:af:0a:86:9b:6c:5b:03:41:57:19:e5:
         ca:6e:2d:31:51:b5:99:14:10:bb:34:d5:c5:60:1e:94:dd:4a:
         23:53:94:cb:91:e1:2c:b4:d2:1e:6e:63:3e:36:2e:8a:9c:f8:
         71:98:db:26:53:0c:3c:f3:6b:b8:4d:9b:90:de:0d:7e:3c:4d:
         3c:89:3f:62:ac:a6:9e:72:72:be:b9:ad:21:51:90:1a:82:b0:
         e0:dd:40:32:37:c5:94:60:6f:34:bb:23:3d:55:93:57:7d:13:
         49:77:90:2a:73:fe:89:76:2e:67:ff:87:fe:d4:c0:67:89:8c:
         70:53:a5:66:12:11:7a:ef:f3:79:56:5f:db:a7:da:d0:34:65:
         e2:c2:52:e8:e0:5d:29:ec:c8:1b:74:b5:e7:a8:30:11:2b:17:
         ee:d7:86:44:03:01:a6:64:db:69:66:ee:bb:60:f6:f2:ee:67:
         22:ea:4d:f9:cf:f3:bb:44:9a:17:58:88:c3:7b:f1:9c:8e:b6:
         66:a3:56:01
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeqFqVEPjVPf/q3erWFiMKqkYbWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDMkE1M0E1M0I3MTYxNTE2OTg1MDY4Q0QzOUY0NjVG
RTY0NjkzODAeFw0yNDEyMjMxNjM1MTlaFw0yNTEyMjIxNjQwMTlaMDMxMTAvBgNV
BAMTKEQ0NTQwRTg3RjkyNkYzMUZDMDVFQzIwMzdBNEJGOUY4MjJFQUE4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhP0VhZkzRnC2k8KVQ3rcIwuLK
bqc2i8KK5qGCpNXYMXB71D8FcGKV0dL8BjkedDDGwPiH6EdEcMs65eI9PvNLpa6q
hrbudseaELxcwsmXuZy5SeEIAQjvhTWr0PYCBxbhf5oWaJAopQpJJ25+Ps+RKWTg
dq7rnJ7kZuAtP3rGLr6cLMWqkrZ1pVMzQuKF9jEhz0esFEK7iVPsxO3jQpUJwsel
o40CWBhvCJx8XVms2Q+opVmC7RaH/Vim2+RLDTY1BdpjdAE43pbvByzIFWOhHygc
uDyO0M9T4kn/YovAiiQV6i9wS7VrjRNz7goYRfmkkWUgCIPGD9jkEFcwAxO7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1FQOh/km8x/AXsIDekv5+CLqqPMwHwYDVR0j
BBgwFoAUmcKlOlO3FhUWmFBozTn0Zf5kaTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1pleGRzeGdGNDlMRDlDbTRYYmNSUWd1TlA1N3JSRUcxNW5IQjNMSHVn
elovMC85OUMyQTUzQTUzQjcxNjE1MTY5ODUwNjhDRDM5RjQ2NUZFNjQ2OTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QzJBNTNBNTNCNzE2MTUx
Njk4NTA2OENEMzlGNDY1RkU2NDY5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdaZXhkc3hnRjQ5TEQ5Q200WGJjUlFndU5QNTdyUkVHMTVuSEIzTEh1Z3paLzAv
MzEzODM5MmUzMTMyMzcyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvX8gMA0GCSqGSIb3DQEBCwUAA4IBAQCCcSDMjnz5
/yosXonnuZGEJBfeBp0yRhbxYd9uZxIy0ulE0N69bDFv+Ox62JAhn7AOE96PX+PR
PkyCPu3lrwqGm2xbA0FXGeXKbi0xUbWZFBC7NNXFYB6U3UojU5TLkeEstNIebmM+
Ni6KnPhxmNsmUww882u4TZuQ3g1+PE08iT9irKaecnK+ua0hUZAagrDg3UAyN8WU
YG80uyM9VZNXfRNJd5Aqc/6Jdi5n/4f+1MBniYxwU6VmEhF67/N5Vl/bp9rQNGXi
wlLo4F0p7MgbdLXnqDARKxfu14ZEAwGmZNtpZu67YPby7mci6k35z/O7RJoXWIjD
e/GcjrZmo1YB
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:12 2025 by rpki-client on console.sobornost.net