Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138392e32382e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          Qx/441LfiQtjOq71JsZRnv8itJviDZMzA3mwtLxoZtA=
Subject key identifier:   6E:56:49:B9:75:8B:10:D2:A4:C4:F2:65:40:B7:08:81:77:D4:05:45
Certificate issuer:       /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial:       6C1C2411ED45D18CBB4BFAD52694B41EAC306242
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 Nov 2023 13:03:39 +0000
ROA not before:           Fri 03 Nov 2023 12:58:39 +0000
ROA not after:            Fri 01 Nov 2024 13:03:39 +0000
asID:                     28669
IP address blocks:        189.28.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 03:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:1c:24:11:ed:45:d1:8c:bb:4b:fa:d5:26:94:b4:1e:ac:30:62:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Validity
            Not Before: Nov  3 12:58:39 2023 GMT
            Not After : Nov  1 13:03:39 2024 GMT
        Subject: CN=6E5649B9758B10D2A4C4F26540B7088177D40545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:57:f3:b5:15:81:d9:fa:45:8f:b6:31:00:
                    a5:6e:e6:db:52:44:d5:24:61:38:28:39:68:79:3d:
                    ac:3a:db:8a:7a:b6:2e:d3:a2:79:b5:f0:5a:c2:cb:
                    97:2b:20:e1:29:29:1e:b5:db:32:2d:75:89:c8:05:
                    5e:04:21:7f:94:7f:60:53:ca:6b:c9:ab:02:40:07:
                    6d:e4:89:d9:43:9a:9a:c5:7b:13:35:5b:28:47:e5:
                    5d:2d:89:b0:a3:b2:79:ee:69:76:5b:a9:59:7c:dd:
                    58:d0:95:dd:91:0d:d7:14:18:17:36:d9:18:fe:ba:
                    48:ad:90:6e:90:a5:77:0b:c7:53:66:1b:e9:c9:03:
                    60:d8:26:95:d1:0f:23:44:88:db:30:52:6d:94:1d:
                    5e:8f:7b:9c:32:09:28:9a:14:b2:c3:89:c8:5a:cf:
                    d8:e7:c1:f1:2b:7b:2a:fa:97:c2:36:f7:21:eb:44:
                    bb:a5:f3:52:d3:74:a0:83:15:c9:4a:01:70:09:5a:
                    d6:ed:ca:c3:9b:76:d4:62:09:df:68:ac:90:61:59:
                    35:4b:c8:e8:e3:ce:48:12:8e:cd:d7:8f:4e:fc:0a:
                    a7:b5:36:f2:dc:ab:4f:77:d9:80:9f:21:28:03:ec:
                    28:b5:b0:17:d3:ab:c3:a6:39:10:3c:52:42:a6:da:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:56:49:B9:75:8B:10:D2:A4:C4:F2:65:40:B7:08:81:77:D4:05:45
            X509v3 Authority Key Identifier:
                keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/3138392e32382e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.28.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:a0:29:2f:41:81:0f:32:86:d0:6d:24:03:57:76:d5:db:
         1d:3a:8e:57:42:44:92:c2:d3:87:80:c2:65:5f:5c:dc:79:47:
         66:9e:3a:16:ad:bf:18:3c:5d:cc:b8:84:3b:c3:69:36:ab:3c:
         b0:46:8e:fb:8e:d3:4d:cb:f2:fa:43:9d:bc:1c:cb:84:7a:c0:
         6f:fa:6d:e6:f2:ac:fc:24:be:d0:98:29:bb:e7:d3:d5:2d:44:
         3f:67:21:9f:d3:14:59:e1:9b:96:65:66:83:96:7c:50:9a:61:
         fd:d3:f6:e9:2a:cc:a4:49:aa:29:d2:eb:7a:03:be:98:27:d5:
         ec:49:f3:8e:ab:1c:dc:05:dd:33:ed:19:98:60:f5:b8:02:0b:
         30:b1:08:a2:b1:b2:9c:25:db:25:47:b7:28:a2:46:d0:5b:fa:
         16:fa:19:f2:cc:45:11:24:19:23:1a:46:d1:34:3f:98:d2:0d:
         c1:2f:bb:b9:74:9b:d5:0e:1f:cf:aa:0d:92:51:a3:a2:c3:cc:
         6f:5e:88:4a:12:aa:db:52:e5:1e:6e:4b:a9:6f:f7:42:4c:6f:
         20:d2:de:44:b8:e8:75:11:7b:a7:25:70:5f:40:03:3a:fa:ce:
         b7:cc:e1:a2:0a:86:7f:9e:1f:18:ce:9f:f3:8b:0d:f5:16:e8:
         f1:2c:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 03:49:02 2024 by rpki-client on console.sobornost.net