Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          z/g15j2BADGRtaJYJTpYZQ+14p5pvJdfw0hMNM8GVxA=
Subject key identifier:   27:FA:76:67:19:EF:78:5B:BE:66:31:59:C5:B0:14:66:CC:BF:DA:9C
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       55A66799173DFDE378A93AF3F51B744FACEE4DB3
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
Signing time:             Mon 29 Jul 2024 10:33:54 +0000
ROA not before:           Mon 29 Jul 2024 10:28:54 +0000
ROA not after:            Mon 28 Jul 2025 10:33:54 +0000
asID:                     262687
IP address blocks:        187.87.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a6:67:99:17:3d:fd:e3:78:a9:3a:f3:f5:1b:74:4f:ac:ee:4d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Jul 29 10:28:54 2024 GMT
            Not After : Jul 28 10:33:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:83:34:7f:eb:a0:d6:72:0e:d2:52:91:6a:
                    dc:e0:05:df:ed:a0:6b:49:43:55:bc:4b:b1:7e:06:
                    13:e9:f7:62:fd:bf:65:85:c8:ca:78:bf:76:3c:5d:
                    3d:c7:5b:12:21:ca:69:02:60:f1:14:74:df:c8:ac:
                    72:b4:8b:1b:d1:2c:04:02:a9:3f:12:0a:50:ac:aa:
                    96:a5:58:e6:28:09:11:5c:ba:e1:a9:61:e3:8e:10:
                    00:1b:be:73:29:b3:dd:f4:11:33:a1:f4:4d:db:e6:
                    50:8b:f7:b4:cb:b6:50:66:27:b9:38:c2:50:98:39:
                    6d:9c:93:8f:36:d4:02:5a:86:22:01:05:a2:b1:4a:
                    f9:5a:f4:d7:50:c9:06:4c:b6:cf:0d:a4:c0:65:ac:
                    cf:90:42:0f:74:06:1c:e4:aa:35:71:db:b7:a8:1d:
                    70:4c:2d:bb:b8:1d:92:07:96:45:82:4e:c7:6e:9e:
                    ad:a1:94:f6:cb:b4:72:7c:cf:3f:47:3c:4f:7f:1e:
                    6c:b4:b1:dd:07:b2:e1:34:7f:8a:dc:1e:d8:0d:77:
                    32:ef:4c:96:3c:ad:c1:e6:20:c9:7b:ba:3e:24:8b:
                    53:cd:69:b4:47:98:48:9e:4d:86:99:c1:09:69:89:
                    a6:aa:39:22:4c:89:54:47:8a:0c:8c:2c:62:7b:f0:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FA:76:67:19:EF:78:5B:BE:66:31:59:C5:B0:14:66:CC:BF:DA:9C
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:4d:a7:e2:ef:16:2d:73:1b:35:81:be:2c:82:52:51:4a:
         6c:d3:b4:59:72:46:32:62:a0:4a:64:6b:b4:7e:30:9a:7a:cb:
         d1:1c:6e:12:63:ad:b9:8a:d3:9b:b7:98:3b:a9:a6:26:da:3a:
         31:4d:8e:15:d4:c3:e6:44:64:41:4f:9a:42:0c:90:e7:6f:b2:
         c0:91:a6:e1:88:3d:f1:02:b3:5b:c2:48:9a:86:d9:d0:8b:d6:
         25:2d:b5:b0:fb:eb:d5:b6:f0:73:69:83:13:3a:cb:92:96:53:
         a8:b9:70:9c:cc:9e:f8:08:28:61:40:7f:ef:40:01:81:ce:36:
         00:92:58:3e:47:1e:e7:0f:1e:92:64:46:c1:f1:3d:8c:46:52:
         26:65:0c:47:c3:b6:d2:3c:e9:a8:6e:fd:59:65:6a:d2:e4:fe:
         9b:96:6e:38:9e:fb:59:db:64:15:9d:f1:cf:39:d1:ed:75:79:
         17:de:28:e4:09:72:1c:30:21:f6:53:8b:06:38:96:29:70:22:
         87:b7:60:6d:04:a9:df:50:c2:24:25:88:d1:66:2b:64:39:46:
         70:c5:6b:f0:da:b9:4f:d4:b0:d0:0a:b8:28:b1:2b:9b:8d:50:
         e5:41:36:30:07:1c:af:f0:71:6e:ef:4e:f2:af:40:19:12:08:
         e7:40:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:35 2024 by rpki-client on console-ams.rpki-client.org