Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f31392d3139203d3e203533303534.roa
File:                     3138372e37332e3139322e302f31392d3139203d3e203533303534.roa (raw, json)
Hash identifier:          tXbTECfEtfXgGQtNH807yHhzG4r/0qP8C+ah23MeN/k=
Subject key identifier:   5A:8F:59:B2:AA:D6:D6:7F:05:6E:2B:C0:89:A5:3A:44:B0:1C:1B:08
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       6E0D913AC7FE01D71680E35A157FFBBD6266122E
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f31392d3139203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:01 +0000
ROA not before:           Mon 09 Sep 2024 15:01:01 +0000
ROA not after:            Mon 08 Sep 2025 15:06:01 +0000
asID:                     53054
IP address blocks:        187.73.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0d:91:3a:c7:fe:01:d7:16:80:e3:5a:15:7f:fb:bd:62:66:12:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:01 2024 GMT
            Not After : Sep  8 15:06:01 2025 GMT
        Subject: CN=5A8F59B2AAD6D67F056E2BC089A53A44B01C1B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:3e:52:54:58:61:bf:cd:0b:ef:03:ee:1e:
                    81:f9:33:10:a2:cd:21:06:46:70:ff:f6:1b:44:42:
                    89:54:94:52:19:da:58:e5:e4:80:85:b6:0b:4f:01:
                    56:4d:65:04:fa:2b:6e:b5:52:0a:ac:ca:20:01:68:
                    6b:9a:69:27:b6:3c:8a:ef:e6:88:1a:28:42:21:80:
                    7a:af:79:bd:23:26:d6:29:61:00:f2:57:63:14:58:
                    be:6d:1c:b3:ee:be:58:a8:f5:fc:48:ea:a4:67:80:
                    70:4b:f4:b2:ba:7e:41:6d:87:0d:9d:02:44:e9:e7:
                    c0:12:c9:4a:3e:22:29:78:67:e7:6a:06:e7:03:b4:
                    03:ab:ec:36:19:53:67:6a:6b:e9:1e:05:b6:e4:c3:
                    aa:7c:55:a0:55:23:52:c0:3a:12:8f:c3:39:68:46:
                    f0:dd:08:e7:05:d9:ea:5e:8d:b5:35:2d:35:5a:16:
                    4d:3c:02:2c:c3:2a:ac:ad:f8:bc:f6:ac:0d:4a:6f:
                    56:b1:b1:04:c2:d0:5e:21:0a:10:7b:35:81:df:f7:
                    e2:4d:0f:96:0a:c8:94:70:19:5a:11:6b:3b:bd:75:
                    fd:b3:e3:37:b4:e5:39:2a:bf:5c:ac:f1:2f:b2:b6:
                    a6:76:98:5c:37:65:e2:1d:b3:e9:93:53:68:73:af:
                    f4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8F:59:B2:AA:D6:D6:7F:05:6E:2B:C0:89:A5:3A:44:B0:1C:1B:08
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f31392d3139203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:35:bb:c1:63:fb:87:bf:97:08:84:2d:4f:53:6e:88:11:5a:
         91:e3:72:90:78:79:3f:eb:79:cb:8a:39:66:0a:bd:69:66:9c:
         a1:e5:0f:90:3b:48:11:e4:44:0a:94:1d:7a:38:77:a5:71:af:
         1d:1e:1e:44:df:5e:2f:cd:52:48:05:00:21:61:29:8d:9e:90:
         c9:1d:53:9e:f3:9b:89:01:7d:7f:e0:5d:db:7c:44:ea:03:5a:
         4f:8b:58:a8:6c:16:de:28:f1:9b:c9:89:7e:35:13:8a:7a:26:
         d3:fd:c4:1b:a9:95:4c:5d:64:88:d2:e6:55:a0:d0:a3:b4:cc:
         30:55:19:76:2f:41:ec:04:13:f5:89:23:e5:74:db:01:f5:0f:
         9a:cb:ec:f6:f0:4c:b9:f6:fb:98:7a:a7:d2:cb:33:36:d0:ee:
         35:01:81:bb:d5:7d:58:fb:a8:08:05:22:d8:de:ee:5c:37:c0:
         23:99:74:a1:e1:7b:7d:e2:58:22:da:93:43:b7:02:44:2b:b2:
         ba:54:f8:1c:a1:29:cc:8a:ae:83:98:61:f1:15:5d:1b:35:82:
         36:2f:89:65:61:95:37:94:34:08:07:cf:bd:15:24:ae:27:f6:
         b2:e5:fe:35:6c:95:cc:a5:80:7b:9b:17:3d:25:80:30:f5:1e:
         de:3e:96:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbg2ROsf+AdcWgONaFX/7vWJmEi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVDQjk1OUUyMUU3NTYyNjEyOTJFMjEzN0NERTlDQUQ4
NTQ5MkIwQTAeFw0yNDA5MDkxNTAxMDFaFw0yNTA5MDgxNTA2MDFaMDMxMTAvBgNV
BAMTKDVBOEY1OUIyQUFENkQ2N0YwNTZFMkJDMDg5QTUzQTQ0QjAxQzFCMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TT5SVFhhv80L7wPuHoH5MxCi
zSEGRnD/9htEQolUlFIZ2ljl5ICFtgtPAVZNZQT6K261UgqsyiABaGuaaSe2PIrv
5ogaKEIhgHqveb0jJtYpYQDyV2MUWL5tHLPuvlio9fxI6qRngHBL9LK6fkFthw2d
AkTp58ASyUo+Iil4Z+dqBucDtAOr7DYZU2dqa+keBbbkw6p8VaBVI1LAOhKPwzlo
RvDdCOcF2epejbU1LTVaFk08AizDKqyt+Lz2rA1Kb1axsQTC0F4hChB7NYHf9+JN
D5YKyJRwGVoRazu9df2z4ze05Tkqv1ys8S+ytqZ2mFw3ZeIds+mTU2hzr/RdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWo9ZsqrW1n8FbivAiaU6RLAcGwgwHwYDVR0j
BBgwFoAU/suVniHnViYSkuITfN6crYVJKwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUMzQ2kyRHVDQzlLQ3FrZHoxN3FxY1dvaERlYlpQcGlBYTE1RTFNQWRu
UHYvMC9GRUNCOTU5RTIxRTc1NjI2MTI5MkUyMTM3Q0RFOUNBRDg1NDkyQjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFQ0I5NTlFMjFFNzU2MjYx
MjkyRTIxMzdDREU5Q0FEODU0OTJCMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDM0NpMkR1Q0M5S0Nxa2R6MTdxcWNXb2hEZWJaUHBpQWExNUUxTUFkblB2LzAv
MzEzODM3MmUzNzMzMmUzMTM5MzIyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNTMz
MzAzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFu0nAMA0GCSqGSIb3DQEBCwUAA4IBAQBhNbvBY/uH
v5cIhC1PU26IEVqR43KQeHk/63nLijlmCr1pZpyh5Q+QO0gR5EQKlB16OHelca8d
Hh5E314vzVJIBQAhYSmNnpDJHVOe85uJAX1/4F3bfETqA1pPi1iobBbeKPGbyYl+
NROKeibT/cQbqZVMXWSI0uZVoNCjtMwwVRl2L0HsBBP1iSPldNsB9Q+ay+z28Ey5
9vuYeqfSyzM20O41AYG71X1Y+6gIBSLY3u5cN8AjmXSh4Xt94lgi2pNDtwJEK7K6
VPgcoSnMiq6DmGHxFV0bNYI2L4llYZU3lDQIB8+9FSSuJ/ay5f41bJXMpYB7mxc9
JYAw9R7ePpbc
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org