Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32302d3230203d3e203533303534.roa
File:                     3138372e37332e3139322e302f32302d3230203d3e203533303534.roa (raw, json)
Hash identifier:          u62QSf8TneXIZi2ftsZhUuxLr+/2B63zjQyuNGbBl6I=
Subject key identifier:   8E:10:C4:68:8D:4E:EC:E2:02:AC:CD:75:09:39:62:94:82:DB:7E:2A
Certificate issuer:       /CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
Certificate serial:       3E44DE8D7813AE565D41FC419470A6E5E8DD2534
Authority key identifier: 22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32302d3230203d3e203533303534.roa
Signing time:             Mon 08 Apr 2024 20:08:38 +0000
ROA not before:           Mon 08 Apr 2024 20:03:38 +0000
ROA not after:            Mon 07 Apr 2025 20:08:38 +0000
asID:                     53054
IP address blocks:        187.73.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:44:de:8d:78:13:ae:56:5d:41:fc:41:94:70:a6:e5:e8:dd:25:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
        Validity
            Not Before: Apr  8 20:03:38 2024 GMT
            Not After : Apr  7 20:08:38 2025 GMT
        Subject: CN=8E10C4688D4EECE202ACCD750939629482DB7E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:17:f6:7e:2c:66:4e:e8:31:4c:83:8a:69:
                    8d:4f:f3:35:79:22:b1:fb:c0:2f:91:4c:54:3b:ec:
                    6f:b4:50:1b:d3:cf:d6:12:b5:cc:57:26:2d:5c:4f:
                    d2:62:41:2a:4d:7f:b5:34:eb:81:33:a9:3d:9f:80:
                    c5:15:de:43:e6:b4:18:a4:3f:dc:42:bc:62:01:fd:
                    40:6c:25:e3:0f:0a:dd:a9:44:21:16:5d:e6:13:11:
                    61:41:24:27:ba:83:73:5a:ca:38:b5:5a:79:3c:7e:
                    0f:a2:01:e2:79:8b:97:fb:d5:28:a0:b6:30:53:c9:
                    2b:95:1c:24:4a:c3:00:d2:a9:c3:57:bb:79:4d:4b:
                    09:07:a1:18:62:13:4c:dd:84:c7:6e:66:f7:d3:2f:
                    0c:5b:4d:2a:66:b3:91:90:f1:b5:01:95:6a:9d:95:
                    0f:5c:66:92:c1:68:2b:51:6d:c7:36:bd:9f:72:ec:
                    46:61:a1:d8:ee:bc:3b:f1:59:29:99:7f:71:5e:7f:
                    1c:7c:cf:ff:ce:d5:ba:95:64:c9:48:a4:20:8b:69:
                    cd:ee:40:74:f5:f2:37:37:d7:d4:68:8b:cd:ec:ab:
                    0b:94:cf:60:f4:bd:2a:b7:0b:3b:d6:0f:d0:54:51:
                    83:7a:14:0b:0b:ea:46:34:35:38:81:3d:91:76:d1:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:C4:68:8D:4E:EC:E2:02:AC:CD:75:09:39:62:94:82:DB:7E:2A
            X509v3 Authority Key Identifier:
                keyid:22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32302d3230203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:69:e5:41:59:b8:fa:59:97:a6:62:cb:e1:9c:59:9f:12:
         2d:bc:ad:9d:2d:49:54:0b:c0:29:2f:4b:7e:26:45:a5:c3:04:
         6a:39:da:6f:e7:d9:58:69:6b:18:f7:fb:00:b0:84:cf:98:7e:
         2a:e8:a5:8f:1f:d0:fa:53:c7:2d:9c:df:6f:1c:d4:2c:dd:e2:
         3c:01:39:b4:eb:c5:b7:e6:fc:9f:0b:7e:bc:5c:26:2f:35:cc:
         f8:ef:84:47:0d:6e:f0:1b:25:16:af:65:c7:f3:fd:a1:87:fb:
         57:59:fe:a6:56:b0:71:a5:74:3c:b2:c1:b7:51:db:0f:87:80:
         c1:31:d1:6f:83:9d:c0:97:80:b1:e6:c5:a1:41:d3:ee:6a:ef:
         b6:72:88:9e:b6:19:dd:4e:c1:36:78:71:39:d1:db:03:d2:63:
         e5:9f:b8:d7:2a:b9:e6:df:46:c0:6e:4b:28:96:aa:29:30:97:
         0d:0b:b5:56:fe:11:e3:f4:49:2e:af:e1:0b:3e:07:ae:ad:d3:
         f2:9d:a6:35:a7:09:1c:db:29:a6:22:a7:08:aa:57:4a:8f:4f:
         c2:0c:b5:77:a3:56:d1:9d:b3:bf:83:70:0c:4f:c9:1f:2b:77:
         a1:11:bd:c6:1e:b9:a2:90:37:26:a1:f6:0a:d5:d5:2b:b6:39:
         6c:95:88:41
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPkTejXgTrlZdQfxBlHCm5ejdJTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJCQjkwRjEwOTU1N0U2OEUzNUJBM0NENkM5NDExNDU3
OEVDNEFGRDAeFw0yNDA0MDgyMDAzMzhaFw0yNTA0MDcyMDA4MzhaMDMxMTAvBgNV
BAMTKDhFMTBDNDY4OEQ0RUVDRTIwMkFDQ0Q3NTA5Mzk2Mjk0ODJEQjdFMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcBf2fixmTugxTIOKaY1P8zV5
IrH7wC+RTFQ77G+0UBvTz9YStcxXJi1cT9JiQSpNf7U064EzqT2fgMUV3kPmtBik
P9xCvGIB/UBsJeMPCt2pRCEWXeYTEWFBJCe6g3Nayji1Wnk8fg+iAeJ5i5f71Sig
tjBTySuVHCRKwwDSqcNXu3lNSwkHoRhiE0zdhMduZvfTLwxbTSpms5GQ8bUBlWqd
lQ9cZpLBaCtRbcc2vZ9y7EZhodjuvDvxWSmZf3Fefxx8z//O1bqVZMlIpCCLac3u
QHT18jc319Roi83sqwuUz2D0vSq3CzvWD9BUUYN6FAsL6kY0NTiBPZF20diNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjhDEaI1O7OICrM11CTlilILbfiowHwYDVR0j
BBgwFoAUIruQ8QlVfmjjW6PNbJQRRXjsSv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUMzQ2kyRHVDQzlLQ3FrZHoxN3FxY1dvaERlYlpQcGlBYTE1RTFNQWRu
UHYvMC8yMkJCOTBGMTA5NTU3RTY4RTM1QkEzQ0Q2Qzk0MTE0NTc4RUM0QUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQkI5MEYxMDk1NTdFNjhF
MzVCQTNDRDZDOTQxMTQ1NzhFQzRBRkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDM0NpMkR1Q0M5S0Nxa2R6MTdxcWNXb2hEZWJaUHBpQWExNUUxTUFkblB2LzAv
MzEzODM3MmUzNzMzMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMz
MzAzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu0nAMA0GCSqGSIb3DQEBCwUAA4IBAQBSDGnlQVm4
+lmXpmLL4ZxZnxItvK2dLUlUC8ApL0t+JkWlwwRqOdpv59lYaWsY9/sAsITPmH4q
6KWPH9D6U8ctnN9vHNQs3eI8ATm068W35vyfC368XCYvNcz474RHDW7wGyUWr2XH
8/2hh/tXWf6mVrBxpXQ8ssG3UdsPh4DBMdFvg53Al4Cx5sWhQdPuau+2coiethnd
TsE2eHE50dsD0mPln7jXKrnm30bAbksolqopMJcNC7VW/hHj9Ekur+ELPgeurdPy
naY1pwkc2ymmIqcIqldKj0/CDLV3o1bRnbO/g3AMT8kfK3ehEb3GHrmikDcmofYK
1dUrtjlslYhB
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:58 2024 by rpki-client on console-fra.rpki-client.org