Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3139322e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          yB+ESPvgjM2mEgag5GUA+K3OrHsbGj3bbawUNYnPBxQ=
Subject key identifier:   3E:53:43:75:6D:18:CE:9A:AB:37:9E:50:8E:C1:33:42:EA:6B:0B:6E
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       74DDBF393829B31A9EC2648543A8DAAEAE79F3AB
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dd:bf:39:38:29:b3:1a:9e:c2:64:85:43:a8:da:ae:ae:79:f3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=3E5343756D18CE9AAB379E508EC13342EA6B0B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:53:6d:1e:67:fe:ca:1c:2f:9c:de:83:dc:
                    dc:a3:17:ba:73:cf:76:20:a1:af:69:37:71:0d:23:
                    72:10:34:de:f8:f5:a3:57:5c:55:6c:5e:e0:f2:8b:
                    e0:3c:aa:96:9f:7d:8a:89:64:f1:24:e6:93:63:e6:
                    67:65:5d:6d:5e:68:c3:ca:50:08:fd:4e:b4:15:ea:
                    f5:6c:63:31:f2:5c:d2:56:1f:47:f7:62:6d:01:71:
                    cd:5b:77:3b:08:7e:69:38:25:b9:15:ec:ce:3b:55:
                    7e:4d:f3:78:03:db:dc:35:6c:e0:00:2d:fb:86:f8:
                    e9:5f:95:9e:8b:b7:35:ef:40:34:91:df:13:74:e5:
                    ed:79:23:28:8f:75:58:c4:0c:df:71:46:1b:cf:1f:
                    38:24:46:3b:61:34:b2:53:88:5a:9b:a2:ac:24:58:
                    72:76:30:ef:62:e4:9b:78:4f:d5:b8:ca:f0:ff:b0:
                    21:ea:43:f2:94:72:6f:96:f6:38:9c:e4:3f:73:bc:
                    2e:34:62:ce:13:f6:32:91:2f:45:cd:d6:c1:e3:9c:
                    d6:bb:1b:c9:28:2a:c1:77:1b:e1:bb:6c:d7:c9:b5:
                    09:e8:0b:ec:73:31:18:8f:5e:aa:2b:ce:cd:7a:c1:
                    e9:6b:52:f5:1a:c7:df:0c:b8:38:bd:c2:83:b2:20:
                    26:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:53:43:75:6D:18:CE:9A:AB:37:9E:50:8E:C1:33:42:EA:6B:0B:6E
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:d7:69:7c:e0:9d:bf:72:6f:f4:ad:24:3e:0e:22:db:af:7e:
         95:9a:14:24:5d:53:c6:6d:02:70:d5:ab:44:0f:dc:84:36:3f:
         4c:d0:47:24:5f:5c:46:6c:0b:02:12:89:34:5c:40:37:8e:27:
         7b:1f:20:b3:af:24:59:b8:71:81:0d:8a:a7:68:a6:ab:f5:82:
         46:ca:0d:8c:2d:8c:d9:2c:46:46:da:23:7e:b0:dd:d3:c8:1e:
         03:24:2b:8a:5b:77:2b:18:82:58:11:53:62:bf:3e:9f:17:7e:
         95:ab:26:53:1b:f5:1d:bc:0e:41:af:7e:20:76:ca:78:e2:25:
         e9:b2:2d:21:a3:5f:7e:6e:61:e2:cd:ed:8c:06:e8:5c:ae:6f:
         1f:57:3d:cc:6f:76:75:2e:b9:8e:97:ff:7c:0c:fc:05:59:99:
         2e:72:92:7b:2c:27:e2:fc:82:9f:fb:51:13:e1:ff:33:10:7a:
         c4:12:ce:40:d8:f3:a9:15:52:9a:f6:e5:dc:8c:71:43:0b:ab:
         99:25:f1:1d:27:64:bf:76:cf:78:d0:dd:34:cd:ff:90:71:36:
         e2:48:a8:ae:f6:11:47:a3:bf:a5:3e:c0:54:46:1b:b3:b3:54:
         98:a5:6d:80:a9:9a:e1:f9:d9:a6:3a:39:1d:7f:ed:3f:ee:b7:
         c9:33:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org