Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3139322e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          nai8qZMEUx8QARnEaka/r+twWpijrSmtIK0hfrBRhhc=
Subject key identifier:   2B:D0:F5:72:52:5E:49:D7:D7:D3:4F:F2:1E:47:4B:2B:8B:46:E7:2D
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       310875B314BEA038539C9FFD64186EC85596D90E
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:01 +0000
ROA not before:           Mon 09 Sep 2024 15:01:01 +0000
ROA not after:            Mon 08 Sep 2025 15:06:01 +0000
asID:                     53054
IP address blocks:        187.73.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:08:75:b3:14:be:a0:38:53:9c:9f:fd:64:18:6e:c8:55:96:d9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:01 2024 GMT
            Not After : Sep  8 15:06:01 2025 GMT
        Subject: CN=2BD0F572525E49D7D7D34FF21E474B2B8B46E72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:6e:4d:66:ed:ec:2f:30:d6:42:6a:d5:84:
                    bd:bc:21:08:d9:de:aa:dd:09:3b:0c:45:30:8a:10:
                    be:ca:4b:2c:d7:68:b2:0b:18:fe:8e:62:d0:27:9b:
                    97:6e:9d:81:84:56:22:6f:15:9c:25:05:7c:2e:c9:
                    76:20:9c:0a:f5:e8:53:7c:b1:92:27:54:f1:04:e8:
                    a1:cd:fc:9a:30:6d:13:7f:de:54:ef:97:1e:f8:0f:
                    23:53:5b:6d:a8:be:f7:87:c9:df:1a:51:f9:1b:e6:
                    ec:da:65:4e:9b:c3:2d:97:a8:e5:d5:77:40:64:bd:
                    00:de:39:2e:1e:47:b8:0e:ff:d6:70:3c:ec:78:e3:
                    6e:d9:33:21:86:ec:61:2b:13:f7:ff:08:aa:c7:1a:
                    d8:31:ea:a7:90:38:36:74:97:9c:e5:b7:02:c9:01:
                    1d:c4:4f:a0:dc:6d:d1:37:16:34:87:24:88:cb:96:
                    f7:60:d1:02:27:1b:86:06:c2:88:d5:c4:e1:e7:2f:
                    73:e2:47:58:a0:45:ba:1f:0b:69:4e:4d:7c:73:6c:
                    8c:68:74:0f:c8:91:b3:c7:29:00:80:d7:3e:cd:c5:
                    43:57:a6:72:90:16:41:d2:66:5b:fa:64:c1:11:d6:
                    3d:26:9c:d1:ac:0f:58:61:9a:42:5d:f0:d8:9f:0e:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D0:F5:72:52:5E:49:D7:D7:D3:4F:F2:1E:47:4B:2B:8B:46:E7:2D
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139322e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:d7:64:57:2e:82:c0:be:92:ca:85:5d:6a:a2:f8:1d:77:94:
         7c:24:9b:1b:ca:1e:9f:c0:40:45:a0:77:78:eb:74:81:8c:a7:
         52:96:fb:6d:63:29:9d:51:c9:c5:49:09:e6:ff:e6:71:14:3d:
         9f:ba:6f:7c:6b:dd:56:ac:e2:b8:41:47:bb:3d:25:49:ad:dd:
         42:60:8d:80:84:32:0c:3f:fb:d2:c2:1c:c0:f6:1c:19:d3:0f:
         34:47:2c:20:1e:42:5c:ee:10:f7:65:ed:60:14:2c:c9:b2:e4:
         a8:e6:48:97:0f:db:58:c5:0b:fe:73:54:b7:dc:cd:13:35:38:
         ce:bd:65:e4:b9:99:ad:73:ff:a6:c2:11:c2:f6:e2:7b:2c:60:
         ab:de:0c:74:2a:d7:f1:55:8f:b5:8f:c6:d9:3c:01:0b:60:c7:
         ae:d4:c0:f2:b7:fe:6d:64:97:ec:08:a6:ab:15:9f:35:39:49:
         13:ad:42:e4:af:c2:9c:51:4d:6c:3e:5d:47:af:91:1e:52:44:
         90:e7:dc:48:43:27:97:1b:6f:c5:96:19:4a:05:b4:9b:5a:f9:
         bf:73:ad:42:01:32:91:a0:e7:f8:ba:dc:db:da:99:fd:2f:b9:
         09:15:0e:3e:d9:d5:6a:aa:b9:61:f8:8b:e4:a7:3c:d4:81:99:
         4c:fa:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org