Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139362e302f32322d3232203d3e203533303534.roa
File:                     3138372e37332e3139362e302f32322d3232203d3e203533303534.roa (raw, json)
Hash identifier:          cJKDg4SPoNRSxVukH7XmHF9edqrRzBrC9MEPq6aLkaY=
Subject key identifier:   7D:2F:92:EB:B0:89:A4:8F:80:86:93:5B:D4:9E:15:5D:FA:B7:92:9A
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       42C222EB8A3351272B913477B6BEE14E28300837
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139362e302f32322d3232203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c2:22:eb:8a:33:51:27:2b:91:34:77:b6:be:e1:4e:28:30:08:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=7D2F92EBB089A48F8086935BD49E155DFAB7929A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:ac:a7:20:63:75:76:cf:07:db:98:6a:ca:
                    9a:81:4c:21:1c:5a:49:bf:4b:67:16:ee:cc:94:0e:
                    41:fc:9d:42:f4:9d:3e:e0:07:6b:a2:94:47:9c:60:
                    9a:5f:bb:e9:fb:b2:ad:b1:79:72:82:18:3b:56:ba:
                    27:76:aa:09:d7:71:c3:e3:a8:8e:57:1d:9d:b0:20:
                    7c:a0:9e:88:1f:d2:56:71:72:67:e9:9e:20:fc:28:
                    9c:3e:8b:2b:d9:e6:d2:b7:36:a7:3e:72:8a:08:5d:
                    fa:ef:eb:5e:2e:64:46:63:fc:18:42:eb:1d:0b:47:
                    86:82:81:c4:08:3d:d7:a3:35:ac:00:cf:e2:6b:46:
                    1e:5b:c3:65:cc:4d:d2:90:56:59:70:76:d5:79:86:
                    2e:13:13:ea:72:12:0b:79:f3:69:92:2a:7e:34:05:
                    5a:ef:38:ba:31:d2:47:f1:76:93:51:f5:d6:00:25:
                    57:ff:be:20:a3:23:26:84:cf:c4:86:68:87:6c:6d:
                    22:8b:5b:fe:4c:a2:79:03:97:11:d7:64:07:99:ab:
                    08:a7:13:56:04:14:81:77:f5:3a:7b:aa:4f:47:10:
                    6d:9b:2f:70:8a:ec:61:df:34:4a:28:3f:b0:c9:3a:
                    ea:8e:c1:78:b3:3e:d6:6a:27:58:b8:02:8d:be:7c:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:92:EB:B0:89:A4:8F:80:86:93:5B:D4:9E:15:5D:FA:B7:92:9A
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139362e302f32322d3232203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:04:8e:c1:d7:a4:03:0b:68:d5:dc:26:fa:45:f4:5c:66:
         ea:53:53:67:58:3c:d9:4d:c1:5d:bb:e3:32:36:3f:02:22:35:
         d6:fb:80:06:46:69:6d:ba:20:2d:11:31:97:4c:b3:45:d1:5f:
         b2:b4:fc:7b:f9:f2:e4:a8:a7:1c:59:43:42:47:5d:56:e2:9e:
         49:32:af:2c:39:5c:c9:b8:98:d5:39:f5:52:00:49:49:e9:ac:
         0f:22:ea:1f:7a:94:5b:18:a6:ad:cf:bf:1e:65:2e:a4:4a:28:
         d1:e4:a3:b2:17:49:36:f6:56:b0:12:9d:e9:3a:59:a4:68:fc:
         44:c4:84:de:a1:2c:c0:4c:71:c6:83:c4:dd:87:c0:73:d2:88:
         6a:03:b4:76:e0:af:2c:1c:90:f3:4e:44:a4:82:37:82:76:bb:
         bb:23:30:03:d4:5a:0a:89:b5:77:d3:a3:b8:4e:cb:9d:ca:80:
         3d:a8:f2:72:d7:56:3d:e4:1e:77:3a:00:ef:55:b8:65:66:2e:
         1f:49:03:3f:78:31:bb:02:d4:83:d0:1f:8d:44:61:c7:06:07:
         25:1f:d0:93:e4:f9:63:02:d7:1a:33:53:22:66:5a:b5:95:60:
         81:f7:84:48:07:25:99:df:d5:1a:ab:c2:ec:d0:22:53:50:e6:
         b4:fa:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org