Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139362e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3139362e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          rRvL1o2eHGIFZBXTGeQXGQnaaWlHRG+zQ3Wn01mlT4k=
Subject key identifier:   79:CB:67:95:50:A5:C1:31:3E:67:D8:D3:F7:A6:9B:9F:9C:54:2D:2F
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       6027620A957B3B966610188E145618CDDBC01733
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139362e302f32342d3234203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:01 +0000
ROA not before:           Mon 09 Sep 2024 15:01:01 +0000
ROA not after:            Mon 08 Sep 2025 15:06:01 +0000
asID:                     53054
IP address blocks:        187.73.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:27:62:0a:95:7b:3b:96:66:10:18:8e:14:56:18:cd:db:c0:17:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:01 2024 GMT
            Not After : Sep  8 15:06:01 2025 GMT
        Subject: CN=79CB679550A5C1313E67D8D3F7A69B9F9C542D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:fa:d5:8a:fc:49:15:31:dd:7e:a7:f4:0a:
                    19:7b:ad:de:12:de:f5:83:df:f6:10:95:56:b9:df:
                    d3:16:43:01:a9:37:3e:a1:5c:37:a4:d3:24:ff:58:
                    1b:6d:75:64:4b:61:f6:6f:d5:b4:83:3c:1b:de:91:
                    aa:31:5b:aa:17:8d:a3:6d:d9:32:6a:69:86:cd:66:
                    e8:ca:a4:ff:c3:49:3b:d8:a3:8a:22:fd:e8:7e:62:
                    42:75:30:01:c2:33:6f:ac:eb:a4:11:af:51:50:07:
                    0a:eb:a1:73:9e:dc:cc:45:0b:ca:b9:99:81:21:05:
                    31:2d:5a:1a:56:01:92:5e:f3:6d:9f:aa:93:63:62:
                    45:5e:a3:e3:89:b3:b0:5f:ef:87:f8:df:7e:a7:81:
                    96:fd:dc:a5:72:14:f6:59:0a:ae:de:92:21:31:92:
                    0e:dd:95:13:c7:be:53:a5:b2:47:24:0c:4b:b9:50:
                    9f:96:b9:8c:d0:6f:db:06:ea:29:8a:79:40:28:86:
                    27:c8:dd:18:2d:40:6b:4d:93:31:c3:34:c5:38:bc:
                    60:ec:fc:7d:05:31:d3:54:da:cd:6a:64:76:c5:d4:
                    23:40:d4:54:a4:c9:27:5e:c0:76:1c:73:64:eb:72:
                    41:21:9f:01:89:82:1a:51:c4:bd:f2:ff:13:3e:7c:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:67:95:50:A5:C1:31:3E:67:D8:D3:F7:A6:9B:9F:9C:54:2D:2F
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139362e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:fb:fd:54:59:be:53:8d:f6:d3:91:07:e5:eb:43:a5:7e:
         61:bc:d8:4f:d0:c6:3a:19:74:7a:27:40:c0:54:8e:6a:82:52:
         92:a2:e8:d9:a3:b2:13:22:2b:f9:a8:4f:e7:d8:4f:09:09:2a:
         fa:b5:ab:f3:b1:3d:2c:e0:32:76:e3:08:e7:2f:fc:c8:e7:3f:
         25:9c:51:b0:e3:b2:b3:6a:eb:ff:42:df:d7:6d:05:35:f9:65:
         c6:45:30:0b:9a:f8:fa:39:e4:de:f9:d4:e0:b6:d4:33:3f:13:
         66:3a:4a:b3:1a:e6:21:19:68:89:2c:c2:d0:61:27:97:9e:ba:
         54:41:6f:5c:cb:e6:c7:e0:7d:c1:d8:72:5a:ff:71:99:e0:b4:
         f2:d2:ce:ad:4a:e0:6b:52:ec:9a:46:17:61:d5:3e:d0:96:3d:
         79:d3:a0:21:fe:3e:1a:3f:07:ba:43:45:f9:e4:30:f0:db:56:
         d1:d7:36:ea:6a:33:26:aa:19:fa:74:1d:5b:ec:98:07:a2:ad:
         f4:1c:b1:f5:ad:84:c7:ff:40:c2:95:19:2f:7b:30:44:ef:74:
         6a:cc:ec:1a:60:90:64:54:88:b2:14:dc:d3:86:85:05:ce:c9:
         58:05:7e:bf:d2:09:77:a7:8b:f3:74:20:a3:11:2c:f0:80:14:
         cc:56:b1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org