Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139382e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3139382e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          20jQlzMX90tUXVbZBPMSRQyP36EVYW/GrfNzZ95fuCQ=
Subject key identifier:   23:6A:21:00:41:E3:D9:DE:D9:F3:51:50:C3:CE:75:57:EF:34:E6:32
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       0F9ABB480D6F1ABDE4C367494719A2451ACCDD54
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139382e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        187.73.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9a:bb:48:0d:6f:1a:bd:e4:c3:67:49:47:19:a2:45:1a:cc:dd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=236A210041E3D9DED9F35150C3CE7557EF34E632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:ea:f1:4e:bc:13:82:8b:04:be:d0:b1:94:
                    06:5a:e7:ef:34:91:5f:f1:a1:23:a7:0f:30:45:37:
                    17:c7:cd:17:71:82:ed:4c:82:32:8c:f3:97:ac:dd:
                    38:d0:3e:81:48:59:32:da:ec:dd:be:ce:87:a3:4c:
                    11:92:e4:68:5b:9b:28:1d:30:6f:8f:53:ab:48:cf:
                    9b:36:50:d9:62:bd:7a:2a:14:24:c4:5b:2a:82:93:
                    2e:7a:36:31:40:f2:4a:6e:7b:bd:ce:80:14:61:ed:
                    22:ea:e0:6f:22:de:b1:42:17:75:62:d1:1b:e5:90:
                    0f:4c:54:ed:91:ad:f6:be:45:30:68:1f:5b:72:63:
                    fb:ba:8d:5a:a1:92:e1:5a:83:4e:77:6b:2c:e0:95:
                    81:7d:18:fa:24:1d:36:7b:bb:11:19:80:e7:34:42:
                    f3:75:e3:56:b7:06:76:be:5c:64:44:8f:8e:b0:61:
                    4a:62:25:75:1d:7f:5b:29:1b:3e:f9:ef:fb:a8:35:
                    24:3f:82:b5:64:06:46:33:d0:ce:a8:cd:9e:78:66:
                    a8:d3:02:8a:32:3e:75:68:47:77:1d:d2:f5:95:f7:
                    86:9e:f0:b0:25:df:4d:5d:20:b8:60:7a:cc:30:13:
                    4e:2b:dd:a9:0d:46:a9:51:0c:3f:9b:fa:6b:4e:4c:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:21:00:41:E3:D9:DE:D9:F3:51:50:C3:CE:75:57:EF:34:E6:32
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139382e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:87:3d:98:8d:7c:1f:7b:37:07:f2:9b:d2:8a:cb:ae:fe:
         60:eb:21:a3:eb:bc:c1:68:99:15:44:4e:76:ba:46:1d:32:f3:
         65:88:e0:05:49:92:bc:10:4f:44:80:54:14:05:58:4d:34:6c:
         01:d5:11:58:fa:43:a8:50:39:42:7c:43:25:33:17:4e:c4:05:
         fa:f6:1a:fc:84:22:0d:46:34:2d:82:96:44:32:a2:42:87:ed:
         a3:a3:3b:92:ca:25:c1:3d:a5:4f:23:54:3f:7e:28:35:36:02:
         4a:a5:02:7e:de:40:45:b3:cf:f5:97:5d:93:77:0b:06:f2:d6:
         76:19:ec:f0:ab:0e:78:18:3a:91:c0:98:75:10:ba:c8:a4:e4:
         45:48:7d:cb:a5:ee:43:d7:3f:b8:ee:a5:3f:c6:ae:39:4e:72:
         b8:30:90:97:06:87:a7:5f:7f:09:bc:99:f6:9f:0c:6b:8f:40:
         92:a5:f7:46:33:f6:b2:22:09:ad:3e:78:7f:9c:76:7a:4b:36:
         6a:ce:20:f1:4f:dc:c3:3b:61:29:f3:23:23:7c:a5:2c:35:55:
         c2:e1:49:98:68:5d:f0:d1:62:4f:f5:dd:9d:b9:e6:45:87:53:
         00:4b:78:f4:6f:fc:05:08:aa:b0:e9:55:39:b5:37:65:e2:b2:
         04:e6:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org