Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139382e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3139382e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          xWGTbf0XvBg4OUs7ihj8n9YDsH+DkcEE8WPjFKQbJ5E=
Subject key identifier:   11:6D:EA:2A:75:06:DD:A1:34:C3:A3:92:66:72:DA:43:B7:00:C9:7B
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       3890CEFA6570BF82BA44CA14F0C0E62BC77F4F2E
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139382e302f32342d3234203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        187.73.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:90:ce:fa:65:70:bf:82:ba:44:ca:14:f0:c0:e6:2b:c7:7f:4f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=116DEA2A7506DDA134C3A3926672DA43B700C97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:73:76:b5:80:03:06:e3:f6:f1:0b:8a:af:
                    93:80:15:f0:71:f9:15:a4:7d:7d:27:52:13:86:cd:
                    f9:6c:83:c4:97:bf:98:58:84:a5:50:a9:42:0e:85:
                    d6:71:ec:86:f0:68:6e:64:93:41:ba:f3:9d:a6:2c:
                    0c:19:a0:5a:74:6b:4a:cf:c8:89:17:de:73:c2:fc:
                    b0:27:9d:3b:55:01:7c:d8:73:f0:19:0a:90:ce:7b:
                    97:e3:f7:0d:35:3e:bc:fe:71:0e:e5:b9:53:ff:13:
                    68:79:90:e7:0d:3a:56:1c:f2:43:ed:e6:23:8a:e1:
                    54:12:6a:a0:3f:9e:23:5a:5c:41:ed:6b:7d:3b:77:
                    47:26:ab:76:04:38:23:ea:23:82:b5:be:15:9e:3b:
                    7b:d0:04:27:48:d7:31:30:73:97:09:f4:6d:ef:e2:
                    b3:ee:bd:6d:aa:6a:ed:6b:3b:77:8e:df:e7:62:0a:
                    9d:84:33:75:43:3c:3b:fc:d3:88:6d:99:1c:31:22:
                    37:cc:6a:40:e8:d2:f6:b9:58:6a:fb:9e:5c:95:fc:
                    b9:85:a4:cb:6f:81:f6:a7:33:24:1a:56:25:77:88:
                    69:04:d5:a8:3d:47:77:87:79:c7:1d:ed:4a:8d:6d:
                    f8:ed:e1:7a:ce:f4:8c:f3:17:f9:fc:18:44:50:dd:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6D:EA:2A:75:06:DD:A1:34:C3:A3:92:66:72:DA:43:B7:00:C9:7B
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139382e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:57:a3:ee:b3:c5:9c:2b:c6:8e:66:95:e8:93:64:a2:e8:
         8b:1c:d1:d5:22:2c:7b:c1:f6:bb:3d:7c:29:26:2d:d9:88:58:
         64:de:fc:3d:cc:a2:e1:c1:af:6f:5c:7d:97:c2:1d:f5:da:de:
         84:ae:e8:90:83:16:96:49:36:99:c4:0f:78:d8:25:f6:2f:a7:
         5e:c7:5e:34:4a:67:62:36:d2:8a:0d:07:85:d9:a4:97:e0:94:
         76:00:cd:06:f1:41:f3:26:7e:a8:2e:39:81:5a:2d:50:53:d6:
         06:16:25:30:bb:b0:0a:9d:08:41:44:4a:5f:6d:78:67:6a:9e:
         53:05:60:18:0a:aa:1b:b1:c8:4a:aa:cf:49:ab:60:d7:3d:e2:
         34:62:43:0b:5d:7d:04:cf:be:d4:54:82:b0:07:44:7d:c3:d8:
         c2:42:bc:0e:22:c0:8a:02:bd:de:d6:92:5c:84:5d:d6:e3:2e:
         64:03:24:1a:14:51:28:68:15:3f:9a:af:80:7e:ce:27:db:5b:
         13:53:4f:18:fc:27:81:40:1b:be:fe:fb:f8:bb:fb:6e:6c:58:
         26:12:ad:23:2a:a8:bb:b9:c8:b8:e8:5a:3d:e9:b7:f7:7b:54:
         73:0c:23:94:34:1a:9e:34:d5:63:84:f2:1e:c8:9d:98:fd:6a:
         70:36:42:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOJDO+mVwv4K6RMoU8MDmK8d/Ty4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEzMkUyRURERDM3RTA0NjUyRUQ0MEFDNkRCRTE4MTcz
NTg3MkQwMTAeFw0yNDExMDcyMDQ5MjFaFw0yNTExMDYyMDU0MjFaMDMxMTAvBgNV
BAMTKDExNkRFQTJBNzUwNkREQTEzNEMzQTM5MjY2NzJEQTQzQjcwMEM5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDebXN2tYADBuP28QuKr5OAFfBx
+RWkfX0nUhOGzflsg8SXv5hYhKVQqUIOhdZx7IbwaG5kk0G6852mLAwZoFp0a0rP
yIkX3nPC/LAnnTtVAXzYc/AZCpDOe5fj9w01Prz+cQ7luVP/E2h5kOcNOlYc8kPt
5iOK4VQSaqA/niNaXEHta307d0cmq3YEOCPqI4K1vhWeO3vQBCdI1zEwc5cJ9G3v
4rPuvW2qau1rO3eO3+diCp2EM3VDPDv804htmRwxIjfMakDo0va5WGr7nlyV/LmF
pMtvgfanMyQaViV3iGkE1ag9R3eHeccd7UqNbfjt4XrO9IzzF/n8GERQ3ZEXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEW3qKnUG3aE0w6OSZnLaQ7cAyXswHwYDVR0j
BBgwFoAUkTLi7d034EZS7UCsbb4YFzWHLQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUMzQ2kyRHVDQzlLQ3FrZHoxN3FxY1dvaERlYlpQcGlBYTE1RTFNQWRu
UHYvMC85MTMyRTJFREREMzdFMDQ2NTJFRDQwQUM2REJFMTgxNzM1ODcyRDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMzJFMkVEREQzN0UwNDY1
MkVENDBBQzZEQkUxODE3MzU4NzJEMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDM0NpMkR1Q0M5S0Nxa2R6MTdxcWNXb2hEZWJaUHBpQWExNUUxTUFkblB2LzAv
MzEzODM3MmUzNzMzMmUzMTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu0nGMA0GCSqGSIb3DQEBCwUAA4IBAQA0+Fej7rPF
nCvGjmaV6JNkouiLHNHVIix7wfa7PXwpJi3ZiFhk3vw9zKLhwa9vXH2Xwh312t6E
ruiQgxaWSTaZxA942CX2L6dex140SmdiNtKKDQeF2aSX4JR2AM0G8UHzJn6oLjmB
Wi1QU9YGFiUwu7AKnQhBREpfbXhnap5TBWAYCqobschKqs9Jq2DXPeI0YkMLXX0E
z77UVIKwB0R9w9jCQrwOIsCKAr3e1pJchF3W4y5kAyQaFFEoaBU/mq+Afs4n21sT
U08Y/CeBQBu+/vv4u/tubFgmEq0jKqi7uci46Fo96bf3e1RzDCOUNBqeNNVjhPIe
yJ2Y/WpwNkIc
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org