Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139392e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3139392e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          XquY8OznD2Mykfncyj6MtY0k4GkyUTQsDx5HBPo6Ifc=
Subject key identifier:   38:8E:5F:06:46:3D:16:42:A6:BE:2D:1E:A6:B9:AB:7D:90:FF:89:23
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       73B6A5D01232A8CA519BEDD38B119754DA056D6D
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139392e302f32342d3234203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b6:a5:d0:12:32:a8:ca:51:9b:ed:d3:8b:11:97:54:da:05:6d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=388E5F06463D1642A6BE2D1EA6B9AB7D90FF8923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:c4:98:57:65:91:5b:a6:90:5c:5a:44:64:
                    ef:c4:d6:ec:a3:dd:1f:5c:d1:6c:4a:f9:94:5d:70:
                    0e:77:13:3e:9b:1a:ef:91:30:5e:87:fc:15:96:fe:
                    87:3a:cf:c0:28:af:a7:68:e0:23:0d:20:0a:f1:b6:
                    91:03:7f:66:ad:73:41:0c:ab:43:55:c2:b1:ec:10:
                    1b:77:f2:6c:fa:2b:23:69:ca:b8:d2:a2:94:56:a0:
                    76:01:96:ab:d8:89:76:df:63:3b:07:31:d5:69:d7:
                    98:a0:b4:ec:4f:c4:1b:18:65:23:50:46:ec:2a:5a:
                    ce:66:07:e8:bd:cd:35:e5:ae:d3:8f:b9:ed:46:d6:
                    b1:7e:d8:63:4e:2b:85:d8:76:af:c1:95:78:09:c0:
                    e1:c4:84:7d:93:d8:ff:32:a1:b5:b3:0b:fc:3e:d8:
                    24:ee:c8:0a:e2:6f:74:a0:6d:a9:7b:8a:10:ff:4c:
                    27:3d:4c:f1:73:1f:aa:6d:a9:73:d6:02:93:79:0b:
                    d7:d5:77:fd:2e:dc:7d:df:04:92:1f:01:8d:aa:7f:
                    e6:31:ca:0b:ea:98:3b:93:dd:f4:34:d9:d7:fa:ea:
                    7a:43:f4:16:92:af:78:b4:30:ea:19:5f:34:63:29:
                    f1:ed:35:dc:93:79:7c:5d:5b:8c:4c:84:01:62:a5:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:5F:06:46:3D:16:42:A6:BE:2D:1E:A6:B9:AB:7D:90:FF:89:23
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3139392e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b7:cb:14:9c:c5:17:22:73:8f:a1:fc:d0:3b:01:31:f4:49:
         3f:61:e5:c2:e5:da:0c:8f:f8:8e:56:f4:08:60:02:4d:c1:fe:
         13:eb:99:fd:35:a8:8a:6a:95:ba:7d:9b:15:7a:68:37:f5:ab:
         5e:0f:07:df:e7:f9:8a:6b:e2:c3:98:16:ba:ef:e6:63:9b:e3:
         60:50:78:0c:0a:40:e4:38:d2:c8:b3:c8:df:39:bb:b6:5b:ed:
         9e:2b:f9:19:a0:73:88:a4:43:80:fe:fe:59:49:ac:a6:f4:fb:
         ad:99:ad:98:aa:f4:e5:02:b3:39:b4:40:4d:22:ab:1f:04:12:
         d4:6f:1f:3a:46:fa:2f:70:a2:b5:ad:ba:ca:f9:db:e6:ab:1e:
         39:0f:ee:07:15:67:4a:62:7e:ef:a9:dc:f7:63:b1:9a:70:b2:
         ec:fe:82:33:61:f7:0e:0c:48:98:f9:35:3c:f5:a4:10:fe:40:
         5c:a6:0d:40:80:dc:0d:37:84:31:66:27:11:6c:26:da:70:90:
         5d:5e:08:98:a8:15:1c:32:4d:92:d9:35:db:5e:97:40:e7:38:
         84:15:a5:c5:46:18:e7:cf:f0:0a:91:69:65:3d:f1:5a:f4:32:
         3b:30:3d:d4:3e:53:ed:41:bf:f2:f8:61:5a:7a:08:7d:c7:63:
         31:ac:d3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org