Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230302e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3230302e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          5lkMqn0LseL9vxk6SZeHmiwniX//dIiHA3XGVOVHzvI=
Subject key identifier:   28:5C:F4:70:04:2B:50:3F:3B:5B:CA:44:D9:B0:38:9C:5C:6C:05:1C
Certificate issuer:       /CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
Certificate serial:       58AD60CEB2C1A5022A0EBE349170BFE1CBD4042F
Authority key identifier: 22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230302e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 08 Apr 2024 20:08:37 +0000
ROA not before:           Mon 08 Apr 2024 20:03:37 +0000
ROA not after:            Mon 07 Apr 2025 20:08:37 +0000
asID:                     53054
IP address blocks:        187.73.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ad:60:ce:b2:c1:a5:02:2a:0e:be:34:91:70:bf:e1:cb:d4:04:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
        Validity
            Not Before: Apr  8 20:03:37 2024 GMT
            Not After : Apr  7 20:08:37 2025 GMT
        Subject: CN=285CF470042B503F3B5BCA44D9B0389C5C6C051C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:b1:b8:3b:a0:89:e4:ea:16:3d:17:cd:d0:
                    65:3c:07:9e:62:ca:4f:13:0f:d8:de:95:d1:73:e0:
                    cb:9b:b6:73:05:2f:69:32:74:ba:8c:75:59:33:6d:
                    41:95:95:b9:ec:30:76:b0:5a:57:08:41:cc:bf:b5:
                    5d:a2:d8:5c:ef:8c:16:ce:53:44:53:3e:0b:0d:8f:
                    56:8d:9e:31:af:cb:57:0c:c5:22:be:40:00:af:9d:
                    6a:dc:b0:af:9e:37:74:14:be:23:c2:9d:80:47:b1:
                    dc:d1:4a:bf:b2:49:fd:ec:16:8d:26:0a:ba:b7:fe:
                    59:53:78:6e:16:3b:fc:cc:c9:4b:a2:9d:f0:53:b7:
                    b1:05:10:4b:54:44:d2:ec:8b:55:e3:33:d1:86:09:
                    23:9d:61:01:a4:3a:22:9f:ea:f7:a2:6e:5c:ce:85:
                    40:46:58:3a:6b:97:93:0a:b1:0a:c7:a4:2c:80:a6:
                    66:67:86:f6:bb:d0:5a:3a:d7:13:1f:2e:94:5c:dc:
                    c9:10:71:8f:fb:a3:d1:90:22:37:19:e1:bf:36:c9:
                    6a:fa:1b:66:72:04:ac:65:c8:cc:4b:4c:e9:82:ff:
                    87:d1:c1:c7:ea:97:d9:5b:ff:09:d4:23:42:b6:64:
                    2a:d1:c8:68:bd:6b:08:c2:81:6c:8a:24:2b:e1:1c:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5C:F4:70:04:2B:50:3F:3B:5B:CA:44:D9:B0:38:9C:5C:6C:05:1C
            X509v3 Authority Key Identifier:
                keyid:22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230302e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:50:1c:82:42:43:cf:84:9a:bd:c5:ff:06:ec:45:b6:88:
         0b:11:13:e1:35:ac:55:e2:49:13:ae:a7:29:78:42:b5:0c:2b:
         87:55:c0:58:0a:10:dd:19:eb:c6:ab:5a:ba:d4:d6:ad:f5:fd:
         9b:87:52:86:68:19:a8:4e:a0:d2:17:ac:7f:6e:e1:66:9a:a1:
         61:2f:43:06:c6:6c:54:83:87:65:ea:ee:0f:77:d1:2a:92:e9:
         83:3b:91:6f:f5:6a:6b:aa:27:e5:2b:d0:77:7b:e8:47:2b:93:
         4b:04:1e:83:9c:04:f5:49:0e:82:71:e3:2d:1a:7e:50:c0:ac:
         42:b0:ba:7f:5c:4e:61:99:fa:78:c1:b2:89:1b:be:3d:6a:9f:
         1a:bd:9b:25:5e:c3:7e:99:dd:c6:18:81:b8:72:c8:7d:48:2b:
         3b:f7:7d:b9:d0:d9:bb:2b:74:48:22:0d:b2:f5:7a:a2:81:89:
         65:2e:74:be:b5:df:10:61:b6:73:f9:80:d4:b2:a4:e9:f6:45:
         45:b2:fd:46:c4:83:94:d0:4a:fb:a9:ac:58:d4:40:12:22:9f:
         35:66:5a:cc:c2:8c:56:8d:6d:6d:59:84:48:5d:ef:ba:f1:7b:
         fc:00:97:fb:f0:e1:83:78:ac:1e:31:21:ac:cd:2b:77:fd:9e:
         12:b4:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:58 2024 by rpki-client on console-fra.rpki-client.org