Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230322e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3230322e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          nImWgi6uuRrieiozBP7tV10w1IZmeMNMf+u8dwlz0aM=
Subject key identifier:   B9:BD:62:0B:91:21:2E:63:DC:BA:4B:C6:FD:AF:33:15:84:7D:56:31
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       6C4EB26FD9163E4315F9D1256CC0F312784204F1
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230322e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:b2:6f:d9:16:3e:43:15:f9:d1:25:6c:c0:f3:12:78:42:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=B9BD620B91212E63DCBA4BC6FDAF3315847D5631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:fd:a0:6e:24:5b:b6:a3:34:71:20:a0:70:
                    cb:7c:41:08:0a:38:b3:31:4e:8e:9f:9f:f5:72:38:
                    1e:68:a2:c4:bd:a3:02:bf:f2:9c:ae:47:09:f2:84:
                    ee:c0:53:22:0e:09:e0:41:1b:1e:49:75:a3:f9:c9:
                    13:03:22:49:66:a3:2c:08:9f:ef:5c:48:9b:70:68:
                    4d:f2:68:33:cc:4b:53:29:36:43:7d:1c:56:8b:ec:
                    09:51:f4:ef:3d:a1:98:68:aa:4a:28:d6:8d:49:7b:
                    04:51:dd:a0:e6:7f:5e:e0:7f:49:23:72:00:46:b2:
                    99:97:c7:64:20:de:45:d6:17:20:8f:d9:1b:6d:f8:
                    42:78:fa:b6:37:1d:e5:c3:98:04:b5:5b:19:d3:c9:
                    6a:30:26:5e:56:b3:44:73:53:6b:9c:38:04:12:55:
                    cc:f9:e7:42:7f:d7:5e:3f:e4:e2:b4:97:17:3a:1c:
                    8e:71:64:0b:2e:12:c8:d4:e9:3c:c1:6d:44:70:3b:
                    5c:a1:19:0a:0e:0b:1c:19:da:93:b6:0e:91:e6:38:
                    45:7e:4d:15:89:ab:97:ff:a1:34:76:51:a4:69:a7:
                    e4:e3:ed:fb:1d:5c:21:ec:9d:57:32:9b:c3:ca:3f:
                    73:5b:f8:22:49:7b:73:6b:b5:c5:64:5a:67:bb:63:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:62:0B:91:21:2E:63:DC:BA:4B:C6:FD:AF:33:15:84:7D:56:31
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230322e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:63:02:85:55:35:ad:94:35:18:ce:6a:ca:c9:7b:5a:e2:a3:
         22:90:ed:c2:ad:b2:3d:58:a1:ae:be:58:79:88:df:57:87:b9:
         a6:34:77:1a:5d:6e:cb:ed:24:51:64:69:55:a2:98:fe:f9:c7:
         fc:1c:e1:91:fa:5d:d8:9f:b4:0b:14:08:74:a1:4d:3e:3c:56:
         2e:3e:84:eb:3a:0a:b7:f2:e1:cc:92:9a:13:69:b2:b9:19:af:
         4d:e3:0c:60:0b:9e:17:7f:01:de:3c:b6:87:4c:9c:8a:bd:1d:
         bd:be:0e:4f:26:1c:3f:26:f8:a4:29:3a:48:31:6a:cc:da:d9:
         39:18:c7:39:a0:6f:7e:bb:b7:fe:e5:bf:a5:f0:62:51:61:32:
         f0:72:a0:18:7e:70:c9:cd:9e:68:cb:4d:07:d4:ee:4d:05:62:
         28:e5:57:ea:ac:4d:f0:b4:77:c7:26:20:0b:1a:fe:8b:4a:57:
         f9:d3:25:29:4d:0d:ce:e5:f1:cd:46:2e:c6:c8:be:b1:e4:9f:
         8c:4e:f2:11:70:23:6e:c4:99:0a:f7:aa:cd:6d:ea:86:e1:3a:
         02:9c:92:d3:ee:01:1b:b1:55:cd:06:3b:ab:70:72:4b:66:16:
         6d:45:ac:c9:93:43:6c:ea:09:ca:5d:31:f2:59:50:2c:b8:66:
         b0:a6:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org