Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230332e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3230332e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          Ym6hAvr1kYXdNRQNuqgnjaxaVK3i3lNXTnQOdczrtgQ=
Subject key identifier:   86:21:17:83:FF:04:75:1A:49:76:75:F6:67:49:C7:1F:AE:33:9C:15
Certificate issuer:       /CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
Certificate serial:       161EB4FD37672E9E8382B142824F1ACC9E611E1C
Authority key identifier: 22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230332e302f32342d3234203d3e203533303534.roa
Signing time:             Tue 09 Apr 2024 23:38:23 +0000
ROA not before:           Tue 09 Apr 2024 23:33:23 +0000
ROA not after:            Tue 08 Apr 2025 23:38:23 +0000
asID:                     53054
IP address blocks:        187.73.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1e:b4:fd:37:67:2e:9e:83:82:b1:42:82:4f:1a:cc:9e:61:1e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
        Validity
            Not Before: Apr  9 23:33:23 2024 GMT
            Not After : Apr  8 23:38:23 2025 GMT
        Subject: CN=86211783FF04751A497675F66749C71FAE339C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:a6:7e:6f:a2:fe:79:5e:91:2c:57:10:93:
                    5b:48:7f:c1:b3:4f:f8:08:af:f1:29:18:a4:2b:50:
                    5c:ca:a5:c9:0c:6a:9c:bc:6c:9c:6b:ad:68:0b:c3:
                    e6:73:72:fc:96:c4:a0:fc:c3:00:0d:68:a7:c5:86:
                    c5:84:ab:21:48:db:54:72:c2:e1:e9:10:7e:5d:da:
                    56:22:c5:3f:48:12:c0:1d:64:42:f2:23:37:b7:38:
                    30:f3:ee:43:12:2f:25:d7:f6:5a:08:22:55:36:8b:
                    cb:7c:4b:a7:06:ab:e8:58:36:59:54:9e:7e:3e:77:
                    2a:91:3e:e3:63:59:5b:91:ed:8e:dc:1f:70:dd:75:
                    58:bd:f2:3e:c8:8d:17:c5:85:b2:39:1b:0a:c5:53:
                    3b:0d:b0:34:2a:ae:5f:ae:b2:e7:61:25:1c:54:66:
                    68:fb:f7:1c:57:79:34:6f:d8:b7:6e:64:a6:fc:87:
                    34:16:51:45:82:82:c4:7d:e9:88:1b:4d:b5:d4:17:
                    e2:70:f4:ac:ba:3c:7e:4f:f9:28:3f:e7:a4:2a:64:
                    2d:b0:87:a8:a3:e4:e8:00:4b:d1:17:54:04:a6:5c:
                    ce:09:56:78:0b:31:3f:f2:fe:36:a4:15:ad:12:eb:
                    63:be:eb:29:d3:a6:ae:64:35:67:2e:4f:0c:a9:ba:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:21:17:83:FF:04:75:1A:49:76:75:F6:67:49:C7:1F:AE:33:9C:15
            X509v3 Authority Key Identifier:
                keyid:22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230332e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:d9:71:c2:97:c2:15:e2:e1:0d:f5:f7:e3:44:ac:97:e2:
         88:3d:c3:89:6f:11:37:a9:b2:c1:fe:40:cd:01:2e:06:bf:e1:
         71:c9:e1:af:d9:f7:dc:8e:e9:d3:58:47:83:7d:e0:66:2a:64:
         8b:14:92:75:fe:2a:a8:57:ce:a8:94:a0:f2:83:8d:42:7a:cd:
         72:5a:51:2a:1b:17:a3:92:1a:f7:d9:94:d9:ba:d3:79:70:78:
         f5:b7:8e:03:58:e5:39:a7:cb:db:62:79:2f:6f:a2:30:94:a6:
         6e:b1:e6:8d:fe:3f:b5:9e:25:7b:9c:72:1f:34:d8:ea:63:e9:
         d6:ba:fb:c0:6f:b8:6a:7d:f3:68:94:28:5e:53:10:cd:2e:ba:
         66:b1:a1:13:17:1c:88:5e:c7:3c:4a:89:f7:ef:8f:de:bd:57:
         88:af:80:fb:52:d2:d7:57:95:fc:a6:6a:18:d5:3c:24:ce:63:
         20:4d:1f:9a:4b:03:3d:a6:5e:f6:54:9a:a8:18:57:29:ce:3f:
         62:fb:9a:e4:6e:19:dd:ad:d3:dc:fc:73:09:f2:6a:26:47:d0:
         0c:f0:a2:05:06:25:c4:af:f6:86:92:fa:2f:ff:4b:88:a6:db:
         6a:fe:47:51:e9:35:8d:1c:ff:a6:54:c2:8e:5a:29:88:34:35:
         b3:9b:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:46 2024 by rpki-client on console-ams.rpki-client.org