Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230332e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3230332e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          LzCsz4mRubHOLeHmkyKf1Yn6pgkFHXaxrNRp4D5Cow0=
Subject key identifier:   4F:BC:72:7B:4D:3E:2D:A5:CB:B0:95:92:EC:BD:9F:97:38:C6:6A:9D
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       75A38F03147F774F726B12444F786036B05BE1D2
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230332e302f32342d3234203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a3:8f:03:14:7f:77:4f:72:6b:12:44:4f:78:60:36:b0:5b:e1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=4FBC727B4D3E2DA5CBB09592ECBD9F9738C66A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:66:dd:77:77:9e:87:68:0f:bd:dd:6f:2c:
                    af:ea:17:f8:ba:f7:7b:2a:00:7b:46:cc:b0:ce:f7:
                    a3:af:25:93:67:4c:27:4e:37:58:85:00:69:b0:83:
                    a7:84:d5:d3:cb:69:43:7c:2a:4e:46:9f:87:30:ae:
                    92:b8:48:9d:d2:49:42:83:36:0a:74:92:4d:3b:25:
                    c2:7b:2c:ac:36:ae:9c:7a:a9:b6:ce:64:1d:39:95:
                    2a:a1:6c:57:35:22:4c:21:43:0c:02:1c:dc:cb:c7:
                    d7:c4:3d:38:b6:5d:a4:75:73:25:56:4b:d7:e2:7b:
                    ae:c8:09:15:82:b0:24:2f:fa:6e:97:4f:57:8d:9a:
                    54:92:f9:8f:48:fc:78:4a:f2:8f:ca:a3:32:2a:f4:
                    a9:28:5f:56:bf:3e:08:6e:10:6f:1f:b6:d5:a9:36:
                    13:b3:a1:f6:ac:77:b8:41:d8:0b:e0:3d:65:38:b5:
                    d0:28:a7:ed:df:1d:62:51:99:33:bd:9a:fb:60:95:
                    30:af:c3:6b:62:4f:80:7d:c2:1e:ff:00:1a:a6:ba:
                    7d:23:3f:a7:53:a0:1d:36:38:4b:4a:60:33:b1:f7:
                    d6:86:12:47:af:ea:d5:d0:97:b6:0b:5a:36:8d:fa:
                    d4:86:29:47:37:50:48:5b:1d:f2:26:30:d1:f4:80:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BC:72:7B:4D:3E:2D:A5:CB:B0:95:92:EC:BD:9F:97:38:C6:6A:9D
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230332e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:84:85:01:6a:87:67:e0:1c:2d:bf:da:8c:ba:83:50:40:28:
         e2:ac:81:1d:38:e9:84:2a:ec:58:89:0a:33:5a:ca:26:a2:4b:
         81:0a:33:a0:4c:50:49:3f:9d:b1:2b:af:5e:9c:91:61:06:cd:
         b4:36:d9:a5:1a:59:03:32:96:60:0e:af:39:a7:2c:38:66:c1:
         4c:80:c6:5d:70:bc:15:9c:5e:f1:4b:10:d5:7d:0e:ca:a5:96:
         21:d6:09:73:51:00:72:8d:15:ec:d1:c9:e6:f1:04:14:c7:9f:
         02:47:e1:26:7d:79:65:57:3c:d6:45:d3:ce:3c:fc:ba:a6:18:
         61:60:9d:2f:ab:74:9e:0e:2b:cb:3e:91:59:42:a6:00:c5:7c:
         7d:ee:9c:2e:29:ba:f4:61:23:cd:d6:8a:f4:c4:88:3c:ce:3f:
         60:07:dc:21:d0:c7:23:8e:61:77:a4:9d:cf:ed:61:1c:cb:01:
         88:c4:98:a9:3f:86:0a:81:3c:86:2c:f6:f8:7c:ce:9a:46:aa:
         c0:e4:00:98:f6:e9:2c:57:65:54:e5:32:4f:39:ac:e6:60:bc:
         ee:66:4b:49:f8:9e:df:fe:5c:d6:33:3f:57:18:ef:10:a8:d7:
         38:1f:8c:64:97:6a:08:c6:ab:c0:22:aa:fa:6f:7d:4b:fb:70:
         be:f8:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org