Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230342e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3230342e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          0qL+BF0x2mK0dUO4AxDcP48FZnLGamfmdprTJirtoEQ=
Subject key identifier:   5C:A0:49:A4:5A:66:A7:1F:87:EF:75:72:0C:9C:23:1B:80:55:FD:7D
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       12F6D3F342F0E2288B435128D5EC591928FEBF9F
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230342e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        187.73.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f6:d3:f3:42:f0:e2:28:8b:43:51:28:d5:ec:59:19:28:fe:bf:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=5CA049A45A66A71F87EF75720C9C231B8055FD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:30:30:29:ae:fd:fc:a2:4c:6c:33:76:1c:
                    6f:ed:4b:33:f5:21:52:24:6d:04:cf:58:7a:a3:66:
                    96:a8:59:86:a4:3e:f2:b2:ee:8e:c4:87:3a:c9:53:
                    fc:7f:5a:80:f2:a5:30:e6:fa:02:72:99:82:a0:32:
                    5f:79:9f:b5:13:88:7f:66:3c:79:f9:24:5f:ce:35:
                    34:57:4e:ca:7b:0b:6d:e8:42:b8:3c:34:25:4d:54:
                    2c:f8:11:4e:d6:ce:05:3e:b8:46:d7:63:d3:10:b4:
                    ad:f6:ab:93:47:1f:2c:2a:a3:c7:bd:e6:21:48:99:
                    3d:f0:57:78:c6:11:d1:5a:8d:08:7a:4f:c5:96:1b:
                    ee:c6:c3:df:5e:98:aa:02:83:ca:a4:23:9e:53:69:
                    bb:67:98:2b:c8:8f:a8:dd:63:8e:02:d6:a6:73:99:
                    bb:c0:5e:94:0a:d1:93:05:44:4a:66:bd:14:1e:55:
                    58:26:da:b7:28:c1:46:00:b1:d1:20:53:4c:d5:ff:
                    7f:75:0e:cb:2b:9a:a2:d4:92:55:6f:f7:47:70:56:
                    aa:16:f7:b9:bb:e2:ef:c5:20:81:f6:21:c9:dc:4f:
                    ab:bb:51:c9:64:9d:8b:36:c4:53:a0:f1:48:0f:cb:
                    c3:5c:2f:85:5a:8f:4a:01:a6:df:36:1b:89:ed:c4:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:49:A4:5A:66:A7:1F:87:EF:75:72:0C:9C:23:1B:80:55:FD:7D
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230342e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:d9:a5:f7:69:df:a1:9d:f7:20:51:9c:66:81:4d:e2:87:
         57:1a:09:51:c5:63:16:24:8c:ae:a5:6b:a2:90:13:44:80:be:
         36:97:a8:32:19:9d:49:9e:77:1b:a6:d3:f1:52:4e:94:c7:9e:
         09:d1:5b:8b:97:9b:6c:53:c9:82:38:f4:e3:c5:5f:1f:dc:23:
         eb:9e:c3:45:09:74:cc:2b:ef:46:fd:e3:d0:5a:c1:a1:39:6d:
         a4:2a:38:94:c5:54:d0:ed:22:3d:26:69:23:33:72:80:6a:80:
         b0:c1:b8:94:2e:a4:34:be:2c:bc:e6:35:4b:b2:8e:77:d0:9a:
         df:f7:95:f9:9b:18:46:63:b5:17:09:3e:71:5c:0d:97:91:3f:
         fa:9e:65:10:6a:b4:9d:83:03:03:02:b2:fb:c3:b0:2b:83:1a:
         d8:26:cd:10:db:fe:07:f6:cc:b1:50:6e:cd:3a:83:e7:cd:c9:
         ee:e9:3a:b7:15:b4:da:58:33:57:61:0d:8e:87:1b:73:c2:33:
         22:3f:07:61:ff:a6:7c:00:dd:7f:d0:18:85:d9:a5:dc:e6:6d:
         c0:3d:f3:e5:bb:14:c9:ff:bd:e3:73:87:04:af:8a:ec:99:b0:
         df:4c:06:65:1d:a5:8c:0b:cf:cf:e8:53:6d:c3:4c:30:44:cf:
         16:77:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org