Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32302d3230203d3e203533303534.roa
File:                     3138372e37332e3230382e302f32302d3230203d3e203533303534.roa (raw, json)
Hash identifier:          BoE2hy/a3iq50O3MipGKRU7eS+Js6sNT4hnoMYm78SA=
Subject key identifier:   34:5B:C1:7F:48:D1:64:23:C0:36:87:03:F7:32:9A:90:38:F7:9B:84
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       32A19B1D38D715E0048FB4459E86914329524645
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32302d3230203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:02 +0000
ROA not before:           Mon 09 Sep 2024 15:01:02 +0000
ROA not after:            Mon 08 Sep 2025 15:06:02 +0000
asID:                     53054
IP address blocks:        187.73.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:9b:1d:38:d7:15:e0:04:8f:b4:45:9e:86:91:43:29:52:46:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:02 2024 GMT
            Not After : Sep  8 15:06:02 2025 GMT
        Subject: CN=345BC17F48D16423C0368703F7329A9038F79B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:aa:f6:a3:9f:bf:67:d4:19:dc:e4:b1:23:
                    b4:e4:dc:5e:bc:86:46:dc:3d:d2:48:0f:b4:0a:31:
                    2c:0d:0c:96:76:a7:1f:a2:3e:99:d8:79:99:81:6b:
                    25:e7:e4:f9:11:d2:2d:6d:e9:9d:52:8b:95:9b:6f:
                    93:6f:45:75:3d:e1:87:75:94:67:17:a6:f7:7e:42:
                    f7:69:c7:8b:b9:9d:16:30:87:ef:4f:86:e5:2a:ce:
                    bc:03:d3:80:7c:0f:40:ba:b7:94:53:33:34:25:86:
                    da:32:ff:26:73:84:f4:3a:99:f5:29:c8:57:b6:37:
                    86:14:19:d9:35:8d:09:44:59:7d:27:ac:98:71:67:
                    12:a9:23:41:5c:8c:58:2a:a5:68:c7:18:31:21:66:
                    7e:df:df:49:de:62:f6:02:a1:fd:ba:a9:6c:78:e7:
                    58:40:f8:ff:b8:c1:f0:35:c3:de:f3:ed:83:f7:de:
                    3d:60:77:56:a7:d2:7b:af:82:f6:03:3a:10:57:02:
                    fa:ae:90:a6:c3:e9:56:23:75:ea:54:52:f3:26:8f:
                    60:57:92:4b:2e:1e:75:b0:7e:12:e8:8f:ad:22:5a:
                    38:42:bd:b8:ea:7a:42:d4:cc:47:2f:5b:be:fa:ef:
                    3a:04:f6:cc:9c:fc:12:fa:eb:7e:07:88:53:1e:00:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:C1:7F:48:D1:64:23:C0:36:87:03:F7:32:9A:90:38:F7:9B:84
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32302d3230203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:15:8f:fd:ca:ef:0d:f5:c0:24:0d:b5:4c:94:83:d1:99:
         b4:51:80:9a:6c:0a:fd:31:74:85:99:47:87:5f:34:7b:9a:96:
         83:74:00:3d:d7:5a:98:d4:9c:f0:af:72:1d:a0:ba:58:9c:66:
         56:1f:21:6e:91:56:21:40:83:df:9e:88:e9:f6:04:88:c5:68:
         e6:07:d1:c8:f7:eb:2c:01:8d:97:44:7e:43:7a:d9:4d:0c:7b:
         f6:18:0b:21:00:63:54:44:88:82:ad:1f:a6:27:11:55:c8:36:
         f0:2f:41:85:73:77:01:fc:05:70:e9:7b:5a:a5:18:19:48:49:
         4a:b3:ce:0c:9e:4f:3e:c9:28:25:c4:85:2a:4c:fb:b5:ed:22:
         e7:76:0b:bf:16:a3:17:79:14:c3:c5:d1:bd:ee:ca:fc:e8:13:
         09:a7:bc:13:26:e7:0f:3e:a6:43:72:cb:fa:3e:0f:65:bf:3a:
         b7:ea:2b:51:98:5a:6b:ff:ae:a8:30:6a:ac:1c:a2:8f:bb:ab:
         3d:ed:c9:2d:d3:ca:79:4e:22:d3:ad:a8:c0:48:eb:33:35:27:
         85:10:66:79:1e:2e:f8:a8:cc:6f:ab:3d:3a:0f:c7:14:f1:70:
         73:d2:b9:fc:39:54:98:f4:ca:33:c2:09:0b:e1:99:c5:fc:fd:
         18:1d:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:50 2024 by rpki-client on console-ams.rpki-client.org