Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3230382e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          HBOx3DL2y0KIDOjGTXYN3empS8xTsnVLyKzd1Lx3btk=
Subject key identifier:   3D:D0:2B:EF:19:FA:62:79:F1:99:FC:1A:3D:C7:B8:6C:C8:CA:F5:0A
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       21084E6D1D938E5A4854814454725505439D4C27
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        187.73.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:08:4e:6d:1d:93:8e:5a:48:54:81:44:54:72:55:05:43:9d:4c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=3DD02BEF19FA6279F199FC1A3DC7B86CC8CAF50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:48:6b:b0:ed:dc:7b:ea:02:f8:a9:b1:3e:
                    62:a0:24:4f:1d:47:8a:a2:84:6c:77:bf:b0:fd:df:
                    09:30:75:b6:88:57:21:60:04:1b:96:d1:be:62:60:
                    6c:eb:33:61:0c:83:87:62:58:7c:ca:7d:5b:9f:a4:
                    8d:32:7d:3e:ca:88:ff:93:47:a8:97:a4:c8:cd:dc:
                    1a:31:4a:c6:e6:c5:2f:cf:da:57:81:92:d9:c5:e0:
                    4d:30:fe:88:07:46:97:98:b6:42:b8:ea:2c:f6:68:
                    28:62:fb:ac:29:dd:d8:1f:94:f6:d8:7a:59:15:33:
                    14:ac:07:87:5b:77:0a:34:31:bc:1b:b8:fd:e9:12:
                    95:4a:82:7c:10:ca:3b:18:26:bb:36:7c:ef:c2:72:
                    28:21:5e:aa:c7:c3:3f:82:35:f3:4a:bd:6c:8a:4c:
                    c4:46:6f:06:75:f8:48:20:30:8f:04:58:1c:68:82:
                    e4:26:cb:bd:61:58:51:72:2b:05:85:b2:27:72:74:
                    b4:3d:15:51:43:1f:fb:04:ae:0e:76:91:37:40:7e:
                    e5:2e:af:af:a6:d8:9e:66:6f:71:9f:28:70:98:dd:
                    7d:57:2e:0a:9f:bc:21:24:17:55:f3:96:b4:a5:39:
                    d0:5b:67:74:ad:69:e0:de:7f:96:da:d1:4c:6f:74:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D0:2B:EF:19:FA:62:79:F1:99:FC:1A:3D:C7:B8:6C:C8:CA:F5:0A
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:3a:9e:42:0a:da:f0:f4:48:3c:1e:75:da:d2:d2:41:8d:
         81:5e:ca:f8:ed:88:ef:8a:23:60:8e:bc:c8:e5:c2:0e:bf:c8:
         6a:5d:91:3b:96:76:eb:c5:84:fe:d1:61:29:d3:70:3d:68:29:
         dc:35:e3:45:a9:36:62:10:a3:86:8f:a1:8e:3e:3a:45:bb:a5:
         ea:be:c3:fc:db:3d:27:44:6a:15:40:a1:b3:33:3e:39:fb:7c:
         2c:43:d5:ff:21:dd:c2:ed:d5:78:86:0c:d9:59:e5:8a:cf:cb:
         1f:01:47:7e:4e:5b:52:fa:8c:ae:df:39:c9:27:1b:97:3e:26:
         17:f2:81:dd:11:a3:a9:73:be:9b:05:81:9d:4e:3f:09:08:3c:
         b3:e6:03:29:e7:70:81:a0:c7:6d:21:a3:3f:78:26:31:3d:f4:
         64:54:ea:5a:dd:e7:71:57:ed:be:bc:32:4b:49:47:57:b0:31:
         dc:e4:23:1f:16:3f:8b:39:42:ad:a8:43:9b:9d:53:8e:99:35:
         c1:b4:5a:5d:63:87:60:73:76:5a:21:e9:61:04:4a:14:b0:39:
         9f:9f:60:e3:64:7e:17:8d:f5:d0:8a:c9:dc:a7:bc:1c:21:67:
         c6:d5:ad:9c:b6:d3:f6:5d:c7:90:25:dd:44:18:87:d1:44:0c:
         51:21:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org