Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231302e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231302e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          VSvYvlgZLvip2bFOdgIkbBENNUH4osY7XS0MFpp67AU=
Subject key identifier:   6A:55:94:3D:9C:3B:E0:5B:D0:6A:F0:6E:73:85:CD:11:3F:87:F9:FF
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       56E910CC3179CFD25292BDB4BFBA9AC1EBAB28A6
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231302e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:21 +0000
ROA not before:           Thu 07 Nov 2024 20:49:21 +0000
ROA not after:            Thu 06 Nov 2025 20:54:21 +0000
asID:                     53054
IP address blocks:        187.73.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e9:10:cc:31:79:cf:d2:52:92:bd:b4:bf:ba:9a:c1:eb:ab:28:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:21 2024 GMT
            Not After : Nov  6 20:54:21 2025 GMT
        Subject: CN=6A55943D9C3BE05BD06AF06E7385CD113F87F9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:69:ee:8a:ad:b7:b7:11:3d:c2:fc:1d:0e:
                    65:1c:ba:d7:60:0d:57:40:13:4a:ac:ea:4c:f3:bc:
                    65:a8:c1:78:70:e1:da:a2:27:15:1f:60:b4:80:76:
                    48:d8:cc:da:c1:65:f5:f9:b6:34:85:bf:7a:c2:d2:
                    e0:f4:74:1a:2a:ca:1c:d4:72:aa:3c:ac:74:39:16:
                    23:5b:f9:0c:6f:d6:96:99:fa:92:b3:3a:9d:31:ee:
                    ad:49:af:d6:21:bd:0c:1c:c3:6f:90:b9:7c:1a:73:
                    eb:41:67:f2:b6:49:00:41:1d:4a:ed:d2:23:51:10:
                    45:0a:39:ea:75:ef:c0:43:a2:dd:5a:55:2c:fb:d9:
                    01:16:25:7a:db:ea:b9:3d:65:0a:54:75:c8:c9:fc:
                    6e:8d:13:2e:01:0d:8f:2f:d9:f0:c3:4d:0a:cc:c3:
                    59:8f:e1:ee:6b:50:b5:c9:b1:8f:23:92:a6:a6:e2:
                    a5:26:2f:4b:c5:0f:4f:a7:db:2e:92:5b:d3:fa:08:
                    ce:84:0b:37:6a:88:25:02:40:b1:de:a4:01:a3:3c:
                    05:2c:84:0b:8b:0e:08:eb:79:17:35:f3:c0:21:2c:
                    81:63:ce:37:44:df:03:ed:4b:bf:b8:1e:b0:b2:13:
                    39:d2:af:49:29:e1:e6:7d:ad:90:ce:ae:69:d5:4b:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:55:94:3D:9C:3B:E0:5B:D0:6A:F0:6E:73:85:CD:11:3F:87:F9:FF
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231302e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:d4:55:9d:5b:88:91:75:77:e7:9a:6f:63:79:1d:2f:ad:e4:
         43:eb:b3:d5:85:0d:48:d6:78:da:11:00:31:58:b1:57:ee:de:
         93:27:e6:24:94:05:69:64:72:e1:4a:e8:55:59:60:a1:04:40:
         05:3d:28:ce:82:b8:48:4a:08:70:8a:34:02:de:e4:77:e2:e7:
         25:64:ad:a6:f7:51:cf:33:19:95:a5:43:3b:7c:d3:51:c7:af:
         a9:f6:2c:89:e7:85:06:50:d7:23:a6:5e:9d:07:f4:69:67:46:
         72:cd:9d:c1:fc:af:f3:e4:b1:1d:a2:60:bc:d5:27:b5:0c:ae:
         51:15:68:fc:32:52:a7:15:d9:71:98:bc:0d:da:3f:b6:aa:b2:
         24:63:d5:2a:39:9e:84:0c:68:11:dd:74:7e:5e:92:25:d2:07:
         ca:4a:b6:00:88:a8:e4:c8:f4:a5:b3:52:6f:14:37:92:96:0b:
         f8:20:a4:de:89:3c:f7:57:5b:69:73:e6:22:97:90:a2:03:df:
         a4:e3:d3:08:2e:1a:22:3e:4b:93:8d:29:87:06:57:44:d8:67:
         71:9f:12:65:a9:47:10:49:eb:d5:78:a8:e6:59:0c:6e:2a:c3:
         ad:b2:0d:cc:13:d8:49:8a:1d:5e:66:5e:78:7b:14:f8:90:c3:
         6e:68:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org