Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231362e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231362e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          KeUoxD6vk6SRQNyZluPakHrgBQsSV33V0mNRpz5zxPs=
Subject key identifier:   72:5D:69:EB:05:13:B4:0F:4C:FA:33:AB:36:06:D5:66:06:D9:07:0D
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       3FED8D846EE27133F7A2F62D88A7EA7FE397DF90
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231362e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ed:8d:84:6e:e2:71:33:f7:a2:f6:2d:88:a7:ea:7f:e3:97:df:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=725D69EB0513B40F4CFA33AB3606D56606D9070D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:a2:3e:74:2a:aa:6c:09:b4:55:f8:56:2b:
                    b8:4a:20:88:23:0b:5c:33:b8:56:8a:6e:09:1c:23:
                    90:2b:aa:9d:c0:cb:2e:1b:80:e7:de:cc:25:ce:18:
                    28:56:f2:b2:22:24:12:cf:0a:34:ef:a6:3f:ea:62:
                    11:2d:0b:96:3d:2e:45:57:e9:86:54:58:5a:13:aa:
                    3f:9b:db:8e:bb:9d:cc:9b:91:28:57:b8:5d:9f:5f:
                    5c:43:29:26:47:ba:8f:ee:87:ba:cb:8a:8a:fd:17:
                    f1:d8:cf:8d:86:4e:d6:02:fa:d1:9c:a8:03:f5:0d:
                    21:70:bc:36:8b:af:73:eb:2c:2a:25:9d:55:02:ff:
                    75:ae:fb:d0:f4:4b:1e:78:57:af:28:ce:12:e9:a8:
                    03:c7:ba:2a:b7:30:fa:26:a7:00:74:aa:d4:2f:ba:
                    5e:42:35:67:74:93:d9:15:f0:f8:04:2b:30:04:cc:
                    76:e4:23:93:76:e0:5b:b4:1b:64:e8:f1:fb:a4:1d:
                    5a:2b:2c:3a:c9:11:a0:98:a5:37:27:76:93:18:02:
                    1c:7d:0a:2c:e9:04:42:8b:aa:b2:5c:72:72:73:6b:
                    ea:6f:33:49:db:81:93:61:4e:84:82:0c:4b:12:5d:
                    bc:01:12:b9:4f:69:f3:97:4f:de:c3:86:8c:2f:e6:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:69:EB:05:13:B4:0F:4C:FA:33:AB:36:06:D5:66:06:D9:07:0D
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231362e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:97:22:bb:1f:3f:c2:a5:c4:b1:a5:72:a1:f7:09:8a:d4:98:
         ae:0e:08:18:30:da:aa:9e:98:7b:6b:bd:15:40:6e:8b:04:38:
         c0:f6:17:fe:67:fe:27:45:9b:e8:de:1c:b5:72:61:1e:55:90:
         1c:66:51:43:3d:6b:e8:d4:50:2b:65:14:76:d5:9d:dc:dd:2c:
         5b:da:00:4e:c2:51:cb:5b:fc:67:4a:7b:ac:18:3b:ac:6f:94:
         8a:d2:be:59:b4:8e:45:66:db:a0:d5:f4:7b:0e:3e:66:c8:42:
         0c:88:32:61:8e:f5:84:20:dd:1a:f6:78:ab:a0:f4:23:26:af:
         8a:a8:80:4e:72:aa:e0:16:f9:d5:c4:50:2c:4f:27:58:8b:81:
         a0:6a:20:ae:4d:d3:7b:cf:88:83:3e:79:9f:bf:f2:c1:87:83:
         e9:8d:b8:d7:59:b8:52:4c:83:1d:13:ff:56:ff:8b:c4:32:70:
         a5:de:5e:46:a0:23:29:99:16:73:0b:95:40:cb:48:48:45:fd:
         18:56:13:b4:c4:ea:e4:3d:96:ee:67:e4:c5:2e:0c:19:6d:da:
         67:c8:ab:74:66:34:86:0e:16:42:4a:e6:eb:ff:f2:05:ce:03:
         6a:a6:c9:ab:4e:35:d7:40:9c:ac:f1:84:c5:03:84:90:7d:8a:
         7b:34:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org