Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231382e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          9PDlggDNTNus5leTgle76yobDD3hZMHYdmEFuMi4S4Q=
Subject key identifier:   97:33:05:98:1A:E0:B2:53:50:6A:48:92:1F:54:F9:53:C5:4F:2E:AD
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       0372152F6751C54CFC4E012593BCB65BACCE03B3
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa
Signing time:             Thu 07 Nov 2024 20:54:22 +0000
ROA not before:           Thu 07 Nov 2024 20:49:22 +0000
ROA not after:            Thu 06 Nov 2025 20:54:22 +0000
asID:                     53054
IP address blocks:        187.73.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:72:15:2f:67:51:c5:4c:fc:4e:01:25:93:bc:b6:5b:ac:ce:03:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:22 2024 GMT
            Not After : Nov  6 20:54:22 2025 GMT
        Subject: CN=973305981AE0B253506A48921F54F953C54F2EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:23:fa:28:fc:0d:2a:76:37:1c:6e:2a:43:3f:
                    7f:e4:03:7c:a0:99:a4:c1:eb:72:f2:7a:10:69:3c:
                    33:a3:1d:a7:4b:ca:d2:94:e0:05:83:85:8b:dc:b8:
                    fc:1e:2c:f0:ca:f0:82:0a:68:bd:94:d4:5e:6e:e4:
                    50:7e:a8:df:f3:ef:d6:03:2f:1d:c4:f7:a0:cf:c0:
                    c2:45:64:00:11:ff:42:f2:59:b1:60:cc:22:db:c6:
                    38:84:9a:0e:08:11:dd:e1:58:b1:45:23:cc:3a:f0:
                    c7:75:14:ab:21:31:e4:eb:da:99:30:df:6c:65:cf:
                    eb:af:90:12:1f:9f:50:ed:79:1e:8a:d2:11:bb:1e:
                    b3:c8:a1:c3:f9:c9:6e:50:c8:5a:f4:c4:d2:ee:33:
                    37:24:60:2b:35:4b:96:80:46:d7:b6:ec:bf:f8:61:
                    9a:96:af:34:8c:6b:77:9a:6f:1e:9b:f1:c6:df:b1:
                    07:dd:c5:55:f6:2f:1e:00:b9:46:cc:9b:5e:61:d9:
                    f2:7a:29:e3:03:fb:1e:2b:fb:71:56:b8:50:d5:a6:
                    04:b8:d9:17:33:05:da:32:a9:c4:6a:79:f0:a4:37:
                    d4:de:9b:d1:e3:43:3e:d5:cb:4c:ac:32:96:da:55:
                    30:0a:b8:32:58:d3:7f:63:06:11:b9:c3:2d:59:f3:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:33:05:98:1A:E0:B2:53:50:6A:48:92:1F:54:F9:53:C5:4F:2E:AD
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:09:12:40:30:0a:92:1e:9c:5d:f1:f6:64:d1:9a:e0:be:
         e0:7e:e1:ee:64:e5:9b:d6:78:ad:a8:96:1c:08:3a:0d:3d:d2:
         60:ce:4e:f3:70:e7:7b:eb:15:cc:71:ac:58:73:81:c6:80:65:
         34:05:40:13:ad:fd:5b:09:18:37:ac:60:ff:e1:49:b2:12:77:
         a3:23:d6:0e:f8:80:8f:6a:2b:f8:4c:f5:cd:83:0e:06:47:c6:
         fd:cd:1a:70:f0:fe:04:8f:da:de:78:c3:23:26:55:7a:e0:42:
         39:37:48:2e:65:ee:4a:59:db:0d:24:30:70:0e:ca:23:1a:52:
         92:45:97:5f:9d:7e:72:82:c1:86:c1:4f:85:b0:39:7d:ff:7f:
         ca:ee:68:02:19:97:5b:52:54:86:52:2b:b3:40:47:56:9b:03:
         b4:f3:d6:79:55:4a:d5:fd:db:fc:d6:58:e6:56:91:af:74:7b:
         d2:fc:1d:13:25:74:73:37:8f:bb:4e:65:39:35:de:96:2a:81:
         14:82:d1:bd:15:d3:0a:b3:8f:7b:d9:da:3c:d5:7d:79:cc:67:
         e8:19:08:7b:1c:ce:eb:00:f9:5c:b6:e1:1b:f8:91:42:96:87:
         15:3f:f8:42:a8:7b:bd:18:8d:4a:b6:58:5a:b9:52:8e:80:26:
         6b:f4:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org