Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231382e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          rPrQEv7caPXTpo02MPWwX3rojxopykXjOAajkEXo3nE=
Subject key identifier:   9B:37:E4:1B:31:1D:55:27:97:96:3E:A5:5D:A7:5A:E8:9D:1C:CD:26
Certificate issuer:       /CN=FECB959E21E756261292E2137CDE9CAD85492B0A
Certificate serial:       3CBC13F03FACB45A9925F6838E49FE8D2083DBBE
Authority key identifier: FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 09 Sep 2024 15:06:01 +0000
ROA not before:           Mon 09 Sep 2024 15:01:01 +0000
ROA not after:            Mon 08 Sep 2025 15:06:01 +0000
asID:                     53054
IP address blocks:        187.73.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bc:13:f0:3f:ac:b4:5a:99:25:f6:83:8e:49:fe:8d:20:83:db:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FECB959E21E756261292E2137CDE9CAD85492B0A
        Validity
            Not Before: Sep  9 15:01:01 2024 GMT
            Not After : Sep  8 15:06:01 2025 GMT
        Subject: CN=9B37E41B311D552797963EA55DA75AE89D1CCD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:3f:94:e9:a2:c5:25:b2:38:01:02:19:8d:
                    cc:02:04:a6:db:a8:d3:ad:d9:83:19:e8:03:96:57:
                    06:2e:4a:08:89:7a:64:57:aa:2a:bc:c8:c9:d5:c9:
                    ba:58:98:42:9b:67:86:ee:4d:04:67:54:74:b5:44:
                    97:01:c1:4f:dc:4b:4d:03:e1:1f:75:c1:39:3e:a1:
                    01:2f:8c:95:e4:72:16:7d:c6:54:6b:5f:5e:10:85:
                    7e:1b:86:f1:83:aa:53:1d:67:9d:f7:8e:bc:e9:06:
                    04:e8:85:49:c0:1c:77:e2:d1:e3:f0:4a:e3:fd:d8:
                    a2:bd:94:e7:39:68:71:85:9a:bf:f0:22:f0:37:f3:
                    41:57:e8:17:52:af:d7:dd:86:a9:ae:95:ee:d6:a2:
                    14:78:36:3b:91:09:23:22:23:b9:94:fc:06:01:b1:
                    17:96:83:fb:4c:fd:63:48:b4:75:eb:3a:66:1b:bb:
                    ec:40:ba:76:3c:e5:e4:44:b5:44:cf:a1:5b:56:df:
                    87:d0:3e:f1:7f:8c:d4:63:3f:cc:e0:62:e4:e1:f9:
                    40:1b:cb:f6:42:24:c9:6c:5f:14:72:7c:16:0f:8a:
                    d0:90:b9:9f:7b:81:bd:81:49:09:d5:86:a5:3a:b1:
                    d3:32:d0:5e:ac:d2:a7:b8:97:0c:c2:3e:12:ca:90:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:37:E4:1B:31:1D:55:27:97:96:3E:A5:5D:A7:5A:E8:9D:1C:CD:26
            X509v3 Authority Key Identifier:
                keyid:FE:CB:95:9E:21:E7:56:26:12:92:E2:13:7C:DE:9C:AD:85:49:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/FECB959E21E756261292E2137CDE9CAD85492B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FECB959E21E756261292E2137CDE9CAD85492B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:ba:87:f1:55:90:2a:cf:7f:a9:a7:84:b6:f2:a8:c1:6c:
         24:b9:f7:1c:5e:30:02:e1:19:23:41:90:d6:c6:ed:87:a0:19:
         2b:69:3f:7a:18:c2:21:b2:20:72:da:f8:d3:68:ff:27:7d:cc:
         5a:5c:29:1d:f9:65:d1:75:00:0d:c1:f1:83:ad:5a:5b:44:d5:
         5f:b3:04:33:95:b3:33:95:21:b9:b2:bc:34:4f:36:d2:c3:b4:
         21:93:45:57:38:2a:ce:4a:97:27:40:0d:73:ea:af:59:6b:f6:
         35:04:70:b4:80:d2:74:6c:61:3b:96:2b:80:46:84:6d:2d:2f:
         1d:52:81:92:de:b3:93:99:c5:d9:78:26:74:3a:dd:51:f1:8a:
         20:b8:0d:5e:ca:10:23:5f:ee:2c:b8:dd:2f:c0:a5:e4:9d:1a:
         32:1a:58:59:49:86:b6:56:05:6e:73:bd:f7:e0:a7:14:56:df:
         2d:d5:b7:29:d4:b1:38:48:0f:fa:3d:16:58:e9:3f:89:8f:46:
         b1:57:3d:29:1b:07:b5:ec:eb:90:de:18:19:b3:9f:bb:a8:59:
         48:d3:fd:83:c7:3e:d4:3d:56:aa:78:6e:ba:bb:b9:0e:ef:11:
         6f:e1:1f:61:cd:1e:f0:b8:3e:7b:d6:36:a4:ae:8f:73:a9:6e:
         d2:df:8e:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPLwT8D+stFqZJfaDjkn+jSCD274wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVDQjk1OUUyMUU3NTYyNjEyOTJFMjEzN0NERTlDQUQ4
NTQ5MkIwQTAeFw0yNDA5MDkxNTAxMDFaFw0yNTA5MDgxNTA2MDFaMDMxMTAvBgNV
BAMTKDlCMzdFNDFCMzExRDU1Mjc5Nzk2M0VBNTVEQTc1QUU4OUQxQ0NEMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTuz+U6aLFJbI4AQIZjcwCBKbb
qNOt2YMZ6AOWVwYuSgiJemRXqiq8yMnVybpYmEKbZ4buTQRnVHS1RJcBwU/cS00D
4R91wTk+oQEvjJXkchZ9xlRrX14QhX4bhvGDqlMdZ533jrzpBgTohUnAHHfi0ePw
SuP92KK9lOc5aHGFmr/wIvA380FX6BdSr9fdhqmule7WohR4NjuRCSMiI7mU/AYB
sReWg/tM/WNItHXrOmYbu+xAunY85eREtUTPoVtW34fQPvF/jNRjP8zgYuTh+UAb
y/ZCJMlsXxRyfBYPitCQuZ97gb2BSQnVhqU6sdMy0F6s0qe4lwzCPhLKkGbXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmzfkGzEdVSeXlj6lXada6J0czSYwHwYDVR0j
BBgwFoAU/suVniHnViYSkuITfN6crYVJKwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUMzQ2kyRHVDQzlLQ3FrZHoxN3FxY1dvaERlYlpQcGlBYTE1RTFNQWRu
UHYvMC9GRUNCOTU5RTIxRTc1NjI2MTI5MkUyMTM3Q0RFOUNBRDg1NDkyQjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFQ0I5NTlFMjFFNzU2MjYx
MjkyRTIxMzdDREU5Q0FEODU0OTJCMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDM0NpMkR1Q0M5S0Nxa2R6MTdxcWNXb2hEZWJaUHBpQWExNUUxTUFkblB2LzAv
MzEzODM3MmUzNzMzMmUzMjMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBu0naMA0GCSqGSIb3DQEBCwUAA4IBAQAGt7qH8VWQ
Ks9/qaeEtvKowWwkufccXjAC4RkjQZDWxu2HoBkraT96GMIhsiBy2vjTaP8nfcxa
XCkd+WXRdQANwfGDrVpbRNVfswQzlbMzlSG5srw0TzbSw7Qhk0VXOCrOSpcnQA1z
6q9Za/Y1BHC0gNJ0bGE7liuARoRtLS8dUoGS3rOTmcXZeCZ0Ot1R8YoguA1eyhAj
X+4suN0vwKXknRoyGlhZSYa2VgVuc7334KcUVt8t1bcp1LE4SA/6PRZY6T+Jj0ax
Vz0pGwe17OuQ3hgZs5+7qFlI0/2Dxz7UPVaqeG66u7kO7xFv4R9hzR7wuD571jak
ro9zqW7S346a
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org