Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232302e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3232302e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          JjfKgBOoY8SG1Nr1VXnRYgIbRsuQxpJbAXIH9XFzlr8=
Subject key identifier:   52:72:12:7E:E6:CB:0C:D4:36:18:FE:9E:16:26:54:14:B6:1E:49:56
Certificate issuer:       /CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
Certificate serial:       0EA3DB7F903F7D39D58E4D91ABD61E1B34D0ECDC
Authority key identifier: 22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232302e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 08 Apr 2024 20:08:37 +0000
ROA not before:           Mon 08 Apr 2024 20:03:37 +0000
ROA not after:            Mon 07 Apr 2025 20:08:37 +0000
asID:                     53054
IP address blocks:        187.73.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a3:db:7f:90:3f:7d:39:d5:8e:4d:91:ab:d6:1e:1b:34:d0:ec:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
        Validity
            Not Before: Apr  8 20:03:37 2024 GMT
            Not After : Apr  7 20:08:37 2025 GMT
        Subject: CN=5272127EE6CB0CD43618FE9E16265414B61E4956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:a6:36:f3:db:2f:a0:63:5a:07:a8:9b:d3:
                    2e:ff:96:a3:fb:6c:31:8b:8f:79:01:2a:a2:f3:93:
                    80:91:4e:d5:3f:b6:68:9a:d9:53:ae:38:b3:3d:bc:
                    60:60:2d:8d:07:12:d3:6a:e0:7a:95:bb:9b:f4:45:
                    d9:56:b1:90:54:d9:91:32:3b:78:1c:9e:74:37:d8:
                    cd:82:4a:4e:75:da:0f:fc:91:f6:7e:d1:b2:cb:82:
                    4a:97:c2:da:43:1b:ef:48:c6:ba:0e:1a:c3:c7:89:
                    bc:38:e9:13:cd:b7:93:e1:38:9f:ae:9a:7f:3b:43:
                    85:9b:ba:f9:2e:88:94:a4:0e:c6:6b:c7:ff:31:15:
                    92:a9:51:51:a4:3b:1d:1b:bb:95:9a:6e:c9:0c:e2:
                    15:3c:2a:a6:e1:9b:0c:0d:00:c8:3a:fc:b8:2c:ea:
                    1f:ef:d3:c4:5d:24:0d:3e:a3:76:e7:ee:af:c3:24:
                    1f:41:a1:f3:fe:c1:90:af:dc:99:6a:c7:e1:92:9a:
                    ff:67:37:14:2e:c9:9d:11:ee:32:50:f1:67:f1:34:
                    88:95:78:56:59:e9:ab:f8:01:c8:f7:32:b8:7c:5b:
                    a6:17:b8:0a:dc:21:e2:b4:fb:78:e8:69:aa:dc:b1:
                    a2:ff:3e:e7:95:bc:ae:6c:3e:91:e6:08:fd:41:52:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:12:7E:E6:CB:0C:D4:36:18:FE:9E:16:26:54:14:B6:1E:49:56
            X509v3 Authority Key Identifier:
                keyid:22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232302e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:45:df:94:ed:ee:a4:f9:3e:91:c1:51:ab:88:57:8e:b3:
         29:cc:d4:85:48:bd:0c:49:3e:aa:22:a1:cc:19:6d:90:68:fc:
         9f:fe:d5:8c:69:99:dc:ee:02:2a:a5:8f:a6:31:5f:06:2a:90:
         18:33:16:5d:33:7a:85:8c:c7:3c:35:dd:9f:f1:72:a2:6f:e8:
         79:d9:6a:cb:37:1b:00:cf:64:2f:71:63:12:d6:4f:78:a3:59:
         d7:42:f5:47:e9:65:49:b7:94:9b:b4:53:d0:f5:b9:22:63:d9:
         f8:a2:36:73:a8:2d:cc:b3:af:20:67:ac:c3:5f:81:63:7b:13:
         ee:cd:64:cc:d0:d6:2f:4e:76:42:a7:65:75:36:17:77:8e:b6:
         0f:ef:dd:84:cd:3a:60:66:9d:a3:6f:91:6e:e5:59:1d:1d:e4:
         7d:75:75:7a:c9:0f:72:b8:a6:fc:dd:64:de:4d:15:ae:dd:3b:
         29:07:e8:91:11:3e:a8:9f:99:82:69:53:0c:06:ec:63:ed:52:
         ac:57:52:51:df:23:06:21:9e:ba:a2:78:91:14:d3:65:7b:6e:
         87:9e:86:19:3c:49:4a:b2:e4:14:41:44:e0:07:b3:26:7b:9e:
         39:12:e7:5b:05:af:a9:ab:b0:32:64:1b:f6:10:0a:8a:93:c1:
         63:e9:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:58 2024 by rpki-client on console-fra.rpki-client.org