Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232322e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3232322e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          3176T96Eg+LNtrjGcV1aJSWIu+1zh1BcHhSqXb4eMmo=
Subject key identifier:   3D:3A:5C:D7:0B:99:2C:10:D9:3F:B2:AC:20:73:16:E7:0E:61:EF:69
Certificate issuer:       /CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
Certificate serial:       1C6651AFADF863E9F2697097FD3757148BF2EA8A
Authority key identifier: 22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232322e302f32332d3233203d3e203533303534.roa
Signing time:             Tue 09 Apr 2024 23:11:26 +0000
ROA not before:           Tue 09 Apr 2024 23:06:26 +0000
ROA not after:            Tue 08 Apr 2025 23:11:26 +0000
asID:                     53054
IP address blocks:        187.73.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:66:51:af:ad:f8:63:e9:f2:69:70:97:fd:37:57:14:8b:f2:ea:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22BB90F109557E68E35BA3CD6C94114578EC4AFD
        Validity
            Not Before: Apr  9 23:06:26 2024 GMT
            Not After : Apr  8 23:11:26 2025 GMT
        Subject: CN=3D3A5CD70B992C10D93FB2AC207316E70E61EF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:bb:58:98:1f:5e:e6:51:ca:27:f4:ca:95:
                    f9:49:f3:01:0f:c9:26:ef:8a:0d:6a:ac:ec:75:8a:
                    b3:89:f2:ff:7a:cc:46:47:c1:6e:38:72:4d:5f:70:
                    2e:50:b9:05:74:89:0d:29:b1:1a:2f:a6:f8:d9:b5:
                    dc:49:99:6b:bc:a4:af:b3:e2:ea:90:e5:13:8e:5e:
                    e3:6f:d1:b1:72:ae:bb:48:af:5c:b6:f8:77:90:7b:
                    bb:63:48:e6:69:87:ed:e4:83:41:69:4f:55:88:8d:
                    dc:b6:24:f7:28:7c:4e:e0:5a:d3:35:28:e1:d6:18:
                    cc:3c:89:ef:8c:7f:ca:a3:58:49:80:67:80:50:10:
                    d5:72:b6:9c:9c:a7:91:86:89:e8:2b:5c:66:df:1d:
                    90:03:93:db:2a:1c:b3:4a:a4:1b:23:cb:e8:86:e1:
                    2c:e6:43:de:d8:f4:f8:94:8d:25:41:4e:51:80:90:
                    bc:be:a6:0c:2f:90:a2:34:56:4b:68:44:34:05:ec:
                    c1:14:0a:79:70:d8:c9:88:31:d6:74:e5:da:a2:ad:
                    7e:1d:03:c7:ae:8f:62:f7:33:2a:cf:83:c7:4f:28:
                    d0:db:88:76:6f:02:1a:78:b5:2b:fa:c9:5a:d5:c4:
                    ed:92:cc:b7:d9:3c:36:ec:29:e3:ab:04:c6:a4:b1:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3A:5C:D7:0B:99:2C:10:D9:3F:B2:AC:20:73:16:E7:0E:61:EF:69
            X509v3 Authority Key Identifier:
                keyid:22:BB:90:F1:09:55:7E:68:E3:5B:A3:CD:6C:94:11:45:78:EC:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/22BB90F109557E68E35BA3CD6C94114578EC4AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22BB90F109557E68E35BA3CD6C94114578EC4AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232322e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:a7:7a:fe:e0:a6:5a:bd:18:de:fa:c2:37:f6:8e:13:60:
         af:1a:e7:7b:88:2f:52:ee:82:37:bb:66:6b:cd:d4:83:f3:a4:
         56:e6:23:4f:f2:44:2b:f2:b3:f5:38:77:67:da:c2:eb:d6:62:
         d5:18:83:5b:f2:83:36:55:c5:a7:2d:12:bf:8f:6e:22:b0:07:
         64:26:7d:30:68:c9:a6:21:01:ae:d7:bb:dd:e5:95:05:d3:ad:
         09:d8:98:ef:3b:f3:f9:4c:34:4b:8e:a2:bb:8c:4e:62:52:a1:
         f7:a0:01:d4:8f:87:ec:db:bf:4b:9f:04:a9:58:d7:04:95:e2:
         db:51:15:57:3a:35:9d:29:01:c5:a3:4e:b8:f7:b4:f5:6e:f0:
         4e:ee:26:de:47:25:7c:c5:7e:90:33:f0:85:ed:97:a8:a0:ea:
         89:44:80:88:0c:10:3b:4a:cd:41:d3:21:0a:2f:46:18:d1:df:
         d6:04:e8:c2:71:cb:3d:a1:fc:b1:9b:31:08:45:08:d1:4a:dd:
         44:49:f2:65:6b:c1:b7:b6:29:d9:78:5f:f0:a5:53:06:3d:8b:
         dc:ab:ac:aa:e4:fb:46:39:48:4c:23:a8:a1:bb:b7:9e:a7:9b:
         ec:17:76:d2:fd:b7:df:e5:fe:b5:cc:14:60:07:59:21:1c:12:
         3c:08:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:58 2024 by rpki-client on console-fra.rpki-client.org