Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232322e302f32342d3234203d3e20323632343933.roa
File:                     3138372e37332e3232322e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          jBIMlrXUd4Ntn2ArUDefyTsjXFutJs4LdAfQieV30Jg=
Subject key identifier:   2D:4E:B7:FE:35:2B:08:2C:07:B9:62:0B:3C:1F:77:D0:DB:D6:3A:E1
Certificate issuer:       /CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
Certificate serial:       33A3F4628E1230953DB75A57A4679189C0CB3092
Authority key identifier: 91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232322e302f32342d3234203d3e20323632343933.roa
Signing time:             Thu 07 Nov 2024 20:54:20 +0000
ROA not before:           Thu 07 Nov 2024 20:49:20 +0000
ROA not after:            Thu 06 Nov 2025 20:54:20 +0000
asID:                     262493
IP address blocks:        187.73.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl
                          rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a3:f4:62:8e:12:30:95:3d:b7:5a:57:a4:67:91:89:c0:cb:30:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9132E2EDDD37E04652ED40AC6DBE181735872D01
        Validity
            Not Before: Nov  7 20:49:20 2024 GMT
            Not After : Nov  6 20:54:20 2025 GMT
        Subject: CN=2D4EB7FE352B082C07B9620B3C1F77D0DBD63AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:08:3c:6a:22:3b:94:2e:9b:df:35:4e:32:
                    34:00:c5:17:02:cb:90:45:5f:18:d4:07:34:3c:8b:
                    68:50:8a:66:f7:b0:5b:85:f4:7b:08:ce:d9:4a:5a:
                    70:29:8f:2f:18:8c:e2:8d:46:f9:7f:71:38:33:29:
                    86:9d:73:a1:3f:12:ee:22:55:9c:e8:d6:3e:91:f3:
                    fb:1e:66:a0:5a:c0:16:ee:b0:b7:14:eb:da:4c:58:
                    25:8c:7c:b2:f2:78:b8:ac:18:d7:56:f9:ae:3e:03:
                    63:8e:f5:f7:bf:7d:bc:63:7b:d9:0e:52:b4:79:61:
                    f6:e9:3d:38:14:13:c4:c5:57:cc:0a:a0:40:2a:7f:
                    2a:8c:72:af:72:07:cd:25:b9:16:60:9c:4c:96:6e:
                    ee:71:93:e7:34:aa:ef:4d:af:0e:46:fb:f8:31:0e:
                    61:86:b6:9b:a1:84:d7:13:c6:09:4e:4f:a8:0c:7f:
                    38:03:5f:98:b7:d4:3b:24:6b:88:15:a1:f1:69:5d:
                    b6:d7:56:0f:8a:de:14:52:64:93:24:20:93:34:3b:
                    cc:21:71:4c:17:a7:0f:b3:9a:9a:e6:69:d4:14:96:
                    c7:75:e6:da:71:35:3b:60:28:ae:d8:85:67:d4:a1:
                    19:7c:56:ff:b9:4a:60:0b:00:f0:0c:73:14:18:94:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:B7:FE:35:2B:08:2C:07:B9:62:0B:3C:1F:77:D0:DB:D6:3A:E1
            X509v3 Authority Key Identifier:
                keyid:91:32:E2:ED:DD:37:E0:46:52:ED:40:AC:6D:BE:18:17:35:87:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/9132E2EDDD37E04652ED40AC6DBE181735872D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9132E2EDDD37E04652ED40AC6DBE181735872D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3232322e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:56:fc:03:7e:bc:2e:9a:70:b7:0a:1e:71:87:be:cf:af:
         ee:19:3c:b5:65:07:e3:fd:0a:9f:d2:69:f9:ad:0d:9d:be:67:
         e6:3c:4f:6c:79:1a:78:19:0e:2b:65:48:61:48:a3:f1:5f:96:
         41:67:7d:41:10:40:2e:b6:42:ac:ae:ba:ac:66:91:f7:70:95:
         70:ba:33:70:12:bd:c2:b2:cf:c6:bb:60:a8:f1:ce:7f:35:e8:
         6c:bb:ce:40:0b:91:94:2e:d3:ec:1f:77:31:ab:00:18:7d:f6:
         31:79:6e:35:6e:fd:06:77:cf:30:5d:7f:ee:17:c8:f6:0a:be:
         24:13:53:1c:52:25:39:2f:62:1d:96:c3:ab:dc:a2:76:55:87:
         17:a7:3d:10:75:47:a4:ca:f2:78:22:a7:5e:cf:a8:cf:92:d2:
         ca:13:0f:f5:c0:d6:56:3f:d7:60:f6:cc:ae:5f:16:a9:21:41:
         b0:9c:6c:a7:d8:db:2c:5a:01:51:79:98:d0:7a:84:87:37:3d:
         ef:45:80:c3:08:19:4e:07:76:d9:c8:cd:14:f2:22:bd:0a:16:
         a8:51:29:8f:ba:f7:93:44:24:18:48:78:58:56:21:ea:7f:1f:
         0e:a3:b6:53:b7:b4:bd:2b:50:39:ec:03:fd:8e:5f:fa:a4:9e:
         da:ca:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org