Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa
File:                     3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (raw, json)
Hash identifier:          e9Wnk1dipuYL7+ESiV4wX9rEj08r/iEn1Idl74okZN4=
Subject key identifier:   36:43:85:2E:CB:5C:7F:C9:7D:85:58:53:4A:22:C0:3F:17:1B:CA:C5
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       676A9ED26CF8CE4D075CB1EE572D1CFB76465251
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa
Signing time:             Wed 15 May 2024 19:12:25 +0000
ROA not before:           Wed 15 May 2024 19:07:25 +0000
ROA not after:            Wed 14 May 2025 19:12:25 +0000
asID:                     265264
IP address blocks:        187.95.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
                          rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6a:9e:d2:6c:f8:ce:4d:07:5c:b1:ee:57:2d:1c:fb:76:46:52:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: May 15 19:07:25 2024 GMT
            Not After : May 14 19:12:25 2025 GMT
        Subject: CN=3643852ECB5C7FC97D8558534A22C03F171BCAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:62:57:f8:af:98:bd:51:0b:13:22:db:d7:
                    b2:0b:cd:4c:77:69:06:eb:5a:8a:a3:0f:d5:25:fe:
                    e2:9d:9c:ff:59:ba:28:c2:94:a7:96:02:d4:54:e2:
                    49:28:1b:8d:e8:ca:bc:3b:fd:79:d9:d3:b7:68:1d:
                    e9:b3:ee:3c:5f:ce:39:bd:d8:79:78:f7:6b:54:17:
                    d0:ea:d9:dc:a0:24:d8:97:66:d3:1c:ce:48:69:0c:
                    54:34:be:10:2b:2e:69:3a:27:94:27:0f:7b:cf:67:
                    ec:d3:f9:19:c1:8f:2a:df:9e:42:27:25:b8:06:9b:
                    c3:1a:61:0f:8f:ee:ec:41:e6:33:94:3c:5a:85:51:
                    8c:38:8d:ac:f8:39:4f:19:2e:6d:ee:3e:6c:d8:8b:
                    fa:03:05:ac:c5:75:b7:67:87:3b:05:03:b8:f9:13:
                    e2:ac:c6:69:5f:ec:1a:2f:bd:46:8b:23:56:19:f4:
                    49:21:0c:5d:af:44:c6:98:75:79:c8:40:3f:0e:33:
                    92:27:f3:b3:b8:af:e8:3e:ae:18:83:c7:aa:77:f1:
                    48:bc:ae:02:25:f1:3a:24:d7:09:ee:31:7c:5d:f2:
                    59:3e:20:7d:00:1e:fb:35:4b:bf:d6:ba:80:e5:31:
                    dc:e7:6e:28:00:5b:1a:9b:1d:13:75:f8:9f:21:d2:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:43:85:2E:CB:5C:7F:C9:7D:85:58:53:4A:22:C0:3F:17:1B:CA:C5
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:56:ae:0a:26:f9:ac:f2:b8:08:20:01:2b:c3:66:c7:fb:
         bf:91:0e:2e:d5:db:9b:df:56:51:28:95:00:9c:c2:3b:44:0d:
         d4:35:1b:64:bd:f5:dd:38:c0:33:09:fc:7c:8e:58:68:4d:d4:
         31:72:25:ba:a1:5e:eb:60:9a:3f:64:f3:b5:f1:b5:c5:28:64:
         70:8b:db:9b:7a:1a:14:a2:db:19:f3:04:b2:88:a8:6a:da:ca:
         dd:29:95:4c:72:d4:10:79:8c:f6:64:8d:ae:a8:72:9f:26:78:
         d7:20:a2:bd:ad:03:aa:08:38:94:de:11:a0:f8:9f:35:cb:70:
         45:c2:99:26:e2:24:f3:d9:d7:44:84:75:a1:8d:2d:fa:5d:0a:
         e6:c8:6c:67:bc:fa:3a:14:cb:71:74:4b:d6:c2:03:2c:27:85:
         b3:30:3b:66:16:09:65:ec:fe:55:61:2e:41:48:2a:8d:4f:f0:
         da:0e:21:53:38:62:a0:c6:33:12:d6:91:53:ca:08:33:66:5b:
         00:65:2e:01:ab:7d:af:76:06:d2:18:85:aa:0e:d1:7d:f0:27:
         21:d8:3d:8f:9d:af:f7:da:a0:3b:5e:4b:cf:1a:1b:b4:77:eb:
         3b:3d:31:de:3b:26:e9:6b:55:86:02:ec:a0:b9:36:26:0a:cb:
         9d:23:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:13 2024 by rpki-client on console-ams.rpki-client.org