Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa
File:                     3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa (raw, json)
Hash identifier:          q1DjdNr03vq3gtIeiumSp0kWWvZaHwOX0bMiVqb891s=
Subject key identifier:   5C:02:6C:56:19:E6:06:5E:34:AD:7E:96:C6:6A:65:FA:B6:8B:BB:80
Certificate issuer:       /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Certificate serial:       6F323757AD88312C2C92B71E735775C7440CD6E9
Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa
Signing time:             Thu 01 Aug 2024 17:26:46 +0000
ROA not before:           Thu 01 Aug 2024 17:21:46 +0000
ROA not after:            Thu 31 Jul 2025 17:26:46 +0000
asID:                     52662
IP address blocks:        189.113.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:32:37:57:ad:88:31:2c:2c:92:b7:1e:73:57:75:c7:44:0c:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
        Validity
            Not Before: Aug  1 17:21:46 2024 GMT
            Not After : Jul 31 17:26:46 2025 GMT
        Subject: CN=5C026C5619E6065E34AD7E96C66A65FAB68BBB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:63:be:b9:0e:c1:cc:ad:0e:7a:32:f7:88:
                    e1:2c:b1:48:a9:95:c0:ad:bb:65:07:11:d3:61:5e:
                    84:81:6b:98:1f:2a:6a:86:a5:7b:a8:40:39:d9:b5:
                    21:08:5f:bf:1a:64:b2:62:22:38:0f:e3:44:cc:97:
                    b0:90:9f:d4:75:25:f5:dc:b9:7f:c6:bd:03:06:93:
                    51:72:99:57:47:e8:f6:f1:1b:ee:fc:d3:51:cd:df:
                    b4:f1:7e:91:c8:0d:65:8c:c8:d1:41:48:95:55:3a:
                    f2:6f:7b:97:bb:1b:49:e5:20:63:a5:4c:ec:55:2b:
                    52:7b:50:27:f3:24:50:a4:12:18:f7:0a:e5:72:9f:
                    cb:f5:c9:37:0b:51:2e:ee:09:f7:7a:a3:79:a0:60:
                    c7:01:ef:5d:26:7e:34:b0:88:2c:24:14:41:d8:55:
                    8d:ff:3b:e1:1b:89:45:71:ce:52:b0:50:48:7f:ba:
                    dc:f9:70:6a:de:fd:95:ad:50:d3:22:00:22:e5:04:
                    da:02:67:56:af:38:93:6a:5e:02:2f:18:6f:fc:a3:
                    15:2d:e8:d1:5c:15:13:27:05:c1:91:7c:8c:f1:03:
                    da:29:e6:83:18:2d:55:af:18:7d:24:13:1f:7f:24:
                    b2:54:a0:bf:bd:16:e1:f3:d1:a6:94:a1:8e:8e:31:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:6C:56:19:E6:06:5E:34:AD:7E:96:C6:6A:65:FA:B6:8B:BB:80
            X509v3 Authority Key Identifier:
                keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:11:ad:fa:33:bf:a6:6f:b7:7d:2b:a8:ac:cc:01:b6:7c:
         2f:be:5d:c4:4b:2d:4e:b0:ff:a6:4b:ba:33:e5:d2:23:ce:db:
         ff:69:86:d0:2f:1c:57:54:12:29:e6:4b:22:7b:4f:15:a6:09:
         36:17:5a:8f:c4:e0:1d:c8:60:38:75:45:00:22:3c:36:35:97:
         8c:d3:fd:c2:f2:9a:61:bb:f9:96:37:c4:f7:e7:4f:e4:cf:44:
         61:0a:7b:03:be:29:91:73:d1:08:59:2e:80:98:80:1b:61:fc:
         9d:6d:f6:dc:c8:30:b2:bb:37:14:ca:6b:ec:9d:cb:3f:1d:45:
         b5:64:26:36:37:6c:d2:c0:46:1b:b8:70:03:5e:8d:2b:6a:e0:
         a9:e8:41:bf:c2:75:1c:1d:81:11:0f:78:33:a7:66:b9:ca:4f:
         96:e7:c7:fe:ab:75:93:d6:6d:e6:13:72:7b:66:c3:2b:e1:28:
         5d:f3:a8:37:46:14:5f:87:97:35:19:69:87:cf:59:13:dc:65:
         e8:a6:ca:be:b8:10:89:a2:a8:fd:ff:b5:a7:22:a8:c5:82:38:
         a6:92:73:ca:1a:20:d6:97:94:e6:0d:82:1a:f6:2d:60:25:98:
         07:da:69:8c:8e:08:25:0a:91:d0:b7:4b:b9:31:de:e2:da:a2:
         86:ab:09:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbzI3V62IMSwskrcec1d1x0QM1ukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDMjk1RTZBNTgzRUU1QUZFRDY4OEJGNjdGQjVENjJE
Q0UxNkZCNzAeFw0yNDA4MDExNzIxNDZaFw0yNTA3MzExNzI2NDZaMDMxMTAvBgNV
BAMTKDVDMDI2QzU2MTlFNjA2NUUzNEFEN0U5NkM2NkE2NUZBQjY4QkJCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdWO+uQ7BzK0OejL3iOEssUip
lcCtu2UHEdNhXoSBa5gfKmqGpXuoQDnZtSEIX78aZLJiIjgP40TMl7CQn9R1JfXc
uX/GvQMGk1FymVdH6PbxG+7801HN37TxfpHIDWWMyNFBSJVVOvJve5e7G0nlIGOl
TOxVK1J7UCfzJFCkEhj3CuVyn8v1yTcLUS7uCfd6o3mgYMcB710mfjSwiCwkFEHY
VY3/O+EbiUVxzlKwUEh/utz5cGre/ZWtUNMiACLlBNoCZ1avOJNqXgIvGG/8oxUt
6NFcFRMnBcGRfIzxA9op5oMYLVWvGH0kEx9/JLJUoL+9FuHz0aaUoY6OMc9TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXAJsVhnmBl40rX6Wxmpl+raLu4AwHwYDVR0j
BBgwFoAUxcKV5qWD7lr+1oi/Z/tdYtzhb7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DNUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1QzI5NUU2QTU4M0VFNUFG
RUQ2ODhCRjY3RkI1RDYyRENFMTZGQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9cYAwDQYJKoZIhvcNAQELBQADggEBABcaEa36
M7+mb7d9K6iszAG2fC++XcRLLU6w/6ZLujPl0iPO2/9phtAvHFdUEinmSyJ7TxWm
CTYXWo/E4B3IYDh1RQAiPDY1l4zT/cLymmG7+ZY3xPfnT+TPRGEKewO+KZFz0QhZ
LoCYgBth/J1t9tzIMLK7NxTKa+ydyz8dRbVkJjY3bNLARhu4cANejStq4KnoQb/C
dRwdgREPeDOnZrnKT5bnx/6rdZPWbeYTcntmwyvhKF3zqDdGFF+HlzUZaYfPWRPc
Zeimyr64EImiqP3/taciqMWCOKaSc8oaINaXlOYNghr2LWAlmAfaaYyOCCUKkdC3
S7kx3uLaooarCdk=
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org