Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3132382e302f32312d3234203d3e203238353736.roa
File:                     3138372e37332e3132382e302f32312d3234203d3e203238353736.roa (raw, json)
Hash identifier:          RzU0wFAKa8czH1LE290/zMMgFRrZf0stCu8f9HADi6s=
Subject key identifier:   05:D7:74:59:A8:07:E4:BE:41:B3:D5:91:EF:54:1E:B0:F3:65:4C:86
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       54C97F743DFB7B487693F258AE863D2018EA652C
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3132382e302f32312d3234203d3e203238353736.roa
Signing time:             Fri 24 May 2024 21:17:30 +0000
ROA not before:           Fri 24 May 2024 21:12:30 +0000
ROA not after:            Fri 23 May 2025 21:17:30 +0000
asID:                     28576
IP address blocks:        187.73.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c9:7f:74:3d:fb:7b:48:76:93:f2:58:ae:86:3d:20:18:ea:65:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: May 24 21:12:30 2024 GMT
            Not After : May 23 21:17:30 2025 GMT
        Subject: CN=05D77459A807E4BE41B3D591EF541EB0F3654C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:26:b0:59:6b:d4:08:4c:7d:94:09:63:4e:
                    fe:50:8b:8e:c7:0c:af:1b:47:ab:11:51:47:c1:ee:
                    4c:9a:d3:14:eb:ee:da:87:66:bf:aa:ed:a3:9b:4b:
                    f7:0e:43:4b:78:42:bb:22:27:62:a1:0e:60:c7:28:
                    ab:a2:7b:ca:be:24:46:41:80:39:59:8c:33:75:de:
                    ec:4d:90:5c:ac:9c:07:76:1c:5a:db:a0:eb:86:c5:
                    2d:1b:dd:1f:79:8a:59:fe:12:05:41:c9:ee:95:5b:
                    a9:60:0c:27:78:82:9b:e1:16:6f:7b:c0:ef:c1:3a:
                    12:dd:70:6d:32:aa:a6:12:de:45:69:91:d6:37:1b:
                    1b:ad:35:19:81:80:db:8c:33:ec:87:67:e6:fa:b4:
                    58:27:8e:79:76:b2:89:76:95:d6:2d:b7:5a:1d:0f:
                    8f:de:d1:9b:25:22:e7:72:01:6d:b9:8d:ba:79:4f:
                    3d:ce:e1:bf:6b:d1:6f:1c:3e:ec:75:a9:cf:50:51:
                    15:60:3c:9b:1b:7d:8a:79:f0:d2:df:83:94:d4:40:
                    58:5d:04:a5:b3:be:cb:be:f2:de:fb:c3:02:40:66:
                    0f:d8:3b:e1:69:cb:2a:69:7c:35:0b:c8:5d:54:77:
                    15:c1:9d:cb:f1:fd:83:8c:18:88:e8:39:8b:6f:3d:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D7:74:59:A8:07:E4:BE:41:B3:D5:91:EF:54:1E:B0:F3:65:4C:86
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3132382e302f32312d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:f4:51:81:77:26:98:a8:48:2a:8a:08:7d:d5:07:90:3c:49:
         ab:c1:30:63:d0:a4:99:cb:46:8e:80:55:21:ae:3a:77:81:17:
         47:08:9e:88:4d:ca:c5:42:75:46:37:65:f2:2e:cd:14:f7:ce:
         5a:bf:6c:fe:95:14:fa:5a:c7:7e:86:04:59:c6:89:7b:71:47:
         79:37:2d:d2:d1:55:c2:e3:0a:21:05:23:5e:01:37:ef:0a:20:
         6b:02:de:1e:bb:cd:32:8b:e7:e2:a8:5f:9e:64:ca:54:f1:89:
         40:9e:2c:ef:48:49:47:be:d0:46:35:e7:d8:76:64:51:41:9b:
         2d:13:ef:0a:82:f9:ee:20:3f:f1:23:a7:7d:c7:4f:1f:9c:c8:
         a0:8e:70:37:ed:93:5d:23:13:30:97:2f:9c:45:26:16:22:8c:
         40:ef:91:e8:d7:2a:df:2e:57:f1:5c:1f:ce:64:2d:31:48:19:
         ea:43:c1:cd:4b:f0:89:25:6e:0b:fd:32:c9:b9:15:87:51:57:
         30:98:72:ed:f6:22:a1:a8:46:97:fe:e3:a9:8d:71:7e:d6:14:
         46:57:08:fd:28:79:e0:d4:56:a6:12:41:be:79:32:cf:b7:ef:
         c3:a2:c2:25:ef:6f:3a:11:9f:bc:a0:c8:5d:a2:a4:cf:9a:1c:
         d3:db:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:38 2024 by rpki-client on console-fra.rpki-client.org