Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3133362e302f32312d3234203d3e20323732383531.roa
File:                     3138372e37332e3133362e302f32312d3234203d3e20323732383531.roa (raw, json)
Hash identifier:          zYzDphmm6U2+YP8ue3FaaMEii/vGG42urTeuxK2ltaQ=
Subject key identifier:   5A:1C:CD:F3:31:C2:7F:AE:01:60:71:BF:21:5C:AA:F4:84:13:11:FF
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       1D34898FD202DF1976DE37ECB8747795A55DF8FD
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3133362e302f32312d3234203d3e20323732383531.roa
Signing time:             Fri 24 May 2024 21:18:56 +0000
ROA not before:           Fri 24 May 2024 21:13:56 +0000
ROA not after:            Fri 23 May 2025 21:18:56 +0000
asID:                     272851
IP address blocks:        187.73.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 10:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:34:89:8f:d2:02:df:19:76:de:37:ec:b8:74:77:95:a5:5d:f8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: May 24 21:13:56 2024 GMT
            Not After : May 23 21:18:56 2025 GMT
        Subject: CN=5A1CCDF331C27FAE016071BF215CAAF4841311FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:fd:71:e9:96:a4:67:66:2c:29:84:99:3f:
                    0a:2a:12:49:53:e1:67:f9:67:6f:9b:ef:e0:ca:6b:
                    b7:f6:f7:27:5b:24:2b:bc:be:6d:61:8d:7d:5b:91:
                    99:86:b7:22:c2:55:01:e0:da:3a:d0:27:41:01:fb:
                    b3:38:d3:02:9a:70:99:aa:70:66:4c:39:a3:c1:9b:
                    2a:df:cf:b5:ed:46:dc:2c:4b:f5:aa:20:0d:e9:76:
                    af:cf:bb:3d:ef:0f:13:8f:01:93:70:d9:3f:3b:3d:
                    db:bd:e5:55:c4:2a:b9:12:6c:5a:ac:6d:57:7e:d7:
                    d0:a5:40:c2:1e:a5:32:f1:27:b2:a0:fd:a6:dd:7d:
                    4d:e0:7e:51:d3:9b:84:4c:2b:37:fb:6d:03:f7:04:
                    83:59:94:ce:38:05:bb:3c:2c:89:d1:a7:2d:bb:c1:
                    5e:31:99:61:4b:9f:f3:8f:7c:99:4c:40:23:ce:d2:
                    9c:62:21:9c:52:20:a5:1c:3b:2d:3f:aa:a9:0e:6c:
                    ab:d4:2b:02:0b:be:6b:b4:33:ce:15:e8:23:63:1d:
                    ca:77:d3:3b:6f:f7:0b:26:93:67:a1:a9:0c:39:6d:
                    26:5d:53:68:cb:18:0c:0c:b9:43:c6:2e:d8:17:c2:
                    09:c3:89:89:e2:ec:51:34:78:ba:73:67:83:5b:8e:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:CD:F3:31:C2:7F:AE:01:60:71:BF:21:5C:AA:F4:84:13:11:FF
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138372e37332e3133362e302f32312d3234203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:c0:3d:9a:62:83:f5:76:85:38:89:40:4e:30:c9:52:3c:
         1d:3d:fb:bf:1c:00:f9:16:b9:30:f4:41:f7:41:a6:f0:c4:33:
         99:76:58:ad:5b:57:b3:d0:a5:95:cd:12:51:77:06:21:7a:43:
         1b:38:8b:8a:c5:00:85:d9:47:66:cb:74:3e:d8:15:74:4f:05:
         49:9e:89:29:ba:ca:de:46:54:08:67:73:13:42:d2:90:97:19:
         7f:ee:d5:43:dc:9c:ef:af:e7:e5:a5:10:1f:f8:ed:a2:4a:a8:
         9c:c3:f6:aa:f7:3e:18:27:24:d8:dc:0e:d7:63:70:3c:1f:4b:
         e3:76:1b:0c:f8:a8:d9:be:25:64:06:72:79:4b:e1:4c:eb:4f:
         55:d5:ba:35:a2:45:bf:9d:ad:65:d1:d1:4b:f6:a3:de:19:35:
         92:f7:a4:89:ee:48:46:a8:e6:cd:b0:ed:27:67:e0:7c:dd:45:
         4f:3a:f7:98:7e:0f:d0:20:7c:93:af:10:68:82:d1:bb:99:a8:
         02:92:6f:4f:b1:ab:85:00:52:6b:71:ea:35:b6:a6:41:0a:94:
         a9:2a:c1:67:dd:0a:f2:b9:7d:74:48:59:05:9a:93:6f:dd:f8:
         ab:5e:c0:6f:46:a4:b2:bb:56:3d:59:32:fb:c5:82:6e:a3:73:
         7b:97:62:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:14 2024 by rpki-client on console-fra.rpki-client.org