Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230312e302f32342d3234203d3e20323730353234.roa
File:                     3138372e3130332e3230312e302f32342d3234203d3e20323730353234.roa (raw, json)
Hash identifier:          Szo5B9Th4xg3v3+NAhI5B6hNYEC4ExGPebETZdKM0L0=
Subject key identifier:   C5:E7:2B:A3:ED:42:E7:85:8C:BB:DD:02:6E:D2:61:96:DA:E1:47:8E
Certificate issuer:       /CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
Certificate serial:       161DC0D09A4083A5EEE8F2F84593965B032FA447
Authority key identifier: E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230312e302f32342d3234203d3e20323730353234.roa
Signing time:             Tue 13 Aug 2024 12:57:47 +0000
ROA not before:           Tue 13 Aug 2024 12:52:47 +0000
ROA not after:            Tue 12 Aug 2025 12:57:47 +0000
asID:                     270524
IP address blocks:        187.103.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1d:c0:d0:9a:40:83:a5:ee:e8:f2:f8:45:93:96:5b:03:2f:a4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
        Validity
            Not Before: Aug 13 12:52:47 2024 GMT
            Not After : Aug 12 12:57:47 2025 GMT
        Subject: CN=C5E72BA3ED42E7858CBBDD026ED26196DAE1478E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:45:a5:1b:74:bf:89:54:7f:f5:7c:45:88:
                    a2:00:33:86:de:b9:1a:0d:4b:28:45:cd:95:e5:28:
                    af:21:b3:18:05:c3:ec:21:75:29:27:76:e0:e4:ee:
                    b4:be:e0:84:a9:ef:8d:a2:4e:97:7c:61:b5:9f:07:
                    0c:a3:40:3a:e6:d6:f4:f5:53:4a:a9:4a:f8:50:f9:
                    1f:d8:f6:b1:3b:e7:73:de:31:49:ce:7f:91:79:b8:
                    46:0d:e2:df:45:32:82:ff:a6:0a:de:d0:87:c9:c3:
                    52:e4:29:c4:c3:aa:57:ad:98:7b:2d:11:19:97:a9:
                    13:32:6c:31:4e:18:6a:29:6a:c7:7c:af:8e:c1:f6:
                    6d:e9:c0:33:36:2e:9b:3f:af:6a:f4:1a:34:4a:a6:
                    8f:aa:69:44:08:b2:31:d7:71:1c:20:19:e1:c5:40:
                    1e:ee:75:f8:1c:75:cc:a9:2b:4f:4a:7d:f4:9c:a7:
                    ae:32:ad:03:61:7c:bf:9e:22:8d:d5:99:63:65:1b:
                    4e:cb:c4:c4:59:c0:e5:b0:b9:62:78:e6:49:d8:0e:
                    62:3f:a6:c8:c1:b8:29:40:41:fb:84:27:16:67:74:
                    69:91:2f:f5:0f:ba:c8:79:94:24:84:31:c9:33:70:
                    c1:6b:fb:1c:07:db:03:fb:bc:25:cd:30:ec:45:d0:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:2B:A3:ED:42:E7:85:8C:BB:DD:02:6E:D2:61:96:DA:E1:47:8E
            X509v3 Authority Key Identifier:
                keyid:E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230312e302f32342d3234203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:65:a0:64:07:f4:5a:95:6b:b7:61:34:9f:47:8d:e7:09:03:
         52:2c:a4:a3:70:f6:c9:41:9e:1a:f5:99:33:ae:3f:03:96:aa:
         f1:11:a7:4b:89:77:aa:f2:26:b9:27:47:1a:f1:09:d3:ab:64:
         92:d6:74:20:b1:13:b1:5a:87:30:fe:c0:8c:ff:d8:ae:c6:c0:
         eb:87:a0:9e:ac:f6:af:8c:37:04:3b:ff:31:c3:16:b0:5c:c1:
         ae:fe:a1:52:3e:43:e8:e7:06:55:dd:bd:8f:ba:97:91:2e:6e:
         b1:bb:6c:0f:cb:68:a1:89:ad:73:d8:5f:42:d9:d7:09:40:a7:
         af:50:15:7d:a8:7d:9b:fa:4c:94:cb:e6:07:48:29:fc:00:59:
         62:41:7f:51:4a:98:ea:4e:1f:a4:8c:42:bc:6d:46:4c:d4:b7:
         11:f0:1f:90:b8:d2:fb:49:42:8a:c8:96:28:ce:4a:fb:ea:ab:
         8c:a1:91:e3:bb:75:ef:6d:6b:20:ba:45:54:8b:0b:f4:e6:bb:
         2b:49:ee:6a:03:34:01:76:db:f2:fc:65:23:b7:9e:d1:01:00:
         35:d1:91:3d:78:49:c2:73:93:ae:6b:de:33:0d:59:3c:48:eb:
         a6:b7:c7:58:ae:36:82:12:af:51:ff:1a:f1:ef:05:7f:58:ee:
         f1:cf:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:02:10 2024 by rpki-client on console-fra.rpki-client.org