Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa
File:                     3138372e37332e302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          Qfr6W9FdBhyC2nXzCuwQxC7MxQO/grI98sK42XCeIsI=
Subject key identifier:   EA:59:93:63:C9:7C:3B:56:54:9F:F4:95:8D:FD:87:53:6A:F6:11:EA
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       735DBAA9FE90AF1771781EF17EE7788169289B7D
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:29:48 +0000
ROA not before:           Wed 10 Apr 2024 12:24:48 +0000
ROA not after:            Wed 09 Apr 2025 12:29:48 +0000
asID:                     28201
IP address blocks:        187.73.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:ba:a9:fe:90:af:17:71:78:1e:f1:7e:e7:78:81:69:28:9b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:24:48 2024 GMT
            Not After : Apr  9 12:29:48 2025 GMT
        Subject: CN=EA599363C97C3B56549FF4958DFD87536AF611EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:f1:eb:66:eb:83:f8:31:61:28:ae:80:a3:
                    9c:7f:17:ae:b9:fe:04:f6:f9:dc:1b:d9:b4:9e:15:
                    ba:9c:e6:41:92:00:44:b7:c3:66:fe:cc:9d:80:28:
                    21:a0:99:03:5a:63:ec:d8:da:5a:ce:f7:4c:99:9c:
                    82:8e:d1:16:f1:07:e9:b1:48:11:c8:5c:65:1d:02:
                    88:6b:50:c3:bf:f8:7d:64:19:2b:3b:27:9a:33:4c:
                    c2:f3:2d:f6:ca:c9:c1:ba:34:ed:47:16:22:67:ea:
                    56:71:ed:01:b2:c7:78:25:cc:71:19:b5:10:b4:1c:
                    55:85:c0:cb:f9:07:26:01:5b:d6:b0:25:d2:fd:89:
                    8c:71:44:6c:d4:71:1d:41:56:f8:05:61:f9:f4:fb:
                    2c:17:73:b7:db:98:95:88:95:67:47:43:3e:db:f3:
                    0e:f1:70:97:70:21:57:e0:2a:d2:a3:f7:10:39:bf:
                    75:47:2f:e8:91:25:b4:fb:d9:72:6f:11:9d:8d:ad:
                    ad:e6:32:7b:80:2a:55:9c:5a:a3:10:a7:47:3a:e4:
                    55:34:77:a3:3a:ae:02:d6:e2:8d:af:42:a8:64:6f:
                    74:d3:1d:4e:ec:41:37:b9:3e:83:c8:bd:48:a6:06:
                    b1:00:4c:a5:ab:ed:d5:05:80:d6:d0:1b:5a:a4:6a:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:93:63:C9:7C:3B:56:54:9F:F4:95:8D:FD:87:53:6A:F6:11:EA
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3138372e37332e302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:cd:c2:98:3e:ac:fd:56:cb:8b:c3:9c:db:07:f1:68:9b:54:
         74:ea:2c:d3:28:55:44:5e:7c:8f:53:60:96:21:fd:ff:00:50:
         12:28:b3:7d:19:30:c0:19:5d:70:c7:3c:bb:7b:41:7b:75:fb:
         d7:e6:fe:e6:d8:3b:d3:26:f1:f7:27:25:5c:83:17:44:1e:26:
         23:c1:5e:7d:71:3e:0a:46:33:8d:b2:e1:23:6d:c2:98:9a:78:
         7d:3c:77:9e:9a:9e:8b:be:34:14:3b:e9:81:40:a9:89:fb:7b:
         0a:fb:72:5d:4c:6d:8e:36:b2:77:19:82:54:1c:08:8e:2e:2f:
         97:91:d5:f7:7e:e0:00:77:5f:8d:ba:a8:da:70:37:a0:08:98:
         9f:69:17:71:00:1d:f8:7e:fc:7c:43:54:bc:96:14:41:17:bf:
         14:91:13:15:8e:df:3b:c2:d7:82:06:6d:2f:c9:c3:93:e3:c7:
         df:1c:6d:87:fb:e1:02:43:3d:e3:d1:b7:81:82:bc:d2:12:9a:
         1a:0c:a2:65:8c:4c:37:7e:4f:c9:bb:7b:1b:44:15:22:7b:15:
         a4:0f:ae:9c:86:4d:92:8e:09:ea:c2:bd:99:fd:11:54:91:59:
         cd:d5:07:c0:65:07:28:d3:7d:d8:59:8e:7c:ad:20:f5:03:45:
         d9:97:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org