Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa
File:                     3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa (raw, json)
Hash identifier:          VbTuWLqndb/yiJBb/gHFLD9ke/W/V1fXO/S3jp7jvUk=
Subject key identifier:   FE:1D:A6:E5:35:14:EF:0C:C4:47:59:F7:53:81:AF:CE:4B:69:E0:6A
Certificate issuer:       /CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
Certificate serial:       62CC0D467D5AAA8687E580D3CC233C76C2D0B060
Authority key identifier: 73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa
Signing time:             Thu 04 Apr 2024 09:06:30 +0000
ROA not before:           Thu 04 Apr 2024 09:01:30 +0000
ROA not after:            Thu 03 Apr 2025 09:06:30 +0000
asID:                     272753
IP address blocks:        187.109.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.crl
                          rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cc:0d:46:7d:5a:aa:86:87:e5:80:d3:cc:23:3c:76:c2:d0:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539
        Validity
            Not Before: Apr  4 09:01:30 2024 GMT
            Not After : Apr  3 09:06:30 2025 GMT
        Subject: CN=FE1DA6E53514EF0CC44759F75381AFCE4B69E06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:3c:6a:e7:3f:2f:c1:82:b3:73:6a:d2:dd:
                    4d:6c:14:5d:d0:20:04:1f:a6:c3:2e:16:b8:62:cd:
                    fa:23:fc:a0:a3:15:bd:aa:e9:a9:72:7f:fa:40:34:
                    27:9f:7b:01:59:60:01:7f:ee:ae:e6:e1:03:db:1f:
                    7c:f2:f4:97:d2:6f:86:d2:23:de:7c:79:5b:11:cd:
                    a1:f4:ec:12:df:97:86:8c:db:f8:8f:49:53:ed:92:
                    25:5b:c7:9c:9e:da:0e:69:bf:d7:7e:b6:56:61:ff:
                    c3:56:9f:a2:50:35:fc:64:1d:fa:25:c4:57:a0:21:
                    5f:23:13:ac:a5:d6:31:41:a5:7e:f5:50:45:ce:4d:
                    7d:91:27:86:ca:76:93:0b:ab:9c:5d:c4:9e:bd:f3:
                    e0:84:85:e2:bc:e8:ec:b4:61:b6:cf:67:7b:c3:94:
                    05:82:31:76:9d:6f:e7:c4:2d:c0:cb:d8:35:8b:29:
                    1f:a9:76:2b:41:65:d9:f6:3d:d1:2e:5b:32:01:73:
                    93:2f:05:ea:39:2a:8a:04:5d:b9:60:5a:63:9f:41:
                    73:fb:96:4a:a4:31:14:54:9a:db:b0:93:7d:54:cf:
                    ac:20:a7:0b:17:cf:ec:e2:bd:9e:56:c4:92:67:69:
                    bf:28:d9:56:6b:b5:72:62:6f:82:10:24:ef:23:41:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1D:A6:E5:35:14:EF:0C:C4:47:59:F7:53:81:AF:CE:4B:69:E0:6A
            X509v3 Authority Key Identifier:
                keyid:73:3D:0B:0F:DD:A4:5D:71:61:D5:CE:CD:C0:FB:7C:01:82:B0:E5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733D0B0FDDA45D7161D5CECDC0FB7C0182B0E539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/1/3138372e3130392e3131322e302f32322d3232203d3e20323732373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:06:29:32:62:dd:bd:50:f6:17:56:01:73:57:1b:c6:d0:7c:
         01:d2:d7:5e:d0:c6:13:a6:6a:bc:75:10:30:92:e6:4f:e6:0a:
         47:83:4b:10:c1:cf:61:9e:da:fd:a6:dd:6d:ac:3a:aa:fd:42:
         43:75:78:5c:ed:55:b3:16:a0:64:50:4b:a9:18:ae:d2:fe:66:
         3a:a1:6b:a1:be:a8:0e:26:83:cc:a2:e0:b8:18:9f:6d:50:10:
         17:90:23:29:37:2f:8c:5d:c1:5f:26:1e:b3:4f:9a:4c:3f:b9:
         61:3b:d2:05:93:dd:46:e1:0e:7c:4e:ae:05:39:af:b7:fa:53:
         82:6f:e5:d5:5e:c9:ea:0d:a1:fd:f4:af:92:2d:c2:a6:73:a5:
         7b:3d:8a:7c:fd:bb:94:7c:47:14:21:f2:c2:83:2f:03:d8:6d:
         e0:fa:dc:02:11:5b:55:8c:79:49:b2:08:b9:8e:6d:f2:a6:2c:
         32:b3:5b:a8:79:96:24:72:af:82:25:d9:ac:bf:76:3b:95:bd:
         e7:b0:39:b8:39:7a:d9:73:3c:b8:2c:0e:16:e9:84:48:07:39:
         50:4d:b6:76:87:42:63:33:86:8d:1f:02:9e:dc:db:de:88:69:
         a3:bc:8f:b0:8f:2c:73:84:69:8b:be:2b:b9:8e:fb:e1:0c:73:
         08:71:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org