Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          zS5NoCzg4agc5bydfsqs7Xcytk2q7c9i9jjdnVSmEfQ=
Subject key identifier:   EF:78:63:73:DB:34:C0:34:49:00:83:37:C8:37:A3:5C:0D:0E:90:28
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       3458749ED3B1CC36382606528060EFBC2D104E60
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:18 +0000
ROA not before:           Tue 21 May 2024 20:01:18 +0000
ROA not after:            Tue 20 May 2025 20:06:18 +0000
asID:                     262687
IP address blocks:        187.87.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:58:74:9e:d3:b1:cc:36:38:26:06:52:80:60:ef:bc:2d:10:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:18 2024 GMT
            Not After : May 20 20:06:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:cc:60:4f:0f:ef:31:4f:00:53:3b:bc:c4:
                    f8:b3:21:92:b4:d0:3b:b5:d5:54:f4:d2:dc:01:07:
                    1e:32:fc:10:fb:41:87:6c:f4:2d:97:34:0b:65:73:
                    90:ab:f9:d9:31:41:70:b0:61:13:b4:90:2b:82:2d:
                    ac:0b:bb:81:fe:a3:cd:5f:ad:17:b5:e4:ba:9e:67:
                    15:a8:03:66:52:86:71:7b:1b:3a:01:27:03:93:ac:
                    ed:90:c1:4a:f5:09:82:53:69:e0:d0:90:3f:4d:0f:
                    03:85:57:35:29:0b:37:cd:05:db:49:3e:e5:5d:95:
                    3a:d5:d8:d6:13:40:8d:00:3f:cb:a9:83:bb:ce:90:
                    cd:2c:4b:20:2e:47:43:28:2d:a2:8b:47:6f:59:66:
                    27:dd:35:c2:1f:aa:b5:f5:f7:b9:d4:e8:34:ca:34:
                    e3:9e:9d:4f:c0:b5:ee:3c:5d:a3:e2:6a:d7:1b:67:
                    e1:34:6f:ec:bf:8d:70:07:cc:bf:be:0e:c0:14:bd:
                    04:c3:7b:d7:be:44:d8:64:f2:70:12:4c:b7:3e:88:
                    61:8f:fd:e9:68:c1:74:f8:cb:d8:07:06:05:f7:b1:
                    e9:79:f6:ba:c4:31:a9:fa:c9:a0:17:e4:81:f8:35:
                    74:e8:0a:12:ae:53:9f:32:5f:65:36:6c:f1:71:5a:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:63:73:DB:34:C0:34:49:00:83:37:C8:37:A3:5C:0D:0E:90:28
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c3:d9:88:2c:c7:45:44:f1:cd:8a:c4:7a:11:a1:f5:28:67:
         3b:2a:f6:6c:d3:01:5f:8c:0d:a7:70:0e:9d:65:ef:c8:e6:58:
         f3:d9:8b:17:f1:2f:df:c6:74:54:42:3a:40:a9:a9:d5:33:8a:
         5f:ca:23:3e:6b:e2:f3:cd:83:c7:1c:2f:e7:95:fd:c8:99:dc:
         47:fb:c2:8d:be:30:9c:0e:58:65:cd:7d:57:58:eb:ae:69:a1:
         6f:6b:b1:0e:88:42:a8:40:f0:60:a2:94:34:eb:35:c3:04:03:
         4f:fc:9a:c7:2e:49:06:9e:64:b3:46:70:7f:e6:ff:27:41:8a:
         b5:d4:f3:08:4e:d1:35:1a:cc:74:4d:e6:49:1c:e3:64:f7:43:
         08:07:a7:32:56:5c:cb:9a:36:95:c6:ff:cf:1b:f9:3a:1e:71:
         74:49:7c:5e:d5:cf:74:7d:d4:49:ed:f5:70:49:ab:73:70:71:
         5e:ef:ae:39:14:ea:70:52:a0:15:6f:13:94:a1:b6:dd:8f:e9:
         34:c6:84:75:ae:b2:22:c3:d6:3d:96:94:4f:af:9a:f6:a0:12:
         7c:d5:0a:61:f6:3d:92:30:3d:21:5d:4c:91:bb:a0:96:eb:1a:
         5a:5c:89:df:7b:43:7d:4f:4e:3e:7e:e6:df:f1:b7:9f:f2:a2:
         94:38:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org