Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          Pl73dn0fCQfM5QWPG+TWlCPMTz2KS/sNBFG9e9NHLus=
Subject key identifier:   3E:DB:A3:4F:74:90:5A:BF:F3:6A:B3:0E:D1:6E:2A:A9:4C:83:C7:13
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       195303F767BE99381485BA8B3083CB8C83D2E9BE
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:18 +0000
ROA not before:           Tue 21 May 2024 20:01:18 +0000
ROA not after:            Tue 20 May 2025 20:06:18 +0000
asID:                     262687
IP address blocks:        187.87.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:03:f7:67:be:99:38:14:85:ba:8b:30:83:cb:8c:83:d2:e9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:18 2024 GMT
            Not After : May 20 20:06:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:d6:63:69:6e:6e:f4:1c:87:89:25:a1:c5:
                    27:0a:aa:a6:24:5e:a6:12:1a:d4:04:1e:16:d7:97:
                    df:79:ec:fe:34:22:4e:3b:13:58:a6:be:1d:e1:55:
                    b3:aa:19:19:be:84:67:fc:7a:2b:94:51:5f:d6:11:
                    a7:03:ea:92:8e:dd:cc:4e:8e:00:24:47:76:71:15:
                    81:98:aa:92:2f:6d:ab:8a:07:90:ed:b8:1c:50:3b:
                    19:0d:57:0a:7b:73:72:3a:63:9b:b6:0b:da:fa:98:
                    76:16:17:65:65:bc:33:0d:6e:31:1d:70:da:50:66:
                    25:99:24:68:d0:91:ed:7c:8a:b9:1f:af:2a:9f:ee:
                    89:1e:f1:c9:fc:63:4e:7c:6e:1a:47:d4:99:53:f9:
                    71:e5:27:f0:db:4a:9a:76:6b:99:59:33:17:29:60:
                    91:e6:4f:f6:35:1a:02:46:a2:93:0d:8d:68:48:8c:
                    27:82:35:bd:b4:d0:bb:ed:2c:79:d0:d4:c7:27:d3:
                    b3:9d:bd:55:ba:ad:4b:9a:d8:f7:0f:df:92:c8:c0:
                    be:fd:de:9c:cd:0d:88:71:51:62:79:96:d2:f0:53:
                    e4:0f:9d:bd:94:a1:f2:28:10:19:31:0a:7b:55:1f:
                    61:33:39:1a:4a:bd:7f:54:c4:ff:d5:67:b5:1d:d0:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:A3:4F:74:90:5A:BF:F3:6A:B3:0E:D1:6E:2A:A9:4C:83:C7:13
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:1f:75:f3:1f:2f:e2:f0:d7:8d:f4:d2:f5:47:74:13:45:97:
         60:a6:41:01:48:d7:51:81:70:eb:0f:42:0f:f0:c0:e3:21:f3:
         aa:d5:22:84:47:c0:31:67:82:e6:ab:d3:d0:aa:7d:01:cf:dc:
         25:f9:2c:68:ad:d1:30:e9:ea:c5:ac:0e:ff:68:f4:ad:ef:8c:
         b8:7b:63:0f:d3:f4:6b:1c:29:bd:90:99:91:cc:30:d3:f1:b6:
         b5:c2:1a:98:22:35:16:fd:df:a8:7c:94:81:05:a0:5a:70:72:
         35:99:82:f0:95:46:55:46:3c:63:0c:87:87:14:bd:93:9c:8c:
         5d:d3:b9:08:78:57:8d:c7:88:b3:63:bc:d9:e2:52:94:31:a2:
         b4:69:0b:56:2f:f4:75:9d:73:ba:58:c7:87:84:4b:44:48:33:
         89:ec:c9:d0:8a:af:01:8b:ca:cb:e8:9a:a3:01:1b:9a:20:ca:
         8e:03:94:da:71:f3:07:46:12:93:61:f0:8a:75:d8:3f:e1:2d:
         06:29:05:08:6b:ec:bb:0e:de:83:e6:bb:a9:30:9b:00:6b:25:
         ca:c6:b2:ef:34:cc:ad:e8:7e:82:07:a9:9f:29:7a:6b:bb:a1:
         8a:32:7a:d4:a5:e7:71:f1:04:ff:11:aa:f4:42:f8:66:c8:ca:
         91:fb:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org