Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          t6XtrlUKlQ5bET+UGU6K7ttcwFH8r+zabFlzg2w9cVQ=
Subject key identifier:   00:B4:F0:00:0F:A6:D3:4A:0D:CC:DD:21:BD:98:1F:B5:46:8C:64:EC
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       57ADCE506C5BF44F4D2B13B48C7AC436ED78C8EE
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     262687
IP address blocks:        187.87.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ad:ce:50:6c:5b:f4:4f:4d:2b:13:b4:8c:7a:c4:36:ed:78:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject: CN=3082010A0282010100C506A4E1E73FA49ADCBF5678DE091B9178FE8630903CF422476F74ADBA8BB033AAE3A2A08568FF16203AE2770836F35C25DA62EC0E2BF099115D555D7F98FBC2D26DA00704F5A1C6733DD46C988E5157A5586C421F6383BC4FF5F48AB4DBEC39E77BDEC9D147E3B0180AD424F1A8BD302618F25B28D40AD14458CCDB6028FD6153B2E050AD6F3D3615BF0DBB8C74705D4B31786944D9C65307783334FE09B7FB9B74682D9A55391D23976F96279EB924F1543A1492BEE5EEBE6860BFCF2EA6C8C90EB366BC88EA5262439549E371014D0C72820AF6979C0A4B40CCFA1652A08EA36C76EAD0575AFF5CC94EF9AB0B68B8F7994F14B37164EBE55C9A0F8C6A85D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:a4:e1:e7:3f:a4:9a:dc:bf:56:78:de:09:
                    1b:91:78:fe:86:30:90:3c:f4:22:47:6f:74:ad:ba:
                    8b:b0:33:aa:e3:a2:a0:85:68:ff:16:20:3a:e2:77:
                    08:36:f3:5c:25:da:62:ec:0e:2b:f0:99:11:5d:55:
                    5d:7f:98:fb:c2:d2:6d:a0:07:04:f5:a1:c6:73:3d:
                    d4:6c:98:8e:51:57:a5:58:6c:42:1f:63:83:bc:4f:
                    f5:f4:8a:b4:db:ec:39:e7:7b:de:c9:d1:47:e3:b0:
                    18:0a:d4:24:f1:a8:bd:30:26:18:f2:5b:28:d4:0a:
                    d1:44:58:cc:db:60:28:fd:61:53:b2:e0:50:ad:6f:
                    3d:36:15:bf:0d:bb:8c:74:70:5d:4b:31:78:69:44:
                    d9:c6:53:07:78:33:34:fe:09:b7:fb:9b:74:68:2d:
                    9a:55:39:1d:23:97:6f:96:27:9e:b9:24:f1:54:3a:
                    14:92:be:e5:ee:be:68:60:bf:cf:2e:a6:c8:c9:0e:
                    b3:66:bc:88:ea:52:62:43:95:49:e3:71:01:4d:0c:
                    72:82:0a:f6:97:9c:0a:4b:40:cc:fa:16:52:a0:8e:
                    a3:6c:76:ea:d0:57:5a:ff:5c:c9:4e:f9:ab:0b:68:
                    b8:f7:99:4f:14:b3:71:64:eb:e5:5c:9a:0f:8c:6a:
                    85:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:F0:00:0F:A6:D3:4A:0D:CC:DD:21:BD:98:1F:B5:46:8C:64:EC
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:e7:7c:fd:a7:b3:a6:a9:de:c1:d8:ff:15:74:08:b6:53:
         5a:27:29:b5:07:e7:3d:8e:57:9b:06:3b:1e:61:5f:76:cd:11:
         e0:dd:e3:48:7e:45:6a:d2:99:54:60:33:83:ce:95:1f:c0:39:
         52:73:81:97:e4:88:a5:5b:77:04:90:e8:7e:80:35:93:f8:bf:
         3b:5c:8b:0b:8c:5c:5f:17:2f:98:91:0d:34:f2:6c:47:d0:6c:
         55:e3:1c:b3:05:52:2f:db:a1:7c:05:34:2f:8f:a1:02:20:ab:
         cf:aa:fd:98:42:1a:85:60:45:e0:3b:c7:4d:6c:8f:80:34:89:
         a8:ad:a2:e6:c4:a7:92:42:cf:ce:fa:0e:8e:36:89:12:b5:ad:
         8f:ab:ab:ca:16:2c:84:1e:7f:c0:e1:6b:4d:6f:fa:53:93:e8:
         6a:0f:98:9f:3f:9b:97:99:cd:9f:ba:be:34:61:d6:ee:3f:bb:
         44:fa:9d:53:82:a5:62:02:ef:57:3b:1d:32:49:ce:d5:17:eb:
         12:cd:4f:f5:72:6a:1c:bb:17:0d:71:d8:4a:82:d3:51:4f:ea:
         94:30:31:ec:ce:81:3d:00:10:96:49:40:81:1f:5f:ee:8a:58:
         a9:de:cc:ed:30:3e:12:64:1f:fa:ba:7c:87:95:84:66:19:f0:
         f5:9b:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org