Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          PM1aqktG1nWMUdUSX9Ev+ZQ67EOZ1J5UwH9bEdYBuwI=
Subject key identifier:   95:22:12:78:51:0A:8A:D7:CD:69:ED:6A:DE:B4:9A:C8:76:30:AB:7C
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       3563B4C554155B41D6C83E014C58C545B3D990CF
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     262687
IP address blocks:        187.87.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:63:b4:c5:54:15:5b:41:d6:c8:3e:01:4c:58:c5:45:b3:d9:90:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:70:cc:f9:ae:72:26:ce:a1:ab:a3:3a:31:
                    7f:d1:0f:15:28:dd:6f:a8:22:62:28:b7:a5:1f:a7:
                    eb:dc:f4:7f:49:98:54:ab:9a:f6:70:d4:f8:10:fb:
                    57:13:09:f2:8e:a3:3c:5f:47:4a:69:ff:71:92:73:
                    0c:49:42:ae:ed:cd:3f:dc:f0:dc:e2:04:01:f2:50:
                    c2:3c:37:ea:8d:d2:fb:ba:71:30:62:eb:e4:72:4e:
                    6f:e5:23:09:bf:26:1a:8d:43:fb:21:74:9f:d7:62:
                    80:f8:2b:88:2c:46:07:c5:d5:15:a6:20:b4:ab:43:
                    a5:f0:ef:69:34:56:02:06:11:a1:05:ff:31:fe:4e:
                    fa:f6:ea:85:bf:a0:ce:4a:62:84:11:fe:fb:d8:50:
                    4f:b3:e6:ac:4c:dd:9e:78:4a:d0:d9:cd:21:39:f3:
                    15:cf:69:e2:b3:a1:56:b3:9b:94:e8:a2:f2:88:d0:
                    e6:db:e7:44:93:f4:b7:28:fe:20:59:30:49:6a:6e:
                    ea:a8:a6:4b:96:b3:cf:42:a5:0b:05:f7:d3:6a:83:
                    99:49:ea:bd:db:de:eb:30:1f:9e:5c:79:b3:d6:ca:
                    66:db:a6:15:6f:0a:0e:cc:25:6e:c9:2b:e6:05:3d:
                    92:d4:88:e8:f5:ed:a8:34:f9:21:cc:2a:f1:39:03:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:12:78:51:0A:8A:D7:CD:69:ED:6A:DE:B4:9A:C8:76:30:AB:7C
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:06:6b:f8:ba:9f:00:b2:ad:d6:91:71:93:11:ae:83:20:
         09:c3:3f:7a:14:65:e1:b3:ec:97:78:5f:5e:a4:d9:15:98:f1:
         1b:b2:ba:b0:d7:ac:7a:f1:24:9c:99:01:a2:df:7f:11:e3:b0:
         2b:ee:5d:c1:ce:2e:a8:3a:67:8e:95:f8:d3:67:9c:0a:33:0a:
         e1:9a:3e:35:7f:73:36:8a:10:d7:ca:86:a4:b2:3e:52:b6:59:
         dc:45:fa:32:3c:0c:2f:6b:96:11:47:c4:a8:34:9c:04:65:2c:
         1b:a3:f0:8b:9a:ae:ee:34:68:6d:2e:42:b7:36:d7:5f:19:4b:
         0c:0b:53:85:b8:b3:dd:87:a7:70:af:79:00:08:1c:4d:91:76:
         c6:15:f6:d0:18:17:62:6f:a5:32:d6:bb:43:05:3b:24:38:15:
         6a:48:58:51:38:bb:c9:cf:ac:82:2a:f1:1d:9c:d4:80:bc:15:
         36:70:97:f6:1d:0b:d8:e6:52:9f:b8:b4:2c:74:38:96:a9:ab:
         0a:9c:d6:b2:9e:91:06:ca:42:7d:28:5b:f7:f5:cc:b0:db:61:
         70:07:d4:a2:65:6f:2e:53:c8:4f:8c:8b:ca:5d:f6:54:73:82:
         60:c9:9e:c2:ec:e8:9c:23:ea:ea:42:36:e3:60:6d:85:d6:4f:
         c9:a1:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org