Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          3MT2thVV/v//YbNM8i0O9YTAjttKpywYuVB8J0fE9G4=
Subject key identifier:   0E:A6:87:30:72:8B:B0:10:37:35:83:89:70:F0:CD:EA:B9:22:3C:14
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       27BB1804DC50DAAC03ADA5F86632AA04129415BD
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:16 +0000
ROA not before:           Tue 21 May 2024 20:01:16 +0000
ROA not after:            Tue 20 May 2025 20:06:16 +0000
asID:                     262687
IP address blocks:        187.87.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bb:18:04:dc:50:da:ac:03:ad:a5:f8:66:32:aa:04:12:94:15:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:16 2024 GMT
            Not After : May 20 20:06:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:ac:07:68:22:96:40:59:11:7c:ea:7a:f1:
                    2c:72:be:ee:52:6a:d8:aa:61:a5:19:a4:ed:12:22:
                    0f:59:1e:71:70:ac:a8:fc:1a:6c:3c:41:79:54:03:
                    be:8b:82:c6:c7:b5:47:66:dc:90:91:5d:06:25:59:
                    7a:1f:9e:61:49:02:a8:58:6e:f9:df:9b:48:aa:19:
                    27:9e:56:d7:ae:f4:3a:67:ca:1f:08:75:35:f5:45:
                    bc:b2:a4:7b:fd:f3:94:55:5e:4e:f3:00:03:ea:4e:
                    ea:29:10:33:12:68:3a:ca:d9:3f:57:90:1d:30:f4:
                    27:24:76:94:3d:a0:a2:c8:b5:4f:e3:b7:11:ac:b0:
                    5a:71:03:d9:99:ca:a6:d6:92:f9:c0:ff:7b:58:15:
                    4c:76:b1:24:e8:7e:f5:60:e5:7b:9f:e4:e5:25:f5:
                    79:62:ab:de:b0:7d:5d:c9:91:93:fa:21:b6:17:08:
                    32:8c:29:9f:38:05:22:fa:18:6e:55:82:54:30:e7:
                    20:dc:1a:65:e9:5c:28:d2:60:02:97:aa:15:00:a4:
                    1e:3d:7e:57:1e:6e:1f:a1:0d:80:52:d3:98:35:4f:
                    a3:13:9d:55:4c:57:e2:f7:81:24:e1:92:bd:ea:37:
                    2b:57:05:e2:83:53:7a:39:e9:af:2e:63:f4:05:06:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:87:30:72:8B:B0:10:37:35:83:89:70:F0:CD:EA:B9:22:3C:14
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:61:4c:3d:74:58:42:62:e1:da:78:02:f3:f4:52:00:21:7b:
         58:e8:90:82:e9:51:d9:8b:46:5d:46:7e:d7:e3:4d:13:05:98:
         80:ab:c6:e9:8f:52:10:70:14:13:a6:aa:be:36:74:60:96:dc:
         a9:06:3b:d7:6e:59:d6:11:fc:a4:ff:e3:c4:91:78:9d:ea:fd:
         b9:c2:68:a0:09:69:74:5e:38:40:8e:43:a0:45:8a:8b:4a:76:
         0e:16:1f:25:e3:cd:5c:1f:64:33:78:91:0c:26:97:5f:87:80:
         90:dd:00:70:8d:74:aa:c8:7c:e6:55:20:54:f9:3a:6e:a8:c5:
         06:c8:a5:6e:ee:41:9d:d3:dd:2b:30:bd:6b:dc:39:47:5d:f4:
         eb:c6:ef:33:25:ed:40:ad:56:a0:f2:11:d9:05:5c:cb:a2:c0:
         a1:55:86:07:16:1a:04:73:4c:f4:40:3c:e0:d0:51:29:7d:b4:
         60:d8:44:9d:86:d8:a8:fc:a9:f8:d8:93:41:67:a3:30:51:d8:
         b1:aa:f7:da:49:c9:95:97:87:11:59:58:0d:c3:12:ca:76:86:
         bb:c6:67:c8:a2:8e:e4:63:69:59:3c:e8:4d:eb:da:7d:38:e3:
         ea:66:ce:c2:19:ea:cc:b9:1f:17:f2:fd:fb:c3:d7:1c:f8:ad:
         30:92:26:c9
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJ7sYBNxQ2qwDraX4ZjKqBBKUFb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZENUY1NjJCMzI3MkU0NEE1MTI4MjkxMTk4NkVBMDM4
QzVENjkxOTAeFw0yNDA1MjEyMDAxMTZaFw0yNTA1MjAyMDA2MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTU3OEFDMDc2ODIyOTY0MDU5
MTE3Q0VBN0FGMTJDNzJCRUVFNTI2QUQ4QUE2MUE1MTlBNEVEMTIyMjBGNTkxRTcx
NzBBQ0E4RkMxQTZDM0M0MTc5NTQwM0JFOEI4MkM2QzdCNTQ3NjZEQzkwOTE1RDA2
MjU1OTdBMUY5RTYxNDkwMkE4NTg2RUY5REY5QjQ4QUExOTI3OUU1NkQ3QUVGNDNB
NjdDQTFGMDg3NTM1RjU0NUJDQjJBNDdCRkRGMzk0NTU1RTRFRjMwMDAzRUE0RUVB
MjkxMDMzMTI2ODNBQ0FEOTNGNTc5MDFEMzBGNDI3MjQ3Njk0M0RBMEEyQzhCNTRG
RTNCNzExQUNCMDVBNzEwM0Q5OTlDQUE2RDY5MkY5QzBGRjdCNTgxNTRDNzZCMTI0
RTg3RUY1NjBFNTdCOUZFNEU1MjVGNTc5NjJBQkRFQjA3RDVEQzk5MTkzRkEyMUI2
MTcwODMyOEMyOTlGMzgwNTIyRkExODZFNTU4MjU0MzBFNzIwREMxQTY1RTk1QzI4
RDI2MDAyOTdBQTE1MDBBNDFFM0Q3RTU3MUU2RTFGQTEwRDgwNTJEMzk4MzU0RkEz
MTM5RDU1NEM1N0UyRjc4MTI0RTE5MkJERUEzNzJCNTcwNUUyODM1MzdBMzlFOUFG
MkU2M0Y0MDUwNjVFQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5XisB2gilkBZEXzqevEscr7uUmrYqmGlGaTtEiIPWR5xcKyo/Bps
PEF5VAO+i4LGx7VHZtyQkV0GJVl6H55hSQKoWG7535tIqhknnlbXrvQ6Z8ofCHU1
9UW8sqR7/fOUVV5O8wAD6k7qKRAzEmg6ytk/V5AdMPQnJHaUPaCiyLVP47cRrLBa
cQPZmcqm1pL5wP97WBVMdrEk6H71YOV7n+TlJfV5YqvesH1dyZGT+iG2FwgyjCmf
OAUi+hhuVYJUMOcg3Bpl6Vwo0mACl6oVAKQePX5XHm4foQ2AUtOYNU+jE51VTFfi
94Ek4ZK96jcrVwXig1N6OemvLmP0BQZewQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FA6mhzByi7AQNzWDiXDwzeq5IjwUMB8GA1UdIwQYMBaAFF/V9WKzJy5EpRKCkRmG
6gOMXWkZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5ZkJ2dnV2NDVQMTFi
eDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzEvNUZENUY1NjJCMzI3MkU0
NEE1MTI4MjkxMTk4NkVBMDM4QzVENjkxOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkQ1RjU2MkIzMjcyRTQ0QTUxMjgyOTExOTg2RUEwMzhDNUQ2
OTE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BOWZCdnZ1djQ1UDExYngyVm5q
VjNvZ3Q5aldCY3JOMzJWMVpTZnlIb3I1by8xLzMxMzgzNzJlMzgzNzJlMzEzOTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzYzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u1fDMA0GCSqGSIb3DQEBCwUAA4IBAQBmYUw9dFhCYuHaeALz9FIAIXtY6JCC6VHZ
i0ZdRn7X400TBZiAq8bpj1IQcBQTpqq+NnRgltypBjvXblnWEfyk/+PEkXid6v25
wmigCWl0XjhAjkOgRYqLSnYOFh8l481cH2QzeJEMJpdfh4CQ3QBwjXSqyHzmVSBU
+TpuqMUGyKVu7kGd090rML1r3DlHXfTrxu8zJe1ArVag8hHZBVzLosChVYYHFhoE
c0z0QDzg0FEpfbRg2ESdhtio/Kn42JNBZ6MwUdixqvfaScmVl4cRWVgNwxLKdoa7
xmfIoo7kY2lZPOhN69p9OOPqZs7CGerMuR8X8v37w9cc+K0wkibJ
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org