Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139382e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139382e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          UrJZrIp2PN/eKSjXlaMLyST3FOWqAkWgmM7QT3e7HxU=
Subject key identifier:   BC:AF:D8:22:EA:A4:7C:ED:F4:C1:15:E0:56:09:84:ED:BF:0C:B2:25
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       0CE7D947409EC257FD95CA8E254275E8E24E3E87
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139382e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:16 +0000
ROA not before:           Tue 21 May 2024 20:01:16 +0000
ROA not after:            Tue 20 May 2025 20:06:16 +0000
asID:                     262687
IP address blocks:        187.87.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e7:d9:47:40:9e:c2:57:fd:95:ca:8e:25:42:75:e8:e2:4e:3e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:16 2024 GMT
            Not After : May 20 20:06:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e1:c8:7c:5a:63:40:b9:67:3a:71:ff:16:58:
                    2c:72:ef:1b:2b:4c:01:f4:c1:eb:71:f4:9d:be:03:
                    6b:3e:ef:32:d9:0c:ec:6c:e0:f0:de:0d:85:5f:29:
                    81:62:1d:9d:f7:42:99:04:13:e8:f6:f1:77:e0:00:
                    17:03:2f:6a:4c:51:57:d8:f3:7e:e5:30:57:19:9f:
                    e8:2a:7b:9e:ca:cf:2b:17:8c:9d:3a:03:d6:de:9d:
                    a4:d1:0e:bc:08:7c:fd:a0:23:2f:ee:ba:8c:7b:c6:
                    4a:6a:cd:68:93:75:6f:37:87:73:b9:06:62:21:1d:
                    b3:94:00:67:4a:e5:cd:5a:e0:c8:4a:8b:22:ba:a6:
                    95:21:6c:de:7c:58:f6:c7:c7:d4:d8:81:80:e7:9a:
                    64:33:c9:aa:80:3d:e5:39:7d:3b:4d:41:25:90:30:
                    e5:39:05:96:12:98:2e:34:02:0a:30:1a:b2:3c:f3:
                    62:8a:73:0b:b2:4e:fa:3d:c7:ee:0d:ef:65:aa:5e:
                    e1:72:ee:b6:b9:d3:db:00:d7:7d:38:db:9f:40:bb:
                    ab:28:ee:96:10:1f:15:e9:ed:75:7f:6a:de:ae:8f:
                    ae:43:ed:b2:4f:c6:dd:93:f4:6b:f4:10:bd:b0:90:
                    29:ae:2d:59:46:1b:3c:e9:ce:5f:01:11:bc:1f:de:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:D8:22:EA:A4:7C:ED:F4:C1:15:E0:56:09:84:ED:BF:0C:B2:25
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139382e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:6b:5a:3f:b6:8b:21:17:79:c5:aa:c3:cd:c3:9e:18:74:
         a5:e4:dd:a0:45:b6:94:78:8d:87:94:af:32:60:75:3e:e2:ac:
         26:2e:a8:2d:96:1e:ce:b6:1c:05:68:0e:68:f9:ef:6f:0f:b9:
         95:67:15:b5:20:16:d0:fc:3a:21:dc:7d:be:d3:0f:89:2b:aa:
         23:6f:ea:fe:e2:7c:37:6a:7e:a7:15:0d:e8:25:c1:fe:d2:66:
         43:aa:86:7d:13:40:d6:6b:91:75:c0:fe:7b:92:c7:86:9f:f6:
         17:09:24:2d:72:c3:f7:7d:94:da:fd:0b:a3:90:60:97:80:8c:
         05:5a:f6:24:af:6f:49:48:81:ef:f5:c3:f2:36:27:da:65:ab:
         c0:f5:f4:07:38:73:66:2c:81:03:bc:46:97:e0:86:3f:b5:63:
         de:71:5a:be:fc:f4:b1:af:e3:a2:c0:46:0a:fa:d7:c6:e2:fe:
         4d:6b:de:ee:c7:29:37:bb:ed:70:08:20:79:95:92:96:97:dd:
         d2:0b:53:44:03:60:bf:22:3f:49:2a:00:f1:13:e0:1f:6b:c3:
         28:db:be:4e:b4:2f:60:b5:a5:ea:02:45:da:3a:1b:44:69:55:
         91:c2:5f:08:6f:4d:c9:ed:88:8f:75:31:3f:d6:42:a0:f4:cb:
         45:40:95:65
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDOfZR0Cewlf9lcqOJUJ16OJOPocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZENUY1NjJCMzI3MkU0NEE1MTI4MjkxMTk4NkVBMDM4
QzVENjkxOTAeFw0yNDA1MjEyMDAxMTZaFw0yNTA1MjAyMDA2MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRThFMUM4N0M1QTYzNDBCOTY3
M0E3MUZGMTY1ODJDNzJFRjFCMkI0QzAxRjRDMUVCNzFGNDlEQkUwMzZCM0VFRjMy
RDkwQ0VDNkNFMEYwREUwRDg1NUYyOTgxNjIxRDlERjc0Mjk5MDQxM0U4RjZGMTc3
RTAwMDE3MDMyRjZBNEM1MTU3RDhGMzdFRTUzMDU3MTk5RkU4MkE3QjlFQ0FDRjJC
MTc4QzlEM0EwM0Q2REU5REE0RDEwRUJDMDg3Q0ZEQTAyMzJGRUVCQThDN0JDNjRB
NkFDRDY4OTM3NTZGMzc4NzczQjkwNjYyMjExREIzOTQwMDY3NEFFNUNENUFFMEM4
NEE4QjIyQkFBNjk1MjE2Q0RFN0M1OEY2QzdDN0Q0RDg4MTgwRTc5QTY0MzNDOUFB
ODAzREU1Mzk3RDNCNEQ0MTI1OTAzMEU1MzkwNTk2MTI5ODJFMzQwMjBBMzAxQUIy
M0NGMzYyOEE3MzBCQjI0RUZBM0RDN0VFMERFRjY1QUE1RUUxNzJFRUI2QjlEM0RC
MDBENzdEMzhEQjlGNDBCQkFCMjhFRTk2MTAxRjE1RTlFRDc1N0Y2QURFQUU4RkFF
NDNFREIyNEZDNkREOTNGNDZCRjQxMEJEQjA5MDI5QUUyRDU5NDYxQjNDRTlDRTVG
MDExMUJDMUZERTJCNTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6OHIfFpjQLlnOnH/Flgscu8bK0wB9MHrcfSdvgNrPu8y2QzsbODw
3g2FXymBYh2d90KZBBPo9vF34AAXAy9qTFFX2PN+5TBXGZ/oKnueys8rF4ydOgPW
3p2k0Q68CHz9oCMv7rqMe8ZKas1ok3VvN4dzuQZiIR2zlABnSuXNWuDISosiuqaV
IWzefFj2x8fU2IGA55pkM8mqgD3lOX07TUElkDDlOQWWEpguNAIKMBqyPPNiinML
sk76PcfuDe9lql7hcu62udPbANd9ONufQLurKO6WEB8V6e11f2rero+uQ+2yT8bd
k/Rr9BC9sJApri1ZRhs86c5fARG8H94rUwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLyv2CLqpHzt9MEV4FYJhO2/DLIlMB8GA1UdIwQYMBaAFF/V9WKzJy5EpRKCkRmG
6gOMXWkZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5ZkJ2dnV2NDVQMTFi
eDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzEvNUZENUY1NjJCMzI3MkU0
NEE1MTI4MjkxMTk4NkVBMDM4QzVENjkxOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkQ1RjU2MkIzMjcyRTQ0QTUxMjgyOTExOTg2RUEwMzhDNUQ2
OTE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BOWZCdnZ1djQ1UDExYngyVm5q
VjNvZ3Q5aldCY3JOMzJWMVpTZnlIb3I1by8xLzMxMzgzNzJlMzgzNzJlMzEzOTM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzYzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
u1fGMA0GCSqGSIb3DQEBCwUAA4IBAQCWbGtaP7aLIRd5xarDzcOeGHSl5N2gRbaU
eI2HlK8yYHU+4qwmLqgtlh7OthwFaA5o+e9vD7mVZxW1IBbQ/Doh3H2+0w+JK6oj
b+r+4nw3an6nFQ3oJcH+0mZDqoZ9E0DWa5F1wP57kseGn/YXCSQtcsP3fZTa/Quj
kGCXgIwFWvYkr29JSIHv9cPyNifaZavA9fQHOHNmLIEDvEaX4IY/tWPecVq+/PSx
r+OiwEYK+tfG4v5Na97uxyk3u+1wCCB5lZKWl93SC1NEA2C/Ij9JKgDxE+Afa8Mo
275OtC9gtaXqAkXaOhtEaVWRwl8Ib03J7YiPdTE/1kKg9MtFQJVl
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org