Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          qqC9TpICNoaIKR7sPW+uhbiIVW4JYKASYjY/UWeS93Y=
Subject key identifier:   B5:4F:94:B4:2B:BF:D3:A6:E8:AF:04:09:59:CC:40:A6:B8:B0:AC:0A
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       4F5696469BFFB4AC85A62E988445F7C87FACC836
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:18 +0000
ROA not before:           Tue 21 May 2024 20:01:18 +0000
ROA not after:            Tue 20 May 2025 20:06:18 +0000
asID:                     262687
IP address blocks:        187.87.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:56:96:46:9b:ff:b4:ac:85:a6:2e:98:84:45:f7:c8:7f:ac:c8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:18 2024 GMT
            Not After : May 20 20:06:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:5f:17:6a:67:75:01:09:dd:03:22:4f:0b:
                    8f:b0:46:a0:7d:eb:0f:9d:2d:8f:c1:f9:8d:51:ca:
                    90:a7:8d:dd:6c:7f:63:74:78:76:57:60:54:32:ba:
                    ca:64:db:91:47:df:f3:a9:02:1b:48:7f:83:e1:2e:
                    45:c9:fa:d3:3c:1f:ae:df:7f:b4:7f:c7:54:87:0c:
                    bc:25:d3:89:fc:85:39:0f:a6:89:13:f6:b6:5e:bc:
                    16:0e:c6:ef:87:30:2f:a9:f4:73:4a:4c:96:58:ff:
                    34:b6:76:86:95:ca:a8:d1:03:8f:57:82:f7:26:e2:
                    36:2b:4c:8b:02:e9:b5:30:9d:11:b5:cc:46:f7:40:
                    46:10:33:98:7e:50:de:1b:d6:45:dc:16:89:2a:df:
                    2d:1e:91:ee:64:9f:8d:4a:c4:7e:72:c5:97:bb:1b:
                    c6:44:d2:66:3c:f0:95:b0:68:9c:3d:eb:30:ff:06:
                    02:7b:ae:56:fa:27:35:74:36:e9:b2:ea:49:2d:36:
                    b4:91:05:77:b2:12:32:9d:69:36:ae:7f:10:30:a7:
                    86:13:db:ac:68:d8:90:93:ec:d7:e0:de:74:5d:18:
                    a4:f1:87:71:4b:ed:7e:e9:eb:42:5a:da:28:bb:ab:
                    f5:c5:c1:5b:18:01:22:8c:87:d7:92:e0:c5:b7:90:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4F:94:B4:2B:BF:D3:A6:E8:AF:04:09:59:CC:40:A6:B8:B0:AC:0A
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:a2:e3:06:db:d4:6d:8b:a4:9a:d9:b4:e6:b8:f0:ed:6f:
         90:33:ce:cb:2a:be:fe:b3:92:ec:6e:ce:c0:ac:d9:bd:7d:26:
         66:6a:6d:6f:51:03:ee:52:09:17:60:a4:c2:4c:4a:29:64:64:
         b7:6e:e1:60:93:43:ce:6a:c6:7c:0c:c7:24:a9:07:b4:5a:25:
         76:06:3d:47:6d:a3:3f:f6:3a:81:44:b3:59:83:1c:a7:8f:15:
         a2:57:d5:d7:08:f8:65:9c:a0:bb:fe:f9:37:7c:0e:31:c2:65:
         f4:68:14:f9:31:a9:86:34:64:59:3b:eb:29:ef:d8:e9:23:e0:
         24:27:a4:02:c9:d4:9e:67:00:e1:1f:6b:d6:a7:b7:15:ca:8f:
         0a:f4:87:0b:b7:85:b5:3a:2b:75:f2:3c:13:23:06:58:d6:5d:
         10:c6:88:69:16:57:de:bc:49:b2:21:05:df:a4:a8:8b:8b:25:
         08:1c:f3:24:2f:ca:5b:b8:0d:98:8e:65:18:52:82:b2:10:e9:
         93:1d:11:3e:54:ba:bf:42:b7:33:3a:7b:45:58:3d:ce:aa:43:
         1d:51:b6:4f:0a:63:1f:ce:dd:1f:7e:47:0d:54:c4:0d:ed:04:
         e7:74:6f:f0:78:3f:3d:2b:26:c6:8f:49:70:73:91:26:ad:90:
         dc:c7:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org