Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          9dSX/dwTa2wRBFYnshsKPAacqvQTAlrX87oOl0sCysg=
Subject key identifier:   EE:BF:56:A6:2B:0B:92:67:65:F8:D1:A9:FF:C4:B6:4F:A1:3A:11:48
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       581BA5EB2064EB75D1F3585B3C06EECFABFA1460
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:19 +0000
ROA not before:           Tue 21 May 2024 20:01:19 +0000
ROA not after:            Tue 20 May 2025 20:06:19 +0000
asID:                     262687
IP address blocks:        187.87.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1b:a5:eb:20:64:eb:75:d1:f3:58:5b:3c:06:ee:cf:ab:fa:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:19 2024 GMT
            Not After : May 20 20:06:19 2025 GMT
        Subject: CN=3082010A0282010100BC38183CBEE454C08437626D8F9BBDD800C5D3F1B2E8FE932BF0AB3D2D489B41388C906B58409950B5C0DB84E3AD6115F47D73B27265B1A2B6A49705114D20B9FA09CB70A6908FCB10235D530FDFE3517ABBEBD6B5A9A8661F2BE2E3BC08B851E9C16F6DB271105F8EF2E5F20436DE508A99ABC3555FF3A6EAE950137C8970E639D017F93C7F7347C7E107DF2FA16348401532A3875C0178F1C80EDCE7B78CD5EF42180CC820120F5527BBAC0F0D2D4F25A8A74D4143509C61612333DA6A68420C7BDFFCEA82190C73E606B850EE4E9D9C141E97004D03CC259CACFCF223B5C86C8B7C1B306E0BA76AEFB210DCC30B8DE8854091CF2EE01E5281D0B31B6CE23B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:18:3c:be:e4:54:c0:84:37:62:6d:8f:9b:
                    bd:d8:00:c5:d3:f1:b2:e8:fe:93:2b:f0:ab:3d:2d:
                    48:9b:41:38:8c:90:6b:58:40:99:50:b5:c0:db:84:
                    e3:ad:61:15:f4:7d:73:b2:72:65:b1:a2:b6:a4:97:
                    05:11:4d:20:b9:fa:09:cb:70:a6:90:8f:cb:10:23:
                    5d:53:0f:df:e3:51:7a:bb:eb:d6:b5:a9:a8:66:1f:
                    2b:e2:e3:bc:08:b8:51:e9:c1:6f:6d:b2:71:10:5f:
                    8e:f2:e5:f2:04:36:de:50:8a:99:ab:c3:55:5f:f3:
                    a6:ea:e9:50:13:7c:89:70:e6:39:d0:17:f9:3c:7f:
                    73:47:c7:e1:07:df:2f:a1:63:48:40:15:32:a3:87:
                    5c:01:78:f1:c8:0e:dc:e7:b7:8c:d5:ef:42:18:0c:
                    c8:20:12:0f:55:27:bb:ac:0f:0d:2d:4f:25:a8:a7:
                    4d:41:43:50:9c:61:61:23:33:da:6a:68:42:0c:7b:
                    df:fc:ea:82:19:0c:73:e6:06:b8:50:ee:4e:9d:9c:
                    14:1e:97:00:4d:03:cc:25:9c:ac:fc:f2:23:b5:c8:
                    6c:8b:7c:1b:30:6e:0b:a7:6a:ef:b2:10:dc:c3:0b:
                    8d:e8:85:40:91:cf:2e:e0:1e:52:81:d0:b3:1b:6c:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:56:A6:2B:0B:92:67:65:F8:D1:A9:FF:C4:B6:4F:A1:3A:11:48
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:74:bc:c7:3f:5e:a4:42:67:8d:c4:07:21:86:ff:ca:3b:c9:
         61:75:80:7a:da:b0:a7:25:da:80:ae:f5:b7:ca:d4:ed:8b:44:
         54:83:89:59:6e:10:7d:f1:16:27:c8:b6:2c:13:f5:1e:09:58:
         3c:00:aa:c8:57:34:c4:91:17:aa:db:29:17:25:4a:b9:2d:f6:
         90:c3:75:c5:f5:bd:43:84:be:1b:f8:12:1b:37:ca:a0:b7:29:
         69:53:22:18:ac:87:68:8b:41:da:47:d5:56:62:1b:b9:99:8e:
         4e:a4:44:f7:05:a8:ff:82:d1:e8:cf:b5:81:78:5d:e8:88:9e:
         5a:42:29:36:c0:b3:2e:a2:ea:81:86:a1:f2:9c:63:12:50:e5:
         40:dc:60:e6:df:b6:73:86:c0:1b:d3:ac:d8:dc:b7:16:54:12:
         59:25:93:5b:f7:8e:8f:68:8d:94:18:94:82:ac:2f:9a:52:dc:
         2b:c5:02:0c:6b:03:72:05:04:6a:74:70:73:b3:02:f9:f0:d4:
         36:16:41:db:a9:5f:14:16:06:25:5d:42:72:3b:46:09:75:5e:
         a4:28:c2:e0:d9:ae:4f:74:51:72:09:4c:27:00:67:ea:ea:12:
         22:71:bd:0e:cd:8f:ea:10:87:f1:d6:b3:0a:3b:eb:01:ba:cd:
         cd:94:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org