Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          uitycOSC9md1w9bTFE9sDNjEryw0Xq/0QMcUkPC2C3g=
Subject key identifier:   5E:3C:68:F0:EB:92:6F:16:B5:E3:8B:71:D2:59:DC:68:EA:13:0A:8F
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       1B0F42A3FCA33144DBCC8750FEBD41DD4915251A
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     262687
IP address blocks:        187.87.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0f:42:a3:fc:a3:31:44:db:cc:87:50:fe:bd:41:dd:49:15:25:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:68:47:92:8f:ba:27:2e:d9:7d:dd:d2:b4:
                    ef:81:a8:c2:83:68:b8:d1:64:d1:e1:7d:5e:f2:89:
                    20:b2:6c:b3:15:64:b4:3f:b7:65:c3:5f:64:43:03:
                    07:ea:bc:b3:1b:95:97:a6:a2:c0:59:f9:05:1e:ba:
                    74:4f:e0:09:2f:54:2d:2a:43:60:c3:94:b8:d3:a7:
                    13:ed:6b:07:9f:98:6b:33:e6:0a:b0:24:3b:10:80:
                    3e:35:97:a7:5d:cf:26:39:7b:0e:a1:56:b1:c8:7f:
                    6c:3f:76:5d:b8:24:55:86:2f:96:58:51:65:a3:ec:
                    8b:e8:68:e4:f5:df:5f:14:1d:d2:19:98:c5:2e:55:
                    cd:82:fd:35:fa:87:35:0d:42:25:1d:d9:fc:64:4e:
                    e4:c8:9e:38:bd:e7:6f:2a:85:de:c4:89:a4:7e:ab:
                    16:62:b9:a2:85:0a:08:20:5b:16:68:eb:84:72:f7:
                    68:e7:4e:40:44:a7:52:55:ea:3b:12:7e:8a:95:eb:
                    c6:7e:9c:8a:29:e6:fe:52:99:ee:f5:fa:5d:63:71:
                    53:5d:8e:4e:19:08:d8:08:34:b7:a1:63:8d:14:0d:
                    5f:27:c1:c4:c8:d4:eb:0e:c5:4b:f3:32:6b:5d:c1:
                    e9:8c:ff:4a:e5:ea:b7:a6:d0:20:c6:e0:4b:2f:34:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3C:68:F0:EB:92:6F:16:B5:E3:8B:71:D2:59:DC:68:EA:13:0A:8F
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:3e:04:48:83:52:1b:a5:00:1f:2d:f5:2b:d2:30:37:c3:
         21:ff:e0:3e:2f:ec:1d:4a:51:99:d3:33:80:20:fc:84:bf:68:
         57:06:be:79:f7:5e:6a:1d:d6:e1:c6:8e:25:e1:83:db:cf:e5:
         0c:43:ac:d0:98:7b:a9:ec:0a:b7:c2:59:aa:d9:27:9e:ae:6b:
         75:77:04:60:2f:82:23:0e:11:83:36:27:83:b4:5f:0c:02:7d:
         90:e5:4b:60:ae:70:3e:88:24:a6:1c:81:a1:0e:f2:d6:1a:6b:
         41:93:4d:90:19:7b:e1:0b:d8:c2:ff:4b:58:32:62:ac:12:68:
         51:a9:e1:c3:7d:be:5d:c1:48:2b:d9:7e:77:c5:32:bf:c6:d6:
         60:fd:f6:f4:08:ec:d2:a1:9f:1a:63:2d:69:a2:49:09:e0:06:
         f2:79:68:f4:d8:ff:8d:c5:93:53:86:21:49:16:fa:ab:46:bb:
         b8:1b:4a:71:7a:84:91:78:fb:1d:6d:a4:9f:5f:5c:bb:25:46:
         98:ef:d8:9b:c3:77:84:de:6b:86:c6:cb:a2:01:1f:8e:7d:aa:
         00:d4:7a:cf:f7:98:25:ef:cb:4a:25:36:65:92:e7:16:27:ec:
         0d:db:ed:3d:39:88:9e:98:6a:bd:6b:48:6a:de:4c:67:52:b9:
         2f:02:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org