Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa
File:                     3138372e38372e3230322e302f32342d3234203d3e203532353534.roa (raw, json)
Hash identifier:          kL/nJTJxmgJt9THrE5W8i2qqKkJWK8KgggkigosImJo=
Subject key identifier:   60:0E:CD:4E:A3:37:98:F7:4B:D9:32:8B:F9:25:0D:3E:4A:7E:6B:B1
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       2BA04E97F743E61639976B87D0420C2BD5AE4554
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     52554
IP address blocks:        187.87.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:4e:97:f7:43:e6:16:39:97:6b:87:d0:42:0c:2b:d5:ae:45:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:03:84:13:0f:2a:8e:e0:85:2d:4f:3b:c2:
                    c6:a2:76:bc:f4:29:58:2f:0b:2d:f1:e9:7d:13:a4:
                    a9:83:f3:43:e4:46:49:11:4f:aa:2c:e8:9e:b7:55:
                    72:22:70:ab:d4:ff:0b:69:6b:f9:44:d0:71:99:c9:
                    21:8c:99:bb:79:77:2b:4c:40:b1:58:3a:53:d1:77:
                    8f:79:69:10:c8:90:68:21:dc:7f:87:bf:b9:a2:c7:
                    d7:62:72:8d:3a:f1:22:3f:6a:df:9d:08:90:bd:f5:
                    91:3e:77:a2:9d:52:5e:84:57:39:99:32:76:0c:75:
                    61:af:70:53:55:7b:7e:1b:11:6d:3a:6f:61:7b:0d:
                    15:38:e1:bc:4b:c5:be:3e:11:94:03:2b:f0:d9:42:
                    68:8a:cd:3f:15:7b:2b:36:53:ff:68:43:6d:0b:80:
                    c3:58:4f:0f:1c:01:43:16:c2:6b:b0:88:d8:27:18:
                    4c:82:66:b5:6e:6e:2f:49:9e:30:43:2f:a1:36:e1:
                    27:40:a1:1e:c5:c0:64:58:bf:e1:f6:de:09:08:6a:
                    34:0a:cd:a3:b4:b0:e7:c7:55:23:2d:49:db:f3:01:
                    af:2d:a6:e8:b6:3e:39:00:bf:32:be:6b:86:9e:e0:
                    69:29:85:4b:99:55:cb:a4:6e:3a:23:25:ce:17:13:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:CD:4E:A3:37:98:F7:4B:D9:32:8B:F9:25:0D:3E:4A:7E:6B:B1
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:59:b6:bc:aa:aa:fa:29:12:d0:08:a3:9a:a7:ad:0e:d2:
         b3:35:0d:1f:5f:3f:2b:04:8b:ca:52:a3:39:28:b6:9c:9a:71:
         2a:0a:6f:30:30:a4:eb:fa:a3:0a:25:c6:20:e4:60:c0:0c:5e:
         71:07:e3:d5:72:c7:00:58:21:06:28:aa:db:d6:55:ac:3d:8b:
         ec:88:53:ad:bf:09:15:f0:f1:e9:16:62:a9:22:19:20:3c:cd:
         21:2f:a8:62:6c:c3:90:d9:34:b3:11:f6:35:fe:84:21:a2:e7:
         28:57:6f:49:51:ce:6d:fb:94:70:36:17:bf:90:64:43:eb:f4:
         8c:78:3b:fb:a5:e3:55:cb:e0:fb:b3:71:f7:5d:23:d2:9b:64:
         c9:6b:d7:2c:cf:c1:86:3c:77:49:e9:56:3b:0d:ee:77:fd:d2:
         c7:3c:8f:2b:75:93:4d:f9:f8:d9:2a:cb:4a:6e:34:f0:da:63:
         bb:7b:77:65:4a:60:f6:09:0c:eb:d6:7f:84:87:bd:0a:1f:1f:
         b9:94:e3:c2:8d:bd:55:4c:ed:43:f9:2c:5e:7c:ef:06:31:a8:
         e0:a2:36:75:dd:90:28:34:44:4e:43:05:79:fa:32:08:d7:a0:
         3d:1e:8a:0b:23:2b:19:56:07:cf:83:92:6a:07:9f:2b:9f:b2:
         d0:b4:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org