Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa
File:                     3138372e38372e3230342e302f32342d3234203d3e203532353534.roa (raw, json)
Hash identifier:          yEa5ScT9XvQPfcL8dkmv38RXz3p0TmUUkE/8xUTgYdI=
Subject key identifier:   55:89:4A:C6:8C:41:99:3F:A7:CE:75:1D:3F:21:C8:A8:A2:D3:D9:B9
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       1E930167B6E9531B832E9CBB247B72F851A3F6E3
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa
Signing time:             Tue 21 May 2024 20:06:16 +0000
ROA not before:           Tue 21 May 2024 20:01:16 +0000
ROA not after:            Tue 20 May 2025 20:06:16 +0000
asID:                     52554
IP address blocks:        187.87.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:93:01:67:b6:e9:53:1b:83:2e:9c:bb:24:7b:72:f8:51:a3:f6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:16 2024 GMT
            Not After : May 20 20:06:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:dd:07:b1:ca:ae:4d:a0:2b:a9:a7:77:4d:
                    30:e7:9e:65:b8:9a:b1:a0:51:7b:af:d8:4a:f9:56:
                    f5:56:ac:76:7a:51:bb:41:30:1a:f3:ba:87:ce:42:
                    21:97:66:c9:5d:34:b3:3a:6f:2a:c7:e9:5b:47:53:
                    69:e8:fc:cf:c4:81:5e:7a:5c:bb:cb:83:c8:f9:4d:
                    43:6b:96:e1:4a:e2:87:fe:0e:ed:23:57:ae:62:a5:
                    66:6e:22:5a:09:aa:32:74:25:50:7c:37:b6:eb:e6:
                    d2:f6:84:14:d7:e1:22:a7:e2:24:a8:79:a6:d0:47:
                    d5:ef:c9:10:53:ef:16:75:f2:3a:f4:b7:78:8e:36:
                    61:6b:b1:df:a1:53:6b:a3:53:51:ae:20:41:09:78:
                    21:ea:52:0b:d7:1d:6a:01:be:db:15:04:22:14:fb:
                    1d:cb:ab:bb:91:7e:70:b7:cd:aa:e9:25:be:4e:be:
                    8f:13:90:1c:1d:87:fd:c8:21:8b:3c:71:1f:2d:53:
                    bd:e9:eb:ff:7e:bf:b5:c7:26:b2:a6:0a:59:b1:0a:
                    58:1f:b8:e7:ec:9c:86:40:f7:01:39:90:ce:fc:8f:
                    80:e6:57:00:38:e3:a9:1b:b2:b8:a8:16:57:03:48:
                    e0:5d:f0:f6:81:fe:f3:3b:0d:87:11:55:0f:af:02:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:4A:C6:8C:41:99:3F:A7:CE:75:1D:3F:21:C8:A8:A2:D3:D9:B9
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a5:30:80:6d:50:86:7f:51:49:9b:27:30:9d:d8:d6:62:3e:
         39:b7:86:85:d6:b9:9d:9f:a5:29:e5:ab:92:5c:a7:c4:13:ed:
         b7:24:fc:be:53:ec:f4:92:b1:9e:87:ac:87:63:58:d6:86:83:
         a4:48:61:3e:7f:bc:92:c2:32:21:66:72:d0:ac:51:a3:5c:ac:
         14:d4:25:94:23:72:d7:d8:a8:f0:0b:c5:cb:2e:c4:42:8c:f5:
         ba:ab:d7:d5:20:09:53:56:1a:c7:67:e1:5b:62:24:44:8e:c8:
         f3:4a:ed:d5:21:91:35:8f:f5:e9:84:d6:2c:dc:de:71:bb:60:
         2f:81:34:e5:ba:ac:a8:a0:95:c9:d0:1d:b9:25:c4:76:4c:d8:
         c9:7f:ca:22:d6:1c:e4:70:2b:8b:39:c0:23:83:71:a8:48:88:
         27:5a:dc:5f:e0:55:a5:9e:16:1b:38:91:06:22:c8:d8:57:70:
         89:73:a9:41:8a:c4:82:f4:04:b6:cd:23:cb:11:03:8e:fb:69:
         4c:ee:6f:33:fc:a6:3c:16:6c:f2:e1:1f:00:b9:0a:cf:ae:40:
         c1:ea:b1:b9:29:3b:f7:e6:4b:70:76:32:e6:0a:71:80:43:90:
         63:56:dd:3f:6a:f1:49:af:5e:aa:cd:93:2c:09:c8:b3:e3:9c:
         24:85:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org