Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          oumQibS38TZV3SEAqdKuPRuNVAhX5cq4gM421r3+9Yk=
Subject key identifier:   4D:00:EB:15:85:C5:4D:D1:DF:78:F4:7B:1F:82:BD:28:75:E8:89:7E
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       5FAD6BC51F0720888D3BAE8A3A096848CE2582FE
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     262687
IP address blocks:        187.87.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:6b:c5:1f:07:20:88:8d:3b:ae:8a:3a:09:68:48:ce:25:82:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:82:96:5a:60:95:3b:3f:c8:b6:d6:78:86:
                    d0:2b:8f:72:17:08:dd:d6:b6:68:77:b2:c6:ad:42:
                    fb:8c:27:02:d7:98:01:84:92:a0:42:d0:4d:b9:02:
                    d4:44:b7:de:e4:86:14:0c:57:4a:3a:59:90:b1:97:
                    74:dd:e4:86:14:1c:1a:e5:e0:f3:92:23:94:5b:59:
                    68:5f:d6:0b:57:13:b0:39:cb:b5:0e:29:bc:3c:65:
                    1f:ed:44:e6:b0:35:1c:91:30:e4:92:4d:af:df:85:
                    1b:90:a0:43:db:99:b3:3b:f6:f4:a0:9e:03:c0:04:
                    80:36:62:9a:03:92:53:be:89:16:bc:b5:8b:7b:d2:
                    5d:b3:74:a8:58:c4:8b:41:c1:61:cb:dd:10:96:4e:
                    66:c7:2b:b3:a9:2e:d4:be:d1:77:d3:4f:02:d0:7d:
                    14:47:a0:84:b8:60:49:d5:f4:f2:aa:de:77:87:a2:
                    4f:68:b3:64:4e:b4:a7:3a:93:ca:32:6c:55:cc:d9:
                    bc:8a:bd:8f:fe:97:84:80:34:cd:de:2c:84:c7:ad:
                    4f:4c:00:29:ee:cd:44:ca:f0:a4:4c:95:93:bd:92:
                    77:4d:8f:cd:b4:7c:97:8f:a3:0b:4d:ec:9f:f8:d3:
                    63:83:46:dd:1f:bc:c8:00:4f:4c:29:e2:a2:22:77:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:00:EB:15:85:C5:4D:D1:DF:78:F4:7B:1F:82:BD:28:75:E8:89:7E
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:b6:d9:e3:0a:3f:2e:fb:7a:01:d8:ef:19:f7:3b:b7:b7:
         b4:d3:e5:f7:e8:fd:5f:de:6f:86:3f:0e:35:fd:c1:f9:e0:c2:
         42:8f:6e:be:52:55:fb:3b:57:4f:a5:6c:a0:28:e4:3e:de:a5:
         b5:93:be:ba:4e:d7:de:36:4a:b6:15:c3:a6:d7:98:69:ca:e9:
         0e:cf:42:33:55:3c:e2:f4:ad:3a:26:ab:a9:b4:b7:16:40:82:
         97:16:c5:4b:97:44:a8:b8:02:ec:d8:9e:96:89:31:b4:9d:29:
         28:20:72:70:8e:fa:0f:cf:b7:83:8a:1a:ea:55:72:21:0b:08:
         d9:aa:b4:13:c2:ef:f9:2f:bd:17:f5:d0:01:12:c7:b0:5d:7f:
         71:a3:33:59:78:2f:b3:02:94:d6:65:01:62:18:ab:95:41:19:
         e6:af:a4:39:1c:33:58:20:ae:90:6d:b2:0d:f7:61:07:29:e1:
         3d:ec:ac:43:ac:2f:47:3b:67:71:46:7a:36:8a:87:52:47:68:
         1e:a7:f1:5f:3c:b9:17:b3:f9:6d:b2:4d:8a:a0:79:6b:8d:de:
         2e:a7:9b:f5:76:6a:7b:c3:d5:1d:40:7a:c5:5e:f0:d6:de:01:
         89:c2:ce:76:dc:e8:b7:c0:7c:ac:9c:8a:d7:17:11:9b:c6:7b:
         6b:d3:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org