Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138372e38372e36342e302f32302d3234203d3e203533313433.roa
File:                     3138372e38372e36342e302f32302d3234203d3e203533313433.roa (raw, json)
Hash identifier:          caQc3d/JNk2KuEAFzHTmCbwSA1khIdxMQnYhTFcUGyQ=
Subject key identifier:   F4:EB:6B:DD:06:83:E5:43:76:BC:BE:4B:DD:5B:F5:54:05:26:39:0F
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       68645A5FAC23395105C48E3FC5D05CC1EA86C9AF
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138372e38372e36342e302f32302d3234203d3e203533313433.roa
Signing time:             Mon 08 Jul 2024 19:43:05 +0000
ROA not before:           Mon 08 Jul 2024 19:38:05 +0000
ROA not after:            Mon 07 Jul 2025 19:43:05 +0000
asID:                     53143
IP address blocks:        187.87.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:5a:5f:ac:23:39:51:05:c4:8e:3f:c5:d0:5c:c1:ea:86:c9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:05 2024 GMT
            Not After : Jul  7 19:43:05 2025 GMT
        Subject: CN=F4EB6BDD0683E54376BCBE4BDD5BF5540526390F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:08:4a:92:bf:b8:a1:2a:69:a3:44:30:1d:
                    e0:3a:76:26:32:8b:8b:96:c4:ea:4d:4a:f0:73:92:
                    23:5d:22:ed:f2:8a:49:07:b5:17:48:b3:b3:c9:e1:
                    a9:1d:19:17:34:5c:97:ee:a6:c5:54:7a:7e:30:a0:
                    e0:d6:fd:09:37:d5:f7:34:a3:17:78:cc:55:e7:3b:
                    93:df:11:45:20:8d:c7:41:a2:46:26:d9:96:8b:48:
                    6e:7f:6c:83:05:c3:f0:4c:d3:5e:99:7d:11:e3:a2:
                    28:ac:4f:85:f5:2b:c0:cf:ab:ac:c6:0a:3f:b3:37:
                    bc:c8:c5:f4:12:b2:16:61:d9:32:46:aa:58:6b:8e:
                    a8:32:8a:f7:90:30:dc:a6:07:c1:d3:af:11:9c:72:
                    4c:3b:3a:6b:b1:5e:ce:4d:32:5e:db:a0:f3:46:03:
                    9e:98:61:ab:fe:4f:de:e7:39:8c:87:3a:ba:a9:57:
                    54:f6:b5:63:c6:f6:14:30:0a:75:e3:1f:06:9f:13:
                    af:65:fd:b5:33:ec:28:5c:a7:d1:5b:ce:f2:e8:ef:
                    cb:db:ac:9f:4b:ab:8c:98:e9:c4:13:04:92:7c:db:
                    35:ef:7c:13:3e:f4:6b:7f:67:a8:42:8d:36:32:b5:
                    00:22:2c:ae:76:80:4b:91:f5:2d:82:1f:2b:35:32:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:6B:DD:06:83:E5:43:76:BC:BE:4B:DD:5B:F5:54:05:26:39:0F
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138372e38372e36342e302f32302d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:96:3b:da:bc:e7:51:b0:e8:eb:26:a8:4d:e7:b0:11:0c:df:
         dc:65:8c:41:5f:1b:a0:77:5a:bb:c1:db:13:49:eb:74:ad:95:
         49:0a:f1:c1:06:6a:ab:c8:81:08:26:78:3a:d0:2b:d3:84:c0:
         61:80:60:cf:b8:82:32:b8:d4:44:b3:69:15:3c:ba:0f:a7:3f:
         02:00:7f:1a:d1:d0:7c:a1:5b:a4:3e:54:0b:05:f5:1a:28:80:
         f1:47:18:c0:12:a3:4e:f1:ce:25:d7:d3:24:5e:f3:b1:7a:1b:
         b1:16:41:69:5f:c2:96:ef:2f:b4:92:ac:73:25:34:08:22:c4:
         0b:60:0e:c7:92:dc:f4:01:86:bd:08:fe:9a:dc:1d:45:69:4f:
         ef:38:fd:86:fc:9f:86:f1:91:ea:4d:39:1e:00:cb:00:87:67:
         5f:a7:84:46:40:a5:d0:47:68:5a:0a:f2:90:1d:bb:35:a4:a1:
         3f:2b:45:dc:95:02:fd:9e:e9:a1:e6:69:3f:94:83:11:65:6e:
         5a:c1:17:da:4a:2b:68:d0:b4:22:9b:c0:e4:f2:83:d7:5c:6a:
         78:61:df:6e:07:e3:ab:2c:9f:06:d1:27:a9:d5:ed:a6:fd:52:
         70:f7:f6:e8:0c:30:e0:40:da:af:5b:5b:27:1c:4f:18:2d:36:
         97:29:6d:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaGRaX6wjOVEFxI4/xdBcweqGya8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUy
MTM1Q0Q5ODAeFw0yNDA3MDgxOTM4MDVaFw0yNTA3MDcxOTQzMDVaMDMxMTAvBgNV
BAMTKEY0RUI2QkREMDY4M0U1NDM3NkJDQkU0QkRENUJGNTU0MDUyNjM5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMAhKkr+4oSppo0QwHeA6diYy
i4uWxOpNSvBzkiNdIu3yikkHtRdIs7PJ4akdGRc0XJfupsVUen4woODW/Qk31fc0
oxd4zFXnO5PfEUUgjcdBokYm2ZaLSG5/bIMFw/BM016ZfRHjoiisT4X1K8DPq6zG
Cj+zN7zIxfQSshZh2TJGqlhrjqgyiveQMNymB8HTrxGcckw7OmuxXs5NMl7boPNG
A56YYav+T97nOYyHOrqpV1T2tWPG9hQwCnXjHwafE69l/bUz7Chcp9FbzvLo78vb
rJ9Lq4yY6cQTBJJ82zXvfBM+9Gt/Z6hCjTYytQAiLK52gEuR9S2CHys1MlAPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9Otr3QaD5UN2vL5L3Vv1VAUmOQ8wHwYDVR0j
BBgwFoAUDeuS8zB7DpTMcNmyG1D2/iE1zZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMi8wREVCOTJGMzMwN0IwRTk0Q0M3MEQ5QjIxQjUwRjZGRTIxMzVDRDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERUI5MkYzMzA3QjBFOTRD
QzcwRDlCMjFCNTBGNkZFMjEzNUNEOTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIv
MzEzODM3MmUzODM3MmUzNjM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLtXQDANBgkqhkiG9w0BAQsFAAOCAQEAN5Y72rznUbDo
6yaoTeewEQzf3GWMQV8boHdau8HbE0nrdK2VSQrxwQZqq8iBCCZ4OtAr04TAYYBg
z7iCMrjURLNpFTy6D6c/AgB/GtHQfKFbpD5UCwX1GiiA8UcYwBKjTvHOJdfTJF7z
sXobsRZBaV/Clu8vtJKscyU0CCLEC2AOx5Lc9AGGvQj+mtwdRWlP7zj9hvyfhvGR
6k05HgDLAIdnX6eERkCl0EdoWgrykB27NaShPytF3JUC/Z7poeZpP5SDEWVuWsEX
2koraNC0IpvA5PKD11xqeGHfbgfjqyyfBtEnqdXtpv1ScPf26Aww4EDar1tbJxxP
GC02lyltEA==
-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org