Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa
File:                     3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa (raw, json)
Hash identifier:          jGlanV1STMG/Oej0R2lWzWlGqA/cXJ7fD5UHhw7TmPo=
Subject key identifier:   C2:EC:49:E1:D8:1F:17:4B:25:37:9F:A2:7B:27:5F:41:17:D9:1D:44
Certificate issuer:       /CN=960B59E054F187A995D7F6038A0BA2336525F190
Certificate serial:       5F95377931CC99B845587D7A918F8C3F902BBA92
Authority key identifier: 96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa
Signing time:             Tue 03 Dec 2024 21:39:36 +0000
ROA not before:           Tue 03 Dec 2024 21:34:36 +0000
ROA not after:            Tue 02 Dec 2025 21:39:36 +0000
asID:                     52973
IP address blocks:        186.216.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:95:37:79:31:cc:99:b8:45:58:7d:7a:91:8f:8c:3f:90:2b:ba:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960B59E054F187A995D7F6038A0BA2336525F190
        Validity
            Not Before: Dec  3 21:34:36 2024 GMT
            Not After : Dec  2 21:39:36 2025 GMT
        Subject: CN=C2EC49E1D81F174B25379FA27B275F4117D91D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:03:f2:ac:4a:db:b3:fa:d7:e8:cd:6a:19:
                    f1:d4:8a:68:be:58:79:42:7c:34:0e:3d:c3:e7:6c:
                    dd:97:fd:8f:27:f5:a1:49:81:fe:69:3c:8b:db:a5:
                    1d:87:89:db:2b:53:f6:96:ea:bf:36:aa:86:f4:e7:
                    36:5c:b4:b7:25:ee:ff:b6:aa:35:2b:d5:26:d9:5b:
                    50:59:63:6d:c1:8a:40:fa:87:1e:b0:f4:86:a0:e0:
                    53:c0:cd:f5:47:20:78:ee:cc:ea:14:63:59:b7:95:
                    10:8c:fd:62:c9:5b:19:1b:47:00:0b:d8:08:35:d4:
                    3e:54:0a:76:16:97:5c:bc:fb:97:d8:71:67:72:7d:
                    38:30:34:b2:e8:4a:f8:46:aa:d1:d8:2d:48:a3:74:
                    ef:e6:39:29:13:78:39:26:91:70:c2:1b:ca:a5:18:
                    2b:95:a3:0a:13:e2:eb:87:d7:bf:04:3c:6b:4d:40:
                    25:d9:a8:45:b1:63:04:a1:fe:20:1b:5b:98:dc:9a:
                    18:e5:fe:71:93:40:6f:91:58:88:78:c2:ad:f3:e9:
                    5b:90:e2:48:70:1c:c7:76:4d:c2:af:36:86:73:15:
                    c7:fa:e5:f7:21:b0:e4:1e:cc:9c:2a:d5:99:01:9e:
                    28:72:99:e4:bc:ed:a4:93:1c:cb:1d:ee:14:db:99:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EC:49:E1:D8:1F:17:4B:25:37:9F:A2:7B:27:5F:41:17:D9:1D:44
            X509v3 Authority Key Identifier:
                keyid:96:0B:59:E0:54:F1:87:A9:95:D7:F6:03:8A:0B:A2:33:65:25:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/960B59E054F187A995D7F6038A0BA2336525F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960B59E054F187A995D7F6038A0BA2336525F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:e2:01:52:8b:64:45:7e:50:85:8a:32:82:5b:a3:2a:67:
         ab:4e:2f:11:b0:1c:26:e1:42:fb:47:12:6a:c2:33:c2:5f:20:
         23:b4:98:5f:4d:76:01:00:f6:0b:b9:7e:8a:d0:98:9a:ba:37:
         52:60:26:c8:a4:d7:b1:e2:de:54:43:d6:28:56:e2:8a:67:8e:
         e5:5d:da:f4:ec:4e:e5:70:77:54:24:f5:b1:9a:61:03:7b:5a:
         12:6e:d8:ba:ea:bd:bb:50:83:4d:cc:64:e0:24:d0:6c:16:dc:
         1e:75:15:8d:a8:08:8d:9a:00:ad:59:8e:ce:9d:9f:22:a6:75:
         c1:bd:1a:92:a4:ea:f7:39:98:c0:da:74:52:3b:c1:e6:94:71:
         7f:4b:69:ef:06:48:fa:82:83:a3:dd:c7:c1:46:92:6b:55:50:
         c7:24:bb:c7:f5:35:c6:38:47:87:a4:04:89:e3:86:5c:9c:00:
         05:e0:c2:66:6d:8c:1e:2b:24:37:4b:1a:60:8f:23:02:4c:09:
         d5:d8:85:6a:10:5e:f1:a1:4a:9b:6b:2d:47:3d:75:15:8d:35:
         1c:22:cc:cf:d1:fb:8a:e4:3c:c5:03:28:31:f7:6b:94:b1:a0:
         b1:09:04:d6:eb:c3:50:48:af:7a:b3:82:75:1a:59:54:df:8f:
         f7:61:16:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX5U3eTHMmbhFWH16kY+MP5ArupIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYwQjU5RTA1NEYxODdBOTk1RDdGNjAzOEEwQkEyMzM2
NTI1RjE5MDAeFw0yNDEyMDMyMTM0MzZaFw0yNTEyMDIyMTM5MzZaMDMxMTAvBgNV
BAMTKEMyRUM0OUUxRDgxRjE3NEIyNTM3OUZBMjdCMjc1RjQxMTdEOTFENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiQPyrErbs/rX6M1qGfHUimi+
WHlCfDQOPcPnbN2X/Y8n9aFJgf5pPIvbpR2HidsrU/aW6r82qob05zZctLcl7v+2
qjUr1SbZW1BZY23BikD6hx6w9Iag4FPAzfVHIHjuzOoUY1m3lRCM/WLJWxkbRwAL
2Ag11D5UCnYWl1y8+5fYcWdyfTgwNLLoSvhGqtHYLUijdO/mOSkTeDkmkXDCG8ql
GCuVowoT4uuH178EPGtNQCXZqEWxYwSh/iAbW5jcmhjl/nGTQG+RWIh4wq3z6VuQ
4khwHMd2TcKvNoZzFcf65fchsOQezJwq1ZkBnihymeS87aSTHMsd7hTbmZTtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwuxJ4dgfF0slN5+ieydfQRfZHUQwHwYDVR0j
BBgwFoAUlgtZ4FTxh6mV1/YDiguiM2Ul8ZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXVZSkpLWjdnQThNZXJTTVlvZjdNYlFON1kzaDloWllrNWJaU0JhYnRL
WHEvMC85NjBCNTlFMDU0RjE4N0E5OTVEN0Y2MDM4QTBCQTIzMzY1MjVGMTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MEI1OUUwNTRGMTg3QTk5
NUQ3RjYwMzhBMEJBMjMzNjUyNUYxOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F1WUpKS1o3Z0E4TWVyU01Zb2Y3TWJRTjdZM2g5aFpZazViWlNCYWJ0S1hxLzAv
MzEzODM2MmUzMjMxMzYyZTMxMzkzMjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1
MzIzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS62MAwDQYJKoZIhvcNAQELBQADggEBAIC24gFS
i2RFflCFijKCW6MqZ6tOLxGwHCbhQvtHEmrCM8JfICO0mF9NdgEA9gu5forQmJq6
N1JgJsik17Hi3lRD1ihW4opnjuVd2vTsTuVwd1Qk9bGaYQN7WhJu2LrqvbtQg03M
ZOAk0GwW3B51FY2oCI2aAK1Zjs6dnyKmdcG9GpKk6vc5mMDadFI7weaUcX9Lae8G
SPqCg6Pdx8FGkmtVUMcku8f1NcY4R4ekBInjhlycAAXgwmZtjB4rJDdLGmCPIwJM
CdXYhWoQXvGhSptrLUc9dRWNNRwizM/R+4rkPMUDKDH3a5SxoLEJBNbrw1BIr3qz
gnUaWVTfj/dhFvo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:33 2025 by rpki-client