Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa
File:                     3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa (raw, json)
Hash identifier:          sd5+imiVfUbOyMdJa13phn2008DHbTNTQlk6OO2krQE=
Subject key identifier:   0D:0B:E2:DE:A7:28:DB:DA:B4:C8:1E:AA:0E:C3:3A:1C:BB:BE:95:F8
Certificate issuer:       /CN=1D96E2AEEEC9571D0104A22D42310F31CFCA81C8
Certificate serial:       3A23FF36D8905F15632FE768E434CB51B1C99F22
Authority key identifier: 1D:96:E2:AE:EE:C9:57:1D:01:04:A2:2D:42:31:0F:31:CF:CA:81:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa
Signing time:             Wed 23 Oct 2024 00:45:04 +0000
ROA not before:           Wed 23 Oct 2024 00:40:04 +0000
ROA not after:            Wed 22 Oct 2025 00:45:04 +0000
asID:                     52973
IP address blocks:        186.216.192.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:23:ff:36:d8:90:5f:15:63:2f:e7:68:e4:34:cb:51:b1:c9:9f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D96E2AEEEC9571D0104A22D42310F31CFCA81C8
        Validity
            Not Before: Oct 23 00:40:04 2024 GMT
            Not After : Oct 22 00:45:04 2025 GMT
        Subject: CN=0D0BE2DEA728DBDAB4C81EAA0EC33A1CBBBE95F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:05:29:2f:d3:54:8a:1d:85:cb:61:d9:de:
                    d0:ce:e5:70:44:42:c0:e2:74:ca:40:fa:46:0b:2b:
                    74:af:75:a1:8d:d0:3a:53:73:9d:05:12:dc:37:0b:
                    bd:79:78:95:12:a6:41:e9:06:78:83:4a:7d:80:fe:
                    8b:01:cf:af:7b:61:94:a4:25:9f:0d:6f:45:b1:b9:
                    97:25:a6:d9:ed:e1:e1:9b:da:e3:12:90:da:7e:93:
                    9f:39:12:34:d3:40:f7:00:29:69:be:ae:1a:14:4c:
                    84:36:eb:18:c4:01:67:36:a5:3e:83:8a:d6:e7:b4:
                    c4:77:4c:f1:e4:01:01:45:b8:fb:01:53:41:76:54:
                    40:d8:60:ee:be:41:29:35:ff:9e:37:5b:1c:00:71:
                    e6:9a:ec:93:d1:75:a6:84:54:04:4e:42:eb:68:31:
                    66:fc:4b:92:47:c0:c0:cc:09:24:ed:41:b3:8f:86:
                    e5:53:cc:fe:e1:a4:c9:cb:54:0c:09:e9:68:b0:0c:
                    63:74:46:1b:bb:dd:eb:38:f1:ed:c3:cc:05:4a:df:
                    6f:4a:b7:a0:69:fd:ee:65:19:6d:28:a0:9f:73:46:
                    e7:b6:a8:ce:d9:f0:8a:9c:fe:4c:ef:58:3d:bb:4a:
                    86:ce:ab:7f:9d:ed:88:95:fe:62:2e:ba:6c:0e:1a:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0B:E2:DE:A7:28:DB:DA:B4:C8:1E:AA:0E:C3:3A:1C:BB:BE:95:F8
            X509v3 Authority Key Identifier:
                keyid:1D:96:E2:AE:EE:C9:57:1D:01:04:A2:2D:42:31:0F:31:CF:CA:81:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/3138362e3231362e3139322e302f32302d3332203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:4a:a8:53:82:49:12:ef:c8:44:77:b4:88:35:5a:70:20:
         4d:ab:21:47:41:4f:5d:2e:a4:93:e3:43:95:bf:d8:bb:78:91:
         62:15:ee:7c:86:5f:b4:a2:44:78:79:dc:8a:36:60:e5:ec:df:
         f7:4f:e3:e4:64:30:cd:d8:57:d1:9a:0c:f8:e3:4b:3d:c8:b9:
         e0:58:78:e7:62:76:76:38:c4:00:ca:00:c6:9f:2e:cc:0e:df:
         eb:28:8b:20:f8:59:13:1a:df:d8:94:1e:4b:fc:39:96:fa:44:
         59:50:26:14:a5:76:da:28:e1:15:2a:58:5d:f1:e2:c5:4a:45:
         f8:24:5a:9d:5d:c5:87:68:70:ba:fe:d3:06:28:fc:f9:bd:63:
         31:a0:a3:88:6a:58:fe:93:b1:87:ab:18:43:b6:a4:d2:88:76:
         cf:5d:1c:29:32:10:ce:77:61:8f:97:f8:5c:da:17:f3:9d:40:
         83:22:a6:bd:fa:a5:c4:dc:d8:2a:f4:05:0c:a6:67:6e:ed:54:
         0c:f8:ff:28:c0:bc:ee:55:dd:0a:34:9d:86:4c:db:07:77:db:
         7a:82:cb:25:f3:1f:48:44:8e:12:de:44:44:fb:18:42:3b:c4:
         f2:2f:75:42:6d:2b:9d:03:7c:4a:6e:e0:23:b5:b9:5c:0b:2f:
         84:5c:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:53 2024 by rpki-client on console-fra.rpki-client.org