Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139322e302f32312d3231203d3e203532393733.roa
File:                     3138362e3231362e3139322e302f32312d3231203d3e203532393733.roa (raw, json)
Hash identifier:          byJZQKfgFKlxvF4OQUBB0H66Y/Aua7RRPn6XCxiWcgI=
Subject key identifier:   69:FE:1C:2A:D2:1A:16:9D:32:12:F0:52:9B:04:84:ED:BD:80:9D:4A
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       3048FF46D6F5859F73580BF0CEA6FA28294606A4
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139322e302f32312d3231203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:49 +0000
ROA not before:           Wed 03 Apr 2024 22:07:49 +0000
ROA not after:            Wed 02 Apr 2025 22:12:49 +0000
asID:                     52973
IP address blocks:        186.216.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:48:ff:46:d6:f5:85:9f:73:58:0b:f0:ce:a6:fa:28:29:46:06:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:49 2024 GMT
            Not After : Apr  2 22:12:49 2025 GMT
        Subject: CN=69FE1C2AD21A169D3212F0529B0484EDBD809D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:a1:8a:96:45:db:9c:7f:e1:cb:1c:8e:23:
                    5a:0a:7d:31:77:6a:1f:ab:27:10:76:91:13:13:5e:
                    30:96:0a:bd:3d:81:2f:30:40:eb:20:2d:64:37:94:
                    d4:19:a2:0e:17:71:69:57:a6:0d:be:dc:35:f4:45:
                    d2:f1:e9:c9:9d:95:60:53:80:4f:02:f6:2b:c4:5c:
                    77:1d:ce:de:f1:e2:ce:91:cf:86:d2:e8:8e:ff:e8:
                    a2:ee:25:e6:d7:a8:6a:79:50:03:55:32:8a:d9:5f:
                    3e:1c:e8:93:cb:8b:bd:c6:65:db:4f:62:18:d8:0f:
                    a2:ab:c1:68:70:e1:f8:36:e6:ac:8a:d2:eb:07:93:
                    08:93:62:66:fa:fd:6b:fd:d6:cc:ac:f4:f4:76:bf:
                    2b:7f:2e:7c:f2:62:a6:44:12:39:11:b0:c3:19:26:
                    6d:89:06:3a:ff:02:b6:74:f4:c9:b2:e7:32:ba:5b:
                    0f:0b:8d:1b:f4:79:f6:39:95:30:36:60:34:30:f8:
                    03:df:0f:7f:4f:b5:0d:a9:9b:59:03:c9:92:1e:2e:
                    95:3c:bc:46:aa:a5:95:a9:9b:42:03:a9:6c:5f:2e:
                    05:ed:9f:92:d1:a6:b2:fb:fa:af:e8:31:f0:93:dc:
                    39:37:95:0f:33:21:87:00:7a:9e:05:51:02:a0:4a:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FE:1C:2A:D2:1A:16:9D:32:12:F0:52:9B:04:84:ED:BD:80:9D:4A
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139322e302f32312d3231203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:9b:db:e1:80:5c:83:a3:57:44:66:5b:61:40:a1:d7:25:50:
         1f:78:92:25:22:a2:2e:91:0e:82:47:ce:9e:60:b3:c8:db:a1:
         8b:e2:a1:3f:4b:7a:18:5f:a5:c3:59:2b:5d:72:82:3c:e5:f6:
         62:d1:78:40:af:3f:c1:fc:e4:dc:8d:3c:44:3d:0d:25:91:70:
         bb:5e:d5:83:d7:be:cb:f1:19:5a:8c:1b:23:13:2c:01:81:ed:
         60:f4:78:24:8b:d0:e4:b4:37:6e:f2:e0:c3:ab:02:69:fc:90:
         7c:07:0a:fb:ce:9d:0d:64:49:06:a1:c0:6f:5a:db:f9:98:b8:
         f7:a4:ba:d1:e6:ed:89:1c:73:fb:8f:38:ec:32:ea:e0:b5:a1:
         41:c1:06:42:bc:f9:f9:4e:7b:32:8e:af:54:0b:a2:28:db:75:
         47:3c:e5:bc:5f:34:8c:3a:d4:d6:39:da:b7:33:20:18:32:0e:
         33:35:a6:30:b5:7d:54:ee:92:f8:06:fe:c9:e7:32:b5:b4:26:
         8c:85:a1:22:b3:a0:f9:7d:79:b7:b9:f7:cd:99:f8:d0:e3:5f:
         ba:9c:d1:92:ab:75:9d:ce:aa:82:ac:5a:df:88:8a:f9:d1:f4:
         61:27:35:b3:83:e6:6a:e5:8d:8f:aa:d5:61:f2:8b:a5:07:27:
         bf:52:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:42 2024 by rpki-client on console-ams.rpki-client.org