Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139332e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3139332e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          qyt+DfmfukIAxDJphlLGzW9oHeBtcwQLzHzT8O1zzps=
Subject key identifier:   E4:E1:9F:39:48:82:26:24:3D:6C:96:7B:8A:C8:58:23:02:A7:8F:BC
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       5A22FF1C8EE54612620F5D72BF36B573AFCADFDB
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139332e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:49 +0000
ROA not before:           Wed 03 Apr 2024 22:07:49 +0000
ROA not after:            Wed 02 Apr 2025 22:12:49 +0000
asID:                     52973
IP address blocks:        186.216.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:22:ff:1c:8e:e5:46:12:62:0f:5d:72:bf:36:b5:73:af:ca:df:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:49 2024 GMT
            Not After : Apr  2 22:12:49 2025 GMT
        Subject: CN=E4E19F39488226243D6C967B8AC8582302A78FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:81:ac:b5:c1:c7:bd:6f:d9:25:0c:6e:a2:
                    00:22:b0:fd:69:88:5d:57:db:1e:48:0d:ab:23:82:
                    91:66:31:0d:c0:ca:d0:7a:cc:13:48:98:77:6a:32:
                    e8:90:3d:91:e1:38:02:33:bf:9e:8f:38:7f:92:c3:
                    51:30:d3:a1:b4:8e:24:80:1a:a5:3e:7a:79:e7:46:
                    55:91:0d:ab:14:f0:84:6a:1a:7e:43:c0:ed:e1:90:
                    c8:df:da:be:a3:9d:4f:ef:46:6e:a1:88:1a:4c:ef:
                    5c:ca:4d:4c:4c:7a:4c:78:85:f6:ac:17:9e:cd:6f:
                    c2:56:0b:49:40:b3:19:a5:26:6f:bc:21:31:52:fb:
                    64:ba:a8:ec:41:9a:be:2a:bb:ff:1c:10:66:6e:7c:
                    dd:64:15:26:79:8f:53:62:dc:f9:d2:44:59:7e:75:
                    cd:08:ec:72:3b:30:4b:f5:8d:b2:99:22:56:d1:a7:
                    b1:56:5e:56:a0:c8:4d:87:7a:b8:10:fa:65:82:eb:
                    c7:3f:27:27:92:9a:b1:83:7d:98:26:19:4c:c0:4d:
                    c0:98:03:4b:c8:d1:04:31:fe:ef:a2:33:49:49:47:
                    d6:4f:53:bd:88:33:a6:b6:25:62:c3:97:ee:e5:71:
                    8b:15:45:51:88:63:81:ae:48:5a:4f:0c:69:ea:f1:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:9F:39:48:82:26:24:3D:6C:96:7B:8A:C8:58:23:02:A7:8F:BC
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139332e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:13:f0:4c:1d:1b:86:b1:c0:7f:81:94:ff:55:aa:06:6a:
         c6:55:4b:9f:a2:9c:08:81:d4:50:14:2b:78:36:f0:34:e1:d6:
         46:f4:a7:d4:fe:2f:95:41:d6:8f:8c:26:71:28:06:41:d1:0d:
         88:c9:83:cc:37:04:6a:d8:be:4b:25:f0:16:d1:d0:96:a6:73:
         d9:6b:91:5e:d0:cc:d2:bd:7e:7d:de:f7:f5:d6:0b:01:71:62:
         7b:bc:00:f7:de:5c:c7:80:44:59:7c:7e:17:0a:35:b5:cb:e6:
         5e:75:c4:d8:da:fd:8b:40:7c:c4:70:eb:c2:07:af:f5:22:cb:
         d8:99:2d:d3:2d:2d:bc:f3:d3:cb:fe:88:b8:20:e8:5d:45:71:
         bd:0a:7f:ec:d4:6c:7c:65:e3:a6:95:23:47:5b:16:cd:e0:75:
         4e:98:5d:27:a2:7a:ec:a5:54:ed:6f:cc:6a:09:fe:00:6b:b0:
         41:82:ca:a8:4e:24:d5:7f:e8:81:a2:01:a0:ba:6c:7e:88:ed:
         b9:ba:f7:77:06:22:e3:30:99:05:78:42:be:7a:ae:15:e2:54:
         73:22:00:9b:b3:50:45:48:4b:bd:a2:20:c1:1c:4f:91:cd:5d:
         9b:e7:dc:f8:21:0e:4d:f1:b5:66:28:df:f9:52:a7:e4:41:08:
         69:1d:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:42 2024 by rpki-client on console-ams.rpki-client.org