Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139342e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3139342e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          PVAOrkkoNLTX3vPJDTVYwlYCQsGoBy4thV4RRWQk8Wo=
Subject key identifier:   BA:16:9C:75:1F:34:07:ED:DF:9C:EF:A7:33:29:9F:B1:0E:40:94:27
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       136801C682B7DB10ACFF637628CD6E6D266C7C9D
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139342e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:45 +0000
ROA not before:           Wed 03 Apr 2024 22:07:45 +0000
ROA not after:            Wed 02 Apr 2025 22:12:45 +0000
asID:                     52973
IP address blocks:        186.216.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:68:01:c6:82:b7:db:10:ac:ff:63:76:28:cd:6e:6d:26:6c:7c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:45 2024 GMT
            Not After : Apr  2 22:12:45 2025 GMT
        Subject: CN=BA169C751F3407EDDF9CEFA733299FB10E409427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:51:5c:4b:05:73:f9:cd:50:4e:a9:d3:fd:
                    a7:55:ec:f3:d7:74:24:cc:c6:2f:13:b3:48:5f:1e:
                    7b:cc:e5:bd:67:73:77:2f:80:33:3a:cc:20:7f:58:
                    a2:80:51:ff:14:a5:fa:b3:da:1c:0b:6b:87:9c:62:
                    c4:0b:62:34:51:ac:07:a9:fb:f9:b1:c0:20:12:fa:
                    71:36:ea:ba:85:4e:8b:e7:a3:93:ad:5d:22:05:ca:
                    3c:bd:7e:a0:49:0e:b4:4f:73:42:10:a8:f5:69:53:
                    48:d6:2a:0b:ce:18:cf:cb:28:ae:8f:ec:c1:df:05:
                    79:b3:14:f7:ec:24:3f:6d:27:3f:92:6a:c9:ba:8d:
                    04:05:3c:43:be:f6:94:af:62:d7:36:51:28:d2:6d:
                    7d:79:3f:15:f9:f2:dc:ba:d2:16:dd:d0:34:57:be:
                    12:85:c3:3c:fc:4d:66:ab:94:93:0b:85:8f:4a:13:
                    a5:23:74:69:63:e9:d3:e6:c9:2d:b5:0b:0f:a3:07:
                    c6:17:5d:5d:64:d2:43:fa:24:3e:17:49:05:5b:a6:
                    d1:d2:a6:60:81:8a:8f:2b:2d:3e:0f:ef:bf:ab:93:
                    48:8c:b4:78:6a:91:46:81:d1:74:35:5e:01:d5:e8:
                    e0:43:23:86:e7:30:45:b6:30:37:ac:e9:d7:33:34:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:9C:75:1F:34:07:ED:DF:9C:EF:A7:33:29:9F:B1:0E:40:94:27
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3139342e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:52:33:c8:a2:d1:3e:50:4c:e7:57:7c:6e:4a:cc:20:9b:79:
         fb:23:46:e5:9b:a1:86:df:bb:88:5d:9b:99:ec:4e:69:46:b3:
         61:d0:12:cb:44:90:f6:93:ee:5e:41:12:ea:01:3e:43:86:a5:
         5d:70:cf:e2:1a:63:bd:57:73:f4:e0:78:00:60:47:d4:f9:cf:
         83:ee:79:48:b4:00:5d:62:cb:d0:43:3d:72:84:2a:6d:4e:2c:
         42:92:41:45:e5:aa:95:47:35:d5:da:de:92:40:0d:71:1a:62:
         ca:b9:30:0b:83:6d:0f:5a:d2:51:e5:a6:9b:d9:94:73:73:d1:
         89:9b:9d:4f:d2:5a:58:c8:99:25:8a:3d:c6:a3:35:0a:d2:ab:
         ee:68:72:cf:e8:66:ff:a2:40:e1:cc:e2:c5:fe:d1:a3:42:f6:
         49:6b:1e:43:d5:f2:ca:bf:6f:d0:6b:84:6d:de:dd:2d:6a:db:
         86:c5:64:ec:20:99:e3:dd:9c:66:81:dc:19:4f:e8:39:9f:2e:
         d2:a7:b8:dc:6e:50:8c:40:19:4e:cd:b2:fb:ba:45:2f:f4:91:
         4d:fd:25:3f:5a:de:b3:f5:eb:36:05:94:5b:cb:16:c2:e2:04:
         6a:c5:37:5a:79:0f:e2:da:73:66:a3:96:7e:72:ec:91:de:ef:
         01:8e:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:59 2024 by rpki-client on console-fra.rpki-client.org