Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230302e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3230302e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          DxioDSGR0PTkO/4jLNG6iJkPxUQxDOAbcHNj+CO6HlU=
Subject key identifier:   92:32:81:0E:C7:53:C9:A9:B0:15:C8:7B:BF:04:FB:04:ED:7A:26:70
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       0AF237EDC2E2DFD9C0A373DBDEA78C329651728D
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230302e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:45 +0000
ROA not before:           Wed 03 Apr 2024 22:07:45 +0000
ROA not after:            Wed 02 Apr 2025 22:12:45 +0000
asID:                     52973
IP address blocks:        186.216.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f2:37:ed:c2:e2:df:d9:c0:a3:73:db:de:a7:8c:32:96:51:72:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:45 2024 GMT
            Not After : Apr  2 22:12:45 2025 GMT
        Subject: CN=9232810EC753C9A9B015C87BBF04FB04ED7A2670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:04:3e:45:d5:b6:e5:18:0b:50:cc:df:85:
                    df:5c:cd:c2:d1:5d:63:73:b5:f0:03:ab:de:97:72:
                    b2:a0:1b:24:56:5e:de:4b:e7:be:39:24:52:ca:3d:
                    a1:4a:25:e4:70:3d:4e:7a:42:8b:f0:a3:d2:6a:59:
                    d7:45:92:06:65:bf:29:62:4a:64:d2:f0:6a:75:6c:
                    b9:bb:c7:ba:7d:6b:92:21:c1:24:0e:9e:06:61:ec:
                    09:0a:af:cf:c8:6b:8a:b5:47:3d:c7:f3:b6:3f:35:
                    6a:14:1f:98:69:23:fb:a9:17:46:8d:b3:29:d4:a9:
                    83:18:f8:27:cc:68:e5:6d:31:94:1f:e2:cb:af:53:
                    a0:e0:9a:ff:87:3e:33:d7:7b:46:d4:f0:3e:4b:0d:
                    40:f8:fa:03:0f:3b:a5:4f:36:f5:e2:38:d6:e1:92:
                    4f:74:5b:b9:56:c7:08:4f:93:ed:a3:92:61:c4:fc:
                    13:24:6a:b5:29:bc:55:c8:a6:5b:f2:a9:c5:69:25:
                    8d:80:89:76:3d:d7:67:f8:8b:2d:43:3d:fa:af:70:
                    3d:ab:3f:0e:e8:16:af:5e:c7:df:82:64:64:07:8a:
                    81:aa:a0:96:b1:8e:cb:e0:aa:79:c7:0e:bc:07:27:
                    43:c9:07:33:3a:2d:0b:fe:c8:f5:4f:f1:4c:5e:3e:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:32:81:0E:C7:53:C9:A9:B0:15:C8:7B:BF:04:FB:04:ED:7A:26:70
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230302e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:2d:11:c4:19:d9:f3:7e:17:4d:03:6f:8e:bd:c4:85:e2:
         31:b3:cc:9e:99:3e:93:b7:47:80:96:39:e7:8a:af:fc:bc:3e:
         a1:eb:58:7c:e8:06:c7:43:0a:98:a3:12:b8:e0:81:c7:b9:be:
         de:c6:b7:c7:d5:7d:f9:48:a5:ac:77:7f:22:b1:b3:44:2a:df:
         c0:f2:46:4e:87:fc:8a:bb:1b:aa:15:7c:3d:75:f8:4e:35:61:
         f7:6a:a8:99:95:5a:08:38:51:08:29:2e:f6:43:f3:dc:f2:df:
         22:18:ce:65:8e:50:b8:87:a3:9a:bb:f0:bd:31:4b:1a:20:fd:
         00:ec:fb:24:2b:09:b1:0c:5d:f5:d3:ed:e2:8a:bd:41:6b:46:
         5b:e7:99:f6:45:4c:a2:1b:2e:44:5d:16:77:31:1f:66:06:a0:
         87:39:7e:f2:a5:87:8d:9a:e1:1a:f0:01:27:8b:bb:e9:81:a0:
         3b:68:cb:55:65:54:2b:cf:47:c6:e9:17:d3:79:4b:7a:f4:e4:
         eb:33:e2:4e:9d:aa:31:4e:dc:2e:10:26:1b:d8:77:18:d7:db:
         fe:49:21:a6:d5:78:b9:88:52:02:77:3b:5f:37:06:0a:04:58:
         e0:d6:98:16:d0:22:19:fd:00:f7:f0:97:e8:e5:fd:9a:d3:fb:
         d6:39:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:42 2024 by rpki-client on console-ams.rpki-client.org