Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230322e302f32332d3233203d3e203532393733.roa
File:                     3138362e3231362e3230322e302f32332d3233203d3e203532393733.roa (raw, json)
Hash identifier:          MuVTQNMegJX98GcqLhpG/GWFttlNgYAFTY/4LjYiAR4=
Subject key identifier:   A9:46:E0:78:9C:6D:48:A7:FE:17:95:62:C9:53:B0:4F:A6:7E:80:BC
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       03A784B540CB21A0DFCB712651E4949763F064CA
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230322e302f32332d3233203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:50 +0000
ROA not before:           Wed 03 Apr 2024 22:07:50 +0000
ROA not after:            Wed 02 Apr 2025 22:12:50 +0000
asID:                     52973
IP address blocks:        186.216.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:84:b5:40:cb:21:a0:df:cb:71:26:51:e4:94:97:63:f0:64:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:50 2024 GMT
            Not After : Apr  2 22:12:50 2025 GMT
        Subject: CN=A946E0789C6D48A7FE179562C953B04FA67E80BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:74:99:d6:99:d7:34:84:33:2a:c8:01:9c:
                    1c:8f:bc:8c:1e:40:61:03:d5:40:1a:29:be:17:74:
                    95:68:69:2e:82:09:f2:5b:3e:b5:05:bb:60:03:f0:
                    11:6a:81:98:32:33:af:49:7a:46:ce:86:5d:ff:40:
                    58:96:01:51:44:ac:3d:be:98:f5:56:a3:fa:79:bd:
                    7d:c3:2d:55:36:01:ad:d6:e2:4b:9a:eb:7d:33:59:
                    06:df:67:57:74:69:e6:d0:77:dd:05:46:c3:aa:78:
                    07:57:a0:26:eb:06:d7:36:98:b6:88:8c:a4:b0:65:
                    a0:5a:2f:94:53:83:15:1e:1b:b1:46:32:d6:db:96:
                    1d:0b:70:2d:7d:35:da:82:80:87:ee:24:08:b7:ab:
                    89:8d:4d:01:d7:67:53:dc:b1:f7:e9:46:7a:c8:46:
                    69:7f:85:5b:b5:9d:23:06:af:60:fc:f0:4c:a3:ed:
                    e2:29:44:bb:9b:93:08:09:00:f9:d6:13:04:ef:64:
                    9e:bd:27:3d:4c:25:61:e0:a3:ea:8e:86:06:7f:14:
                    e0:15:35:48:e7:42:e8:3d:91:18:7e:1a:c3:b7:45:
                    83:ac:01:50:6d:fa:e5:8d:e7:e7:6d:43:dc:e5:7f:
                    00:2e:7d:11:cb:28:ee:d3:de:a8:c1:3d:80:2f:7e:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:46:E0:78:9C:6D:48:A7:FE:17:95:62:C9:53:B0:4F:A6:7E:80:BC
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230322e302f32332d3233203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:f9:a6:11:07:e8:17:73:c6:24:85:a7:29:8c:be:60:66:
         25:79:b9:45:56:af:76:6e:b8:75:10:9d:81:6d:5b:79:24:bd:
         29:02:c7:4b:8a:09:80:a1:a5:6d:d8:4f:e5:cb:1a:e8:f3:7a:
         54:2c:7e:b0:9c:a8:d3:5f:51:3c:20:9e:33:07:f1:2d:57:d7:
         17:a0:1e:1a:88:15:0f:63:23:74:c3:d3:e0:02:c8:a0:5d:4e:
         48:62:5e:b2:84:3d:03:01:b6:d4:1b:12:5c:c5:be:d8:b5:02:
         5a:27:ce:7f:3c:47:23:a2:b9:64:d8:3a:f4:21:dc:0b:7e:49:
         ee:5c:c4:83:44:9e:63:85:51:7b:ea:26:32:b4:38:9d:ac:42:
         4e:3f:c7:5e:cb:88:11:aa:98:52:4a:ff:d6:6f:38:12:41:c8:
         00:bc:10:50:61:e8:5b:ff:4e:a4:8a:eb:07:bb:a9:3d:19:b1:
         16:61:9d:5f:d5:82:c8:98:bf:ed:fa:b1:96:be:9f:3d:9b:cf:
         5f:f1:65:48:56:b9:88:aa:3e:06:f2:fc:76:e5:fa:59:bc:c8:
         87:0f:5a:0a:72:04:82:1f:0e:03:44:a0:ca:07:06:ba:0b:7c:
         a9:9a:7c:84:d2:88:51:c0:60:86:50:11:8a:d6:bc:a9:19:7c:
         c5:fa:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:42 2024 by rpki-client on console-ams.rpki-client.org