Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230322e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3230322e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          Uo7xkG54tcwlq+Op9Fm8/XIjoWGLV9j8IoLhDhA9bhM=
Subject key identifier:   17:B3:E4:7A:CD:CB:EE:23:E9:10:3C:F7:49:E6:21:6E:81:46:BA:0F
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       56074B355DCFD4F42163DD981BC8DD6C9A824767
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230322e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:43 +0000
ROA not before:           Wed 03 Apr 2024 22:07:43 +0000
ROA not after:            Wed 02 Apr 2025 22:12:43 +0000
asID:                     52973
IP address blocks:        186.216.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:07:4b:35:5d:cf:d4:f4:21:63:dd:98:1b:c8:dd:6c:9a:82:47:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:43 2024 GMT
            Not After : Apr  2 22:12:43 2025 GMT
        Subject: CN=17B3E47ACDCBEE23E9103CF749E6216E8146BA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:b1:47:9e:dd:93:f5:ca:87:d4:f2:61:54:
                    fe:23:60:c6:b0:08:e7:1f:9a:09:06:ac:3d:31:33:
                    0f:69:15:a2:a6:af:d1:ac:97:db:82:e1:f1:55:09:
                    95:d4:b6:b9:18:b7:45:12:bb:07:c8:8b:bc:71:32:
                    a5:43:f1:9b:79:da:09:3c:82:26:ee:7d:1b:6b:db:
                    71:d9:6b:f1:7c:d2:93:82:8e:3b:c3:0a:fe:27:b0:
                    1c:ac:fe:e1:8f:f6:2a:07:96:18:fe:f1:bd:45:75:
                    2b:0c:15:5b:80:51:8a:f1:f6:ec:7c:ae:8d:8d:8a:
                    0a:63:17:48:dc:ed:02:2f:ae:2c:6e:95:cb:e3:3f:
                    8d:b4:bd:0c:74:ab:b0:d7:3f:8e:f3:53:02:0d:26:
                    48:62:8b:4b:1a:f7:e8:d3:c7:27:ab:22:06:53:0d:
                    4a:52:f1:18:18:07:37:83:1c:a1:ca:f7:26:36:55:
                    30:78:4e:fc:dd:94:a9:23:14:90:bc:84:90:7f:1b:
                    b1:a0:62:da:06:0f:23:a9:3a:75:b9:0b:e8:92:d9:
                    99:50:07:b8:ec:87:88:c8:8d:f1:b7:01:41:24:69:
                    bf:31:6b:ae:48:e3:7d:7e:0e:24:3b:ed:70:5e:b6:
                    e9:c9:2b:4b:88:b6:ce:b4:68:8e:c2:e4:da:70:d6:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:E4:7A:CD:CB:EE:23:E9:10:3C:F7:49:E6:21:6E:81:46:BA:0F
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230322e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:64:70:ab:ce:f1:1c:3d:e1:e1:aa:12:39:aa:df:be:2c:
         b9:64:dd:8f:b6:c7:0f:62:89:bd:63:81:cc:a9:01:f0:c6:30:
         8c:87:b7:2d:4f:a5:b2:53:22:7a:94:ac:67:5f:4e:ac:cd:ae:
         ab:1e:2e:34:a5:f2:7e:17:23:83:98:76:44:d1:8c:32:79:4a:
         29:e0:24:b1:77:41:02:8d:87:bc:f8:ef:90:53:d6:b5:41:67:
         e7:cf:04:57:81:1b:21:64:53:3e:6e:8e:80:8d:06:14:fb:0e:
         2b:a2:1a:73:51:5c:eb:f8:cd:f2:0b:80:cd:8e:ab:15:80:7a:
         8d:07:4a:be:2d:bb:1a:b9:b0:16:cc:3c:07:b8:ba:fb:d6:40:
         5e:e3:23:fa:c0:f4:31:b7:25:4e:25:3c:90:f0:b2:01:a2:1c:
         79:d4:34:77:4c:f3:db:c5:3c:90:9a:d7:ff:95:53:1f:3e:31:
         9d:23:bd:c3:e6:fd:48:e2:9c:0e:ab:c2:91:59:f3:df:7d:02:
         5c:a9:71:da:55:bf:ad:95:1c:f1:5e:ab:86:c7:e1:62:90:e7:
         12:98:b0:ca:4e:91:a5:0f:62:13:43:f6:f2:0f:8c:87:3e:1d:
         74:83:f6:cc:35:93:07:4d:ac:01:94:1b:ea:13:f0:0d:b8:84:
         87:d0:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:42 2024 by rpki-client on console-ams.rpki-client.org