Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230332e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3230332e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          kCU3NrcTtQBrHH8znsWN3OWmThq81vpvahRISCtsZ4c=
Subject key identifier:   77:4F:67:E1:59:FB:DF:78:9B:A5:E4:5F:3B:33:D1:3D:38:FC:38:D2
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       289FE4D2DE4F7AFE38A630EB95E7BB1A80EC2D0F
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230332e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:45 +0000
ROA not before:           Wed 03 Apr 2024 22:07:45 +0000
ROA not after:            Wed 02 Apr 2025 22:12:45 +0000
asID:                     52973
IP address blocks:        186.216.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9f:e4:d2:de:4f:7a:fe:38:a6:30:eb:95:e7:bb:1a:80:ec:2d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:45 2024 GMT
            Not After : Apr  2 22:12:45 2025 GMT
        Subject: CN=774F67E159FBDF789BA5E45F3B33D13D38FC38D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:e1:1e:91:b4:4f:fe:59:3f:5e:d6:29:51:
                    18:a5:a8:0c:c5:0a:a4:5c:02:74:1b:5d:4a:31:85:
                    76:4a:dd:be:8f:8e:b2:f4:c5:8d:2f:66:77:f0:7c:
                    9e:9d:12:9c:be:20:ba:50:79:5e:a9:cb:86:3a:88:
                    80:ef:09:e4:ff:e8:b3:28:cd:46:82:bf:a4:eb:e1:
                    34:d2:38:0b:16:4b:01:6c:7a:1d:46:9b:d3:8c:87:
                    69:be:06:0d:39:7e:d3:e7:51:d2:ca:81:80:bc:c0:
                    48:4d:16:73:f2:0a:93:27:e1:57:de:4e:64:9a:d6:
                    f1:b3:37:ff:b2:e7:b6:c0:a8:27:ad:1f:e6:19:b8:
                    49:59:16:25:49:2c:8b:49:ed:b1:f2:20:cc:93:87:
                    4f:0f:14:fb:ff:93:6f:ad:66:49:9b:f4:5e:2b:7a:
                    be:2d:30:96:ab:37:27:5b:ab:fc:b2:5d:f5:e5:6f:
                    78:8a:3d:55:67:2e:15:0a:7e:cc:49:ea:af:b1:19:
                    c5:ef:fa:48:17:e4:68:a4:79:0f:9b:59:e1:9c:34:
                    0e:55:7a:ba:23:71:c2:3d:0a:b8:9b:ed:bb:11:a3:
                    cf:58:41:20:b2:89:31:8e:10:46:a7:32:94:2f:9b:
                    4f:29:02:bb:91:a0:0f:0a:d7:85:71:d4:a2:41:46:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:67:E1:59:FB:DF:78:9B:A5:E4:5F:3B:33:D1:3D:38:FC:38:D2
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230332e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:20:04:fb:d6:34:05:e2:3f:ca:ae:c0:e5:c3:a6:9d:8a:ad:
         17:89:8b:d6:d8:19:c6:07:61:09:44:b3:b8:5b:3f:9b:61:e2:
         c4:ca:74:d4:5b:3b:cf:a5:48:54:e2:88:ae:15:e4:4c:d3:56:
         84:9d:a6:15:53:3c:17:a3:56:51:e5:99:68:48:90:06:16:1c:
         44:96:6d:b6:27:6e:e5:72:54:04:35:ca:e7:95:16:24:00:aa:
         ee:06:77:e2:77:a2:b9:91:1e:44:83:7c:af:0b:b2:1b:cd:e7:
         77:f0:c5:2b:67:b7:d7:a6:46:43:fd:fd:41:ed:d0:5c:0c:66:
         72:82:c1:49:5d:fd:c7:1a:34:9a:64:5c:e2:df:f5:48:2d:6b:
         b8:a5:ca:a2:61:52:67:f3:1b:73:55:6f:55:5f:7d:a5:bd:39:
         cf:eb:c4:59:63:59:8f:55:e7:03:9d:17:bd:2f:cc:56:08:64:
         91:ad:82:ca:45:fe:42:07:21:44:a2:db:05:fb:53:4e:d1:73:
         09:32:1f:fb:1a:66:c3:57:f3:ae:62:52:33:dc:a6:3e:79:8e:
         20:30:56:ca:b3:b9:7f:9a:f1:bf:80:cf:bb:33:28:8c:0f:4a:
         4d:81:19:51:96:fb:3c:4e:53:8a:c5:52:ad:6c:78:1e:df:9e:
         44:0a:f2:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKJ/k0t5Pev44pjDrlee7GoDsLQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUzNzExNTE2MkZDOTMzRTQxMzNERjNCNjE1MDY3NEIw
N0VBNTk1NzAeFw0yNDA0MDMyMjA3NDVaFw0yNTA0MDIyMjEyNDVaMDMxMTAvBgNV
BAMTKDc3NEY2N0UxNTlGQkRGNzg5QkE1RTQ1RjNCMzNEMTNEMzhGQzM4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WeEekbRP/lk/XtYpURilqAzF
CqRcAnQbXUoxhXZK3b6PjrL0xY0vZnfwfJ6dEpy+ILpQeV6py4Y6iIDvCeT/6LMo
zUaCv6Tr4TTSOAsWSwFseh1Gm9OMh2m+Bg05ftPnUdLKgYC8wEhNFnPyCpMn4Vfe
TmSa1vGzN/+y57bAqCetH+YZuElZFiVJLItJ7bHyIMyTh08PFPv/k2+tZkmb9F4r
er4tMJarNydbq/yyXfXlb3iKPVVnLhUKfsxJ6q+xGcXv+kgX5GikeQ+bWeGcNA5V
erojccI9Crib7bsRo89YQSCyiTGOEEanMpQvm08pAruRoA8K14Vx1KJBRspfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd09n4Vn733ibpeRfOzPRPTj8ONIwHwYDVR0j
BBgwFoAUrjcRUWL8kz5BM987YVBnSwfqWVcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXVZSkpLWjdnQThNZXJTTVlvZjdNYlFON1kzaDloWllrNWJaU0JhYnRL
WHEvMS9BRTM3MTE1MTYyRkM5MzNFNDEzM0RGM0I2MTUwNjc0QjA3RUE1OTU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFMzcxMTUxNjJGQzkzM0U0
MTMzREYzQjYxNTA2NzRCMDdFQTU5NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F1WUpKS1o3Z0E4TWVyU01Zb2Y3TWJRTjdZM2g5aFpZazViWlNCYWJ0S1hxLzEv
MzEzODM2MmUzMjMxMzYyZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62MswDQYJKoZIhvcNAQELBQADggEBACEgBPvW
NAXiP8quwOXDpp2KrReJi9bYGcYHYQlEs7hbP5th4sTKdNRbO8+lSFTiiK4V5EzT
VoSdphVTPBejVlHlmWhIkAYWHESWbbYnbuVyVAQ1yueVFiQAqu4Gd+J3ormRHkSD
fK8LshvN53fwxStnt9emRkP9/UHt0FwMZnKCwUld/ccaNJpkXOLf9Ugta7ilyqJh
UmfzG3NVb1VffaW9Oc/rxFljWY9V5wOdF70vzFYIZJGtgspF/kIHIUSi2wX7U07R
cwkyH/saZsNX865iUjPcpj55jiAwVsqzuX+a8b+Az7szKIwPSk2BGVGW+zxOU4rF
Uq1seB7fnkQK8mo=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:59 2024 by rpki-client on console-fra.rpki-client.org