Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230352e302f32342d3234203d3e203532393733.roa
File:                     3138362e3231362e3230352e302f32342d3234203d3e203532393733.roa (raw, json)
Hash identifier:          2Fn1nTy+0QazA6aP5/Wswl9VzY4FOHQ+umaJMRJF6DI=
Subject key identifier:   4C:61:63:87:13:A0:2B:58:D3:AC:60:49:D8:D5:7E:EF:49:04:C4:BF
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       06D1A166F7F8D8924451A0AF4A8C324CF4171C36
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230352e302f32342d3234203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:45 +0000
ROA not before:           Wed 03 Apr 2024 22:07:45 +0000
ROA not after:            Wed 02 Apr 2025 22:12:45 +0000
asID:                     52973
IP address blocks:        186.216.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d1:a1:66:f7:f8:d8:92:44:51:a0:af:4a:8c:32:4c:f4:17:1c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:45 2024 GMT
            Not After : Apr  2 22:12:45 2025 GMT
        Subject: CN=4C61638713A02B58D3AC6049D8D57EEF4904C4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:d8:34:20:9f:78:1c:24:93:99:9e:38:92:
                    6b:2d:c1:ea:6b:41:e9:69:77:a2:37:aa:27:87:a7:
                    bc:56:78:7a:7a:0f:4e:1c:36:90:3a:b3:96:03:a1:
                    70:67:a4:72:62:42:5a:34:3a:66:62:3e:19:3f:56:
                    83:48:53:50:da:37:7c:1b:4b:57:2f:06:7f:c3:42:
                    cb:6d:7b:ea:8c:a1:e9:69:7e:3f:73:15:b8:a3:20:
                    73:76:a6:6f:b3:0f:72:96:2f:2e:04:96:85:fc:88:
                    da:bf:c7:7f:42:bc:43:49:de:17:09:1b:17:e4:98:
                    ff:9f:90:ec:b0:8d:78:a5:91:c5:73:04:c4:c4:71:
                    b1:7f:6d:e3:96:16:eb:a5:f6:9f:76:73:42:4c:28:
                    a9:84:1c:25:49:0a:b3:7d:95:10:7d:f0:d2:e9:62:
                    29:68:83:5d:30:b4:ac:dd:fc:74:52:4e:7b:5b:c9:
                    4e:03:77:7c:c8:9a:b9:37:9e:c0:2a:4d:3e:9f:19:
                    02:70:6b:10:97:3c:f9:aa:98:ee:7c:3b:cd:ce:0f:
                    6a:24:e4:bb:36:73:e4:ae:ee:d2:07:2a:21:e3:8a:
                    20:4b:af:cb:99:8f:d4:13:0a:42:f1:7a:c7:a0:12:
                    db:87:e8:e0:1e:75:64:25:0f:f8:95:5c:90:db:7e:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:61:63:87:13:A0:2B:58:D3:AC:60:49:D8:D5:7E:EF:49:04:C4:BF
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230352e302f32342d3234203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:bf:99:1e:46:3f:1a:b3:26:80:33:e7:2a:ac:14:59:f6:
         70:42:1d:e9:30:6c:4f:c4:1a:16:96:ba:1d:1c:b8:2e:d8:f4:
         0a:80:9b:68:d5:65:62:7b:3e:24:53:7b:32:72:21:ca:16:9b:
         b3:79:2b:a6:6e:e2:05:84:ed:f4:08:3f:7d:9c:89:09:a8:c8:
         76:97:71:e9:a3:b4:86:13:00:96:9e:47:e7:4b:39:74:7a:46:
         61:49:9b:e7:b1:50:7b:77:8b:1a:6d:81:71:e4:4e:74:1a:37:
         cd:1a:36:a3:f3:d7:bf:b8:19:94:91:62:dd:fc:e3:53:b0:97:
         b5:f7:35:4c:f1:b5:58:47:fa:d0:c8:fb:94:9a:43:b4:ec:71:
         e3:d5:fb:ac:6f:40:02:00:7f:12:ef:a3:50:c9:12:0d:cf:d2:
         07:e0:4e:31:59:a8:20:87:bd:c2:0d:95:e0:c7:7e:31:f1:21:
         4a:bd:23:21:f3:60:de:28:ef:65:3d:40:12:a6:22:24:ff:89:
         94:9a:54:eb:05:d7:79:e0:b8:3e:cb:ab:5b:5e:68:dc:de:91:
         b6:50:17:e3:c1:23:a5:62:14:4a:fd:79:12:e0:fc:54:dd:85:
         f4:a9:2f:1f:86:04:03:8f:c5:6b:70:6a:ed:fd:78:92:80:25:
         9a:2f:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:42 2024 by rpki-client on console-ams.rpki-client.org