Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230362e302f32332d3233203d3e203532393733.roa
File:                     3138362e3231362e3230362e302f32332d3233203d3e203532393733.roa (raw, json)
Hash identifier:          6PBo1DrccyPsIX7tZH1gZG5ztBiVOR0d5Od22ldxQzw=
Subject key identifier:   16:6B:BE:4B:22:0D:E4:36:20:A4:C9:8A:F7:98:AD:24:E8:8D:D6:3C
Certificate issuer:       /CN=AE37115162FC933E4133DF3B6150674B07EA5957
Certificate serial:       3DDC39E09EBEC074B291CCF7D8BDEDB42FD81E11
Authority key identifier: AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230362e302f32332d3233203d3e203532393733.roa
Signing time:             Wed 03 Apr 2024 22:12:50 +0000
ROA not before:           Wed 03 Apr 2024 22:07:50 +0000
ROA not after:            Wed 02 Apr 2025 22:12:50 +0000
asID:                     52973
IP address blocks:        186.216.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl
                          rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dc:39:e0:9e:be:c0:74:b2:91:cc:f7:d8:bd:ed:b4:2f:d8:1e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE37115162FC933E4133DF3B6150674B07EA5957
        Validity
            Not Before: Apr  3 22:07:50 2024 GMT
            Not After : Apr  2 22:12:50 2025 GMT
        Subject: CN=166BBE4B220DE43620A4C98AF798AD24E88DD63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:87:25:bf:5e:ef:d7:27:2d:19:5b:2a:42:
                    23:1b:fb:8d:c7:e6:c9:2d:3c:79:13:13:cd:0a:93:
                    80:4b:3c:fa:95:1f:e1:df:f2:4e:7d:3f:58:d5:d2:
                    2c:f5:f9:86:00:52:26:8b:cf:80:d0:22:47:55:ef:
                    f6:05:93:68:b3:60:be:70:71:80:a4:a8:b5:7a:66:
                    2b:5e:26:40:31:0b:62:ad:6e:87:87:36:82:5d:00:
                    11:6f:61:1d:99:2c:05:21:2f:bb:1d:4b:34:72:b6:
                    15:55:ec:cc:3f:3d:db:b9:eb:18:af:5b:4a:48:cd:
                    ae:2f:87:80:61:f8:a0:f5:fd:45:29:2d:21:fd:9a:
                    18:91:4b:60:80:30:89:cf:fe:a2:27:84:15:f9:d6:
                    2d:f0:86:b8:d7:7c:48:7a:5d:a8:6c:fa:bf:7f:e1:
                    12:d9:c8:0a:73:f2:47:92:67:14:7f:6c:e6:6c:02:
                    c2:bb:81:77:fe:3a:13:10:46:e0:8b:f4:a9:a0:1d:
                    68:44:7c:7b:f2:fa:44:68:05:7a:bf:c8:61:e8:48:
                    04:d6:82:84:8e:49:d5:8c:ad:c7:bf:f8:71:ec:f8:
                    cc:f9:a9:a5:33:3a:dd:d2:88:82:54:7a:84:e6:ef:
                    4b:32:17:26:9c:e7:8f:e9:40:74:b3:50:30:eb:3c:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:BE:4B:22:0D:E4:36:20:A4:C9:8A:F7:98:AD:24:E8:8D:D6:3C
            X509v3 Authority Key Identifier:
                keyid:AE:37:11:51:62:FC:93:3E:41:33:DF:3B:61:50:67:4B:07:EA:59:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/AE37115162FC933E4133DF3B6150674B07EA5957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE37115162FC933E4133DF3B6150674B07EA5957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/1/3138362e3231362e3230362e302f32332d3233203d3e203532393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:d0:68:67:dd:24:75:bc:95:6f:19:0a:d2:57:7a:8c:1d:
         75:a8:ee:45:0f:2f:d9:e8:2f:ea:75:39:f6:f7:ae:11:f4:08:
         0f:a7:86:32:b7:81:fc:72:62:ed:92:72:9e:21:ff:33:aa:48:
         7f:a1:f5:d0:b5:af:3c:8f:21:f9:fa:d7:00:82:dc:6c:d9:33:
         44:b6:04:84:41:99:2a:9c:80:9c:07:ba:89:17:67:2b:08:7e:
         23:b6:78:c2:fb:7e:39:cb:cf:96:7f:20:5c:6a:c4:fb:1c:e8:
         30:de:9d:1f:e7:2c:87:8d:cc:92:49:53:60:4a:a3:6d:24:a3:
         ff:81:97:2a:4d:cc:dc:64:9f:5e:b1:5a:6c:6b:e3:0d:b9:ed:
         97:51:c6:12:94:06:bf:7f:b6:74:cc:09:8b:ce:be:c0:85:01:
         9a:a3:eb:8b:c4:f3:c0:f7:18:e0:4b:49:bb:e9:cd:31:a1:f2:
         a0:6e:f0:ca:32:07:25:f5:75:d8:ec:a1:34:28:fc:ae:16:19:
         f6:88:3e:33:58:dc:c4:da:04:ec:d3:64:8a:19:e5:1f:ea:bc:
         b6:46:6e:ea:de:6d:89:45:6f:92:e8:78:a3:15:b4:8c:81:4d:
         7c:0c:11:98:7e:72:97:a0:b0:35:9d:2a:a5:97:f3:ec:4d:16:
         36:a0:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:59 2024 by rpki-client on console-fra.rpki-client.org