Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa
File:                     3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (raw, json)
Hash identifier:          hJMdzhi07E25qPPk8Ggo1p/RY1eSX+GmQ4fcXsZW0J8=
Subject key identifier:   76:51:83:CF:30:DD:72:91:E0:1D:F4:AC:6A:E6:80:9D:86:36:B9:2C
Certificate issuer:       /CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
Certificate serial:       73DB35E4A2CD4A71A4D761256BE4494B28CD92CF
Authority key identifier: 73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa
Signing time:             Thu 04 Apr 2024 13:28:35 +0000
ROA not before:           Thu 04 Apr 2024 13:23:35 +0000
ROA not after:            Thu 03 Apr 2025 13:28:35 +0000
asID:                     28153
IP address blocks:        186.193.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:db:35:e4:a2:cd:4a:71:a4:d7:61:25:6b:e4:49:4b:28:cd:92:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
        Validity
            Not Before: Apr  4 13:23:35 2024 GMT
            Not After : Apr  3 13:28:35 2025 GMT
        Subject: CN=765183CF30DD7291E01DF4AC6AE6809D8636B92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:05:c6:56:f1:58:b2:b9:87:c4:a2:a1:ef:
                    55:4e:2f:29:b4:0c:c0:27:d1:6c:a2:ce:24:02:ee:
                    c5:ba:bc:cb:ea:f7:b6:d7:72:fc:f0:4c:68:f0:db:
                    ac:be:37:9c:70:5f:0b:da:4f:e4:e5:7f:7d:4d:d1:
                    27:75:1f:b7:11:92:b3:8c:a3:ed:3e:28:29:b1:a9:
                    b9:ed:20:95:06:22:a9:85:f8:79:59:3e:df:01:e7:
                    06:73:38:aa:b1:ab:ac:10:d1:d5:3b:c1:69:89:29:
                    84:ce:b1:e9:f7:52:2f:cb:1e:f0:7f:bc:79:91:be:
                    c5:7b:dd:75:43:31:48:9f:ca:16:22:f6:5d:e7:c2:
                    ab:e9:05:0b:af:5e:b0:9e:02:d5:54:6f:56:3e:80:
                    79:59:c2:f7:40:86:2c:c8:be:63:81:88:49:a0:ab:
                    b5:f4:a3:cc:d7:dd:54:1d:18:b3:6b:03:ed:7c:d1:
                    41:0e:a1:f0:d3:28:67:ae:82:2a:b8:c6:ef:7f:c3:
                    dc:ab:f4:f9:4f:36:79:bd:03:c1:69:cb:97:f5:0f:
                    db:5c:19:21:24:f1:82:65:ff:a4:85:c0:e4:64:4a:
                    47:d5:82:96:9b:85:80:76:54:73:24:06:aa:1c:20:
                    aa:34:02:12:a7:e1:04:98:dc:3c:97:86:59:97:0c:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:51:83:CF:30:DD:72:91:E0:1D:F4:AC:6A:E6:80:9D:86:36:B9:2C
            X509v3 Authority Key Identifier:
                keyid:73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:06:a9:9e:68:09:8a:41:3d:20:54:fd:05:18:7e:81:8a:
         d0:40:c9:07:e6:21:13:c3:d9:77:a4:bc:83:a6:f0:4a:1b:e3:
         f6:f9:82:15:9c:b1:d3:1d:87:a3:25:c9:f3:fc:f9:d6:ef:5b:
         6d:d8:7e:84:ea:62:a9:99:ab:e5:bc:f7:ab:3b:3f:7a:43:f8:
         9b:1f:3b:9a:fc:9d:b2:a6:68:15:5e:c0:ee:7e:d2:13:84:fb:
         68:f7:2b:37:da:c8:61:ce:79:d5:b7:ab:ce:b8:82:6a:6f:ae:
         ec:33:81:56:77:17:22:24:c6:6f:8b:e7:29:24:6d:37:07:9b:
         32:81:19:84:70:47:5a:6d:6e:f4:63:93:a9:55:95:b3:b9:5f:
         c9:70:b2:a4:53:db:48:77:4c:01:a3:71:62:27:f7:83:f9:d4:
         ff:fd:9c:05:55:ac:ec:1e:0e:9f:c8:87:44:b8:6e:62:e8:66:
         ed:0e:00:25:3b:e5:af:7c:51:50:41:4c:8a:9e:1c:dd:5e:e5:
         03:34:50:c0:a0:ad:6b:0a:11:64:81:c5:5e:ca:4c:b1:67:65:
         29:5c:a7:da:3b:fa:dc:26:9b:cc:ff:50:b0:b4:45:82:2e:18:
         b2:01:2b:c1:ca:0a:cf:00:82:b3:5a:e4:a4:2b:c8:01:bc:87:
         78:d7:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org