Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3138372e37332e3138302e302f32322d3234203d3e20323730353136.roa
File:                     3138372e37332e3138302e302f32322d3234203d3e20323730353136.roa (raw, json)
Hash identifier:          QT5tHxlLPfMuhelvlMeaCuIhxmlAPVd4TTmG4TXvX2g=
Subject key identifier:   7E:00:E0:AB:0F:E7:33:3E:82:CD:60:8C:0B:8C:36:44:13:F6:32:B0
Certificate issuer:       /CN=3513BAD3D0AE887B5F5628D07194889FEAE9E274
Certificate serial:       6DCD44D402C0A790F5BA9B910566C1CE9ABA89D3
Authority key identifier: 35:13:BA:D3:D0:AE:88:7B:5F:56:28:D0:71:94:88:9F:EA:E9:E2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3138372e37332e3138302e302f32322d3234203d3e20323730353136.roa
Signing time:             Wed 03 Apr 2024 23:26:00 +0000
ROA not before:           Wed 03 Apr 2024 23:21:00 +0000
ROA not after:            Wed 02 Apr 2025 23:26:00 +0000
asID:                     270516
IP address blocks:        187.73.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.crl
                          rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cd:44:d4:02:c0:a7:90:f5:ba:9b:91:05:66:c1:ce:9a:ba:89:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3513BAD3D0AE887B5F5628D07194889FEAE9E274
        Validity
            Not Before: Apr  3 23:21:00 2024 GMT
            Not After : Apr  2 23:26:00 2025 GMT
        Subject: CN=7E00E0AB0FE7333E82CD608C0B8C364413F632B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:b2:19:88:e3:e8:c0:00:52:78:9d:cd:1e:
                    73:d6:b1:bf:cb:ee:37:18:33:c6:b5:06:1b:5a:fb:
                    e8:60:ca:fe:7a:80:f9:08:56:7e:c3:93:54:40:30:
                    0e:2c:d6:16:6c:1e:ab:87:05:f5:b2:41:6a:8d:d1:
                    ee:e0:29:e9:5d:bd:36:3a:6d:1a:e7:f6:5e:98:10:
                    63:58:26:8c:6d:ca:70:ad:29:0d:3c:71:fa:82:59:
                    a0:06:ec:77:3b:b5:f8:11:78:82:f4:c4:16:fc:99:
                    63:d9:ef:28:c5:46:61:75:12:7b:bd:ca:f3:83:eb:
                    85:3d:38:39:3e:bc:7d:53:fa:4b:c0:26:ec:93:d8:
                    d7:78:0b:48:f5:4f:07:41:5c:84:7e:d9:e6:58:88:
                    b9:5d:52:63:ab:62:dd:fb:ea:80:17:57:93:07:58:
                    7b:e0:73:00:61:fd:97:ba:8d:15:44:8f:05:63:7f:
                    92:b1:67:b7:72:b0:04:82:0d:56:be:38:7b:72:9b:
                    50:cc:df:a0:fc:c9:2b:40:e3:e0:7e:b7:19:05:1e:
                    71:a4:84:8a:dc:27:f2:5b:e9:70:e2:83:df:d7:49:
                    14:db:fe:4f:90:ca:f8:c5:d3:90:75:72:fe:b5:b8:
                    ee:7d:1b:32:3e:89:43:63:95:30:b5:5e:13:35:8f:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:00:E0:AB:0F:E7:33:3E:82:CD:60:8C:0B:8C:36:44:13:F6:32:B0
            X509v3 Authority Key Identifier:
                keyid:35:13:BA:D3:D0:AE:88:7B:5F:56:28:D0:71:94:88:9F:EA:E9:E2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3513BAD3D0AE887B5F5628D07194889FEAE9E274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/1/3138372e37332e3138302e302f32322d3234203d3e20323730353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:11:8b:86:44:11:57:e6:6c:d3:87:45:63:5d:42:77:42:e2:
         ca:9f:e2:0f:23:6b:ac:e4:74:98:8b:bf:d0:12:c8:78:d8:31:
         71:48:f4:7a:8c:1b:2e:12:e1:7a:e1:14:4a:52:8e:10:e0:4e:
         54:30:08:59:44:da:3c:0f:7e:61:b8:4d:4e:bb:73:f0:85:a4:
         e7:65:d4:4b:6b:91:d5:1b:d8:a0:fc:22:b6:80:85:8c:6c:20:
         1b:c6:65:f3:8e:bc:43:16:dd:76:d3:92:0b:58:07:8c:e9:49:
         22:db:63:80:96:d9:70:fe:fb:fc:0d:8e:b9:49:28:dc:9c:9c:
         4c:0c:48:77:eb:ba:90:b9:27:e3:60:4c:ac:85:65:33:a6:e6:
         3a:88:cc:62:45:76:96:74:e6:e6:78:c1:4d:33:a1:57:e8:43:
         04:59:ab:02:ca:02:8a:80:17:2e:a8:48:e3:f7:d9:d0:32:c0:
         ff:ca:c4:4b:1c:6d:24:f2:7d:4a:eb:02:52:d3:61:9a:10:21:
         de:e5:ef:63:2d:31:b2:fe:40:a8:d7:0e:33:3f:22:a9:92:88:
         fe:3f:e5:74:bc:eb:38:73:cf:10:74:16:45:68:a4:17:55:4d:
         af:af:ef:2a:b8:c2:73:2e:59:d8:b5:a5:73:7e:a4:f4:64:71:
         85:9c:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org