Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35302e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35302e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          OhDiStErCaUJeWdrBOCQ0rmQIqEHO/L9ynkD3Cc5MdQ=
Subject key identifier:   84:D7:3E:F5:B1:CD:E1:5F:F3:16:D8:2B:0A:D3:E5:6A:BC:06:58:12
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       7A1E3EEE2B89001CDE57D2EE86145A7A7E74F590
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35302e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:37 +0000
ROA not before:           Tue 20 Aug 2024 18:02:37 +0000
ROA not after:            Tue 19 Aug 2025 18:07:37 +0000
asID:                     28128
IP address blocks:        187.19.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1e:3e:ee:2b:89:00:1c:de:57:d2:ee:86:14:5a:7a:7e:74:f5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:37 2024 GMT
            Not After : Aug 19 18:07:37 2025 GMT
        Subject: CN=84D73EF5B1CDE15FF316D82B0AD3E56ABC065812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:0d:41:a6:69:26:1b:92:75:c2:ed:9c:08:
                    6a:04:e8:a5:58:ff:93:57:41:09:66:b9:32:50:73:
                    bb:32:b1:73:c3:ec:9d:0e:f9:8d:4f:e0:56:3a:58:
                    e1:38:63:c7:27:02:8b:1a:7c:7e:0c:9c:a9:81:4e:
                    7b:47:82:d5:b0:d4:2a:c0:a4:f2:0e:eb:26:4e:da:
                    99:32:b9:b4:59:65:14:33:48:90:ed:2e:ca:ea:76:
                    6d:5b:6f:0c:2e:3c:c4:cd:29:27:30:c8:07:9c:95:
                    c4:8b:66:6a:f7:9e:02:dd:05:08:82:a9:fc:42:60:
                    b9:79:44:6c:3f:62:51:1b:0f:ac:e8:f9:e4:2e:2d:
                    f9:77:99:c5:6d:d6:67:31:bd:82:dd:15:96:9c:f3:
                    a7:81:a7:c8:c6:e7:21:3a:05:73:be:b5:76:9e:7f:
                    f4:88:61:1d:84:6f:97:ba:f1:3c:ce:eb:f9:b0:7c:
                    45:cb:7a:ad:68:65:10:bd:d8:27:24:72:34:0c:ba:
                    d5:59:83:aa:98:7d:7e:95:db:a4:0f:19:78:52:fc:
                    69:9c:39:72:29:51:f7:f9:39:08:e3:15:38:3b:76:
                    67:f6:fd:fa:07:10:7d:55:55:b7:a8:d3:aa:7a:4f:
                    9b:0e:ca:f7:08:43:4c:f3:d9:25:63:57:b3:76:8d:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D7:3E:F5:B1:CD:E1:5F:F3:16:D8:2B:0A:D3:E5:6A:BC:06:58:12
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35302e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:8c:36:6e:a9:85:fe:de:79:dc:19:e1:7d:4b:30:15:50:fe:
         0a:58:49:d1:8a:ad:50:3e:a9:0b:bd:d0:a2:94:4c:01:2a:97:
         b6:59:d2:95:3e:aa:75:4c:39:54:ce:ff:0f:ca:54:58:02:1f:
         13:da:76:3d:c8:88:2c:48:3f:01:6e:08:18:2b:ae:ec:84:d6:
         de:c1:e0:3a:46:69:b7:d1:09:f6:36:03:21:50:08:49:da:2e:
         a7:dd:9d:d2:df:8c:ab:7b:8f:09:da:06:48:63:a0:64:b3:cc:
         67:55:66:bd:1f:58:14:3b:71:18:ba:15:f6:d3:eb:18:42:77:
         7b:66:9e:a5:76:72:1b:9f:12:50:97:99:d3:6e:a2:34:fc:3d:
         ac:3b:44:02:fa:e6:17:7b:11:47:29:56:fd:83:7d:ab:2f:50:
         5c:da:db:8c:41:f3:c4:f2:ac:53:f9:c9:95:d9:0b:53:51:c2:
         20:cf:fa:e2:d1:04:e6:1a:71:34:24:4b:46:03:84:12:67:3c:
         fe:35:a1:cd:31:b3:77:49:32:a0:4d:91:8c:5c:97:e5:0a:04:
         34:46:71:32:28:32:9c:71:1d:22:8d:e5:b8:d0:29:47:26:41:
         82:3e:48:a9:94:f5:7e:e7:e0:d7:b2:f4:07:50:e6:be:9a:5b:
         12:d8:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org