Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35332e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          9+ZjeQORKadLl1CaNd36eHWNVZLzLyq8nBUyUqr1Neg=
Subject key identifier:   AC:B7:CC:B4:DF:C5:67:BF:40:83:9A:96:1C:B1:D2:A6:A3:5E:DA:3D
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       3490F36743944FAF2F1C65B345CF873ED4D2328F
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:44 +0000
ROA not before:           Tue 20 Aug 2024 18:02:44 +0000
ROA not after:            Tue 19 Aug 2025 18:07:44 +0000
asID:                     28128
IP address blocks:        187.19.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:90:f3:67:43:94:4f:af:2f:1c:65:b3:45:cf:87:3e:d4:d2:32:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:44 2024 GMT
            Not After : Aug 19 18:07:44 2025 GMT
        Subject: CN=ACB7CCB4DFC567BF40839A961CB1D2A6A35EDA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:b4:df:3a:e8:90:41:2f:d7:72:6a:87:14:
                    96:8a:23:42:2d:c0:5d:85:7c:02:0d:66:05:ab:dc:
                    f2:70:b8:4f:63:40:5c:71:7b:59:07:92:5b:12:58:
                    88:c9:5d:a0:79:7f:c2:e6:36:06:80:22:c6:12:a1:
                    f8:0d:eb:31:0c:84:d1:2b:4f:fe:97:f3:93:a9:44:
                    f3:4f:a8:06:02:85:f0:21:87:d7:95:67:80:db:a4:
                    dd:db:e2:89:aa:be:80:39:1e:6e:d9:46:64:2c:62:
                    0f:86:28:d6:f1:23:cd:ed:85:17:1b:4f:b0:be:f6:
                    96:96:5b:0e:9e:3e:4d:63:a6:a1:01:31:e8:cf:1e:
                    6c:bd:53:fa:1b:01:d9:0f:c8:b6:a3:af:53:ee:8c:
                    ab:7e:fa:ba:67:b0:9a:2d:a9:6c:cf:69:11:2b:12:
                    65:4e:e2:e4:84:3c:22:56:53:06:02:d7:94:7c:70:
                    12:1f:68:4c:17:a9:7b:85:64:50:fc:91:a9:5b:d2:
                    42:bc:b5:5d:e9:1c:29:c4:7d:90:64:a3:fd:b6:e0:
                    5f:7c:ce:10:93:2b:b9:71:97:76:e3:64:09:ec:02:
                    34:1f:b8:94:71:7c:3b:4e:65:b8:67:7b:2f:6a:a3:
                    fa:03:ed:b0:b6:15:42:0c:53:92:2b:a0:7a:cd:a8:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B7:CC:B4:DF:C5:67:BF:40:83:9A:96:1C:B1:D2:A6:A3:5E:DA:3D
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35332e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:bc:f0:d9:68:b2:81:5a:81:5a:88:b6:b4:40:42:67:28:c9:
         1b:b5:75:78:6f:6f:78:ea:f7:ea:3e:be:d4:74:35:09:95:3e:
         75:9f:45:20:c8:fe:72:c0:4a:e5:ae:23:74:d9:73:51:27:60:
         c8:01:21:ce:75:b1:c1:50:6a:6b:b0:d6:a4:4d:67:55:ea:d4:
         1a:5e:de:df:05:e8:19:b0:26:1f:c4:b0:6e:60:da:ff:c6:a3:
         2c:a8:cb:ed:f1:fe:a5:6c:15:43:65:67:99:3b:35:de:2b:53:
         f3:ba:e3:af:7e:58:9a:54:11:f4:89:29:6f:43:5e:94:f4:70:
         42:1e:74:7f:fb:02:4b:36:da:54:ce:18:14:89:a8:26:71:16:
         3e:52:dc:72:64:99:e8:a6:81:1a:6c:b8:67:4a:a5:bc:e7:7e:
         62:22:70:58:f6:8e:7c:cc:a4:e6:95:0e:0b:95:3f:5d:ea:3d:
         1f:d4:26:89:e1:82:65:6e:f0:60:76:17:5c:28:f0:82:1e:b1:
         c9:ea:6f:2c:a8:a6:fd:f6:ad:6b:ba:c7:b1:fe:5c:82:75:cc:
         3f:d6:eb:53:54:9d:18:cb:c7:0d:96:10:aa:b9:4c:3e:bf:45:
         8e:16:2b:6f:af:8e:68:80:02:47:4d:72:12:71:62:09:45:4d:
         1f:b2:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org