Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35342e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35342e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          wEtuFyVHdpjk//LgQRWsy7SSDhgdClv4vh6NwDA5xAM=
Subject key identifier:   63:DC:93:C5:41:5F:BA:AD:62:EF:12:EA:2B:C7:C6:B9:5C:9B:43:4E
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       41EA4F64FD9E526028E4F8814276FE2969F5E4FB
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35342e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:46 +0000
ROA not before:           Tue 20 Aug 2024 18:02:46 +0000
ROA not after:            Tue 19 Aug 2025 18:07:46 +0000
asID:                     28128
IP address blocks:        187.19.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ea:4f:64:fd:9e:52:60:28:e4:f8:81:42:76:fe:29:69:f5:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:46 2024 GMT
            Not After : Aug 19 18:07:46 2025 GMT
        Subject: CN=63DC93C5415FBAAD62EF12EA2BC7C6B95C9B434E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3f:8f:5c:fc:a1:61:9d:6a:9b:81:13:55:c1:
                    0a:8a:2f:20:44:8a:a2:11:e2:ec:64:0d:ef:e9:35:
                    a7:0a:5d:c8:49:45:b0:9f:82:95:3f:29:c5:ec:16:
                    94:80:fe:10:0a:ad:f1:cd:e0:7c:6e:37:3f:79:45:
                    d1:75:3d:67:79:ac:b5:3e:ee:85:af:a0:19:3e:ec:
                    ee:c5:be:c3:59:53:4e:1e:ba:69:dd:95:0c:ff:82:
                    ab:63:7d:aa:63:05:c9:20:56:b1:5d:c0:a9:78:ae:
                    1f:3f:fc:ef:c4:76:9a:29:fd:15:be:d0:cc:d4:54:
                    44:48:08:5e:6c:87:cf:8b:83:18:3d:ca:e9:b6:91:
                    3c:75:05:a2:76:94:6a:a2:29:f6:d1:e5:0e:9f:73:
                    ef:b3:cf:1d:ce:0d:f3:6a:f8:c6:ff:0b:16:72:6e:
                    ac:1c:e9:74:89:3c:89:79:22:16:d2:04:19:95:2d:
                    ee:7a:09:c7:8d:1f:2b:b4:22:33:e6:f6:36:9e:29:
                    4c:97:22:96:58:a4:50:f4:2e:0f:31:75:55:00:76:
                    f7:b1:38:92:2e:4d:47:7b:af:bb:d0:85:89:7b:90:
                    f4:39:a5:18:56:71:51:82:12:77:43:87:27:af:8b:
                    38:8e:e2:fc:40:aa:dd:ef:55:80:80:80:b1:8a:48:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:93:C5:41:5F:BA:AD:62:EF:12:EA:2B:C7:C6:B9:5C:9B:43:4E
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35342e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:2a:f0:48:cd:01:66:69:2a:03:b5:d5:14:75:07:1a:13:
         4b:6a:30:1f:76:24:a7:30:02:0d:49:1d:c0:ff:fb:9f:f0:4d:
         86:21:09:85:2f:9f:60:6e:b3:0a:87:5a:86:14:f7:51:21:a5:
         8a:a6:be:ec:bc:be:c8:2d:c6:42:64:cd:4b:a5:18:1e:03:e3:
         71:0f:64:cd:92:aa:bc:f0:0d:7e:10:4a:5c:5e:80:07:34:32:
         4f:f5:8b:e4:1f:3b:e2:93:21:b8:e5:67:f0:aa:c2:9a:b8:89:
         f3:36:37:3a:c5:c9:2f:ab:99:5b:93:cd:75:74:69:14:c4:ae:
         75:df:71:b6:00:d0:d2:2a:49:c4:be:65:4e:0c:c7:5e:1b:27:
         59:50:a2:11:17:cd:85:c6:5a:d0:c4:49:15:00:b7:59:5b:7f:
         c8:81:74:5c:20:db:1d:e4:24:a6:d4:05:8b:ee:cf:9b:fe:27:
         03:93:5c:3f:d6:39:89:7e:ae:88:c2:20:82:2f:18:31:71:62:
         72:89:db:13:4d:3e:ba:7c:fb:a2:29:e1:a6:c9:b9:74:84:81:
         fe:5b:fb:68:b6:56:d7:2a:e0:f8:62:66:82:1b:57:fd:2d:0c:
         3e:4c:f5:6f:b7:15:6b:9e:f4:2a:c3:8a:c1:bd:31:46:d1:a4:
         38:25:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:13 2024 by rpki-client on console-fra.rpki-client.org