Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35392e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e35392e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          YKvvft0TGWVyARn+kF23y5h3mdPP6MdP05lZcpomwOY=
Subject key identifier:   42:9F:CE:AA:A9:2E:CA:8C:22:31:8F:CD:C8:D6:BA:CC:95:2C:2C:21
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       4DC8E90B7A5F7A58F06FC045D01EF26DA6A9635E
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35392e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:26 +0000
ROA not before:           Tue 20 Aug 2024 18:02:26 +0000
ROA not after:            Tue 19 Aug 2025 18:07:26 +0000
asID:                     28128
IP address blocks:        187.19.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c8:e9:0b:7a:5f:7a:58:f0:6f:c0:45:d0:1e:f2:6d:a6:a9:63:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:26 2024 GMT
            Not After : Aug 19 18:07:26 2025 GMT
        Subject: CN=429FCEAAA92ECA8C22318FCDC8D6BACC952C2C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f6:e4:e9:70:2f:bd:e6:49:d2:3c:1b:b9:60:
                    4d:bb:c5:76:f1:ad:eb:a5:2a:4f:44:71:b7:45:9a:
                    e0:a9:b0:e6:53:1f:54:56:33:71:30:ec:25:32:9f:
                    9e:31:0a:c8:2c:a9:98:3f:74:3f:58:bd:1b:5b:67:
                    07:12:6f:e1:79:73:d0:dc:6e:f2:1e:96:91:17:77:
                    87:90:2e:50:77:7e:de:60:ec:ab:24:f2:60:8c:be:
                    07:44:a4:b7:25:45:f0:5b:b9:2b:3e:7b:bf:90:ca:
                    5e:3d:9f:7b:d4:14:73:66:f8:e0:bb:8a:3b:20:b6:
                    ed:77:de:bb:db:ba:a6:d4:a8:03:73:2f:5a:74:f2:
                    8f:e2:e0:f2:ef:f4:ce:ba:73:ff:70:d4:69:50:14:
                    56:14:79:8e:09:40:a3:b8:58:78:9b:2b:a0:61:5d:
                    48:fa:1e:bf:f2:2a:10:99:af:a8:75:d5:05:8d:12:
                    56:57:c6:4c:85:24:a3:01:b0:ab:b2:70:2d:3d:85:
                    ca:dd:c4:d3:a4:96:b7:84:9d:b6:04:9f:90:ce:1a:
                    de:76:27:a3:18:10:8b:82:b8:c8:7f:83:af:8f:57:
                    ea:56:22:bd:7f:98:40:b7:ae:fa:38:97:0f:4e:e1:
                    e2:50:27:1e:d8:53:dd:0a:db:d3:b1:6c:40:89:a5:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9F:CE:AA:A9:2E:CA:8C:22:31:8F:CD:C8:D6:BA:CC:95:2C:2C:21
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35392e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:72:a7:c3:14:e6:c6:f6:e9:98:94:87:10:81:9f:31:94:
         ec:f8:56:f5:07:60:20:e3:ed:00:ab:d6:7f:4e:61:13:63:2c:
         05:c3:c7:3b:e5:20:dc:d1:ba:18:cf:d6:e0:ff:22:ee:65:bc:
         45:d2:bf:cc:77:0e:3d:59:43:5f:fb:ea:0a:cf:e2:27:ca:0c:
         84:66:5d:71:71:7a:1d:86:21:b8:a5:81:7e:8f:1c:85:be:06:
         bf:9c:2a:fe:a4:55:89:de:49:e7:22:c1:b0:9f:e2:58:ea:07:
         c9:3e:db:6b:a9:a7:de:4f:b9:56:81:b3:f2:f7:5f:47:0d:c2:
         11:de:ec:1b:e7:37:f7:1a:f5:e8:99:10:6d:3b:ef:59:42:2f:
         1d:be:f9:a3:43:b1:90:ab:f2:f3:a2:93:64:1b:b2:79:24:d1:
         85:f6:0a:22:95:86:bf:d7:a0:86:9f:fb:51:68:19:d7:8c:1e:
         81:d9:ef:cb:90:7b:63:53:62:bc:c6:8e:cf:f4:29:e6:17:59:
         84:31:26:29:f6:8f:21:53:d7:a5:f9:55:18:2f:d4:1d:43:d6:
         59:ac:3f:85:c5:6b:14:7b:47:22:dc:c3:ff:41:53:47:3b:c8:
         15:cf:27:e1:28:ec:72:07:a9:63:ca:1e:f3:d5:64:32:9e:bf:
         88:b4:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org