Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
File:                     3138372e31392e36312e302f32342d3234203d3e203238313238.roa (raw, json)
Hash identifier:          IYI+4/ptO+l6SzgU06BfmWEIiZrZk/VeklQmpQUA+Tw=
Subject key identifier:   CF:1A:8B:2C:84:C5:70:EA:EF:E1:2C:18:10:41:57:6E:3F:B1:24:72
Certificate issuer:       /CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
Certificate serial:       6420AC5FFAEF39AB90A8C3B0B94150E774333E5C
Authority key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa
Signing time:             Tue 20 Aug 2024 18:07:21 +0000
ROA not before:           Tue 20 Aug 2024 18:02:21 +0000
ROA not after:            Tue 19 Aug 2025 18:07:21 +0000
asID:                     28128
IP address blocks:        187.19.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:ac:5f:fa:ef:39:ab:90:a8:c3:b0:b9:41:50:e7:74:33:3e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320
        Validity
            Not Before: Aug 20 18:02:21 2024 GMT
            Not After : Aug 19 18:07:21 2025 GMT
        Subject: CN=CF1A8B2C84C570EAEFE12C181041576E3FB12472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:d6:55:49:f5:29:6d:84:46:9d:09:84:d5:
                    51:c1:23:b3:b6:02:af:5d:7b:0b:95:88:07:ef:57:
                    6b:ae:68:b1:8e:20:f8:13:ee:69:92:0c:b9:57:a0:
                    35:26:b6:57:5d:94:6d:80:04:d7:43:a3:eb:7c:f0:
                    c3:a5:f8:17:e6:ea:21:65:2d:cc:56:ea:62:84:b6:
                    de:30:46:ab:ad:bf:db:e2:07:b0:f0:5f:9d:9f:7a:
                    dc:48:6e:87:0a:50:be:13:d6:ec:09:8a:01:1c:f9:
                    13:d6:c3:a4:c3:5e:c3:1c:f6:32:d4:fe:05:c9:34:
                    b7:b7:79:7c:e3:52:e2:21:1c:45:b6:b7:2a:94:0b:
                    8f:91:ee:15:fb:f2:c5:7f:5f:6d:76:b1:a8:09:88:
                    b1:60:0a:5c:e4:20:78:8c:1d:7c:4b:58:1d:62:18:
                    72:55:84:36:90:52:f2:34:3e:d7:30:2d:b1:ed:3a:
                    2b:5d:7a:e5:30:b0:58:3a:4c:fd:0c:2f:d2:0f:48:
                    23:4a:e2:02:ff:b7:99:8e:86:8c:ca:0e:7b:af:70:
                    45:b9:3a:94:bd:6a:14:46:93:47:74:b0:4e:d8:5b:
                    30:7c:32:52:42:26:31:86:ae:9d:24:f8:8c:da:60:
                    82:71:d2:de:62:89:4f:04:72:52:b1:b5:78:50:72:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1A:8B:2C:84:C5:70:EA:EF:E1:2C:18:10:41:57:6E:3F:B1:24:72
            X509v3 Authority Key Identifier:
                keyid:57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e36312e302f32342d3234203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:ca:05:10:49:be:c6:de:7a:c4:2e:59:6b:23:d9:54:81:
         fe:9c:91:53:91:17:72:39:a5:a8:f5:b1:8c:30:7f:1c:f3:84:
         2e:7b:29:5b:57:81:b1:93:f9:b5:bd:3d:40:b2:13:03:e0:dc:
         8b:56:8f:46:57:33:ec:37:e0:c9:2e:b8:54:1f:93:1d:af:79:
         93:45:25:57:f8:6b:e2:98:e3:d9:0d:6d:1f:0f:05:ea:93:88:
         93:eb:04:2d:48:a0:29:87:b5:eb:97:1b:5b:26:b5:a0:80:4c:
         5d:3b:b4:25:2b:d5:ba:cf:b7:d4:47:d8:6d:0a:86:4f:e8:29:
         f7:11:ce:56:fe:27:e9:7d:14:2d:b1:68:ed:0b:b6:87:3a:52:
         3e:72:d0:c2:4a:0b:53:cb:74:89:9a:d8:d5:a7:39:22:eb:1e:
         9f:8b:3b:68:e9:f9:ea:e4:55:99:44:d4:da:7e:52:3a:84:82:
         59:cf:77:21:aa:57:9b:0d:b5:00:77:66:ff:be:c0:f9:b1:6d:
         6c:14:5f:7e:06:d0:03:1c:cb:76:8d:a0:b2:99:52:87:e1:63:
         2b:98:4f:8a:3c:c7:46:a2:d7:28:69:ce:27:9f:fb:36:30:93:
         c2:77:ab:df:b0:eb:ad:83:a3:e9:1a:4a:6d:ea:ba:e6:9e:32:
         09:6a:55:7f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZCCsX/rvOauQqMOwuUFQ53QzPlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdFMzUxNjlFQTRFODZFN0Y3NDEzQUQ2RDc0RjI0RDFE
QTc1MzMyMDAeFw0yNDA4MjAxODAyMjFaFw0yNTA4MTkxODA3MjFaMDMxMTAvBgNV
BAMTKENGMUE4QjJDODRDNTcwRUFFRkUxMkMxODEwNDE1NzZFM0ZCMTI0NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsItZVSfUpbYRGnQmE1VHBI7O2
Aq9dewuViAfvV2uuaLGOIPgT7mmSDLlXoDUmtlddlG2ABNdDo+t88MOl+Bfm6iFl
LcxW6mKEtt4wRqutv9viB7DwX52fetxIbocKUL4T1uwJigEc+RPWw6TDXsMc9jLU
/gXJNLe3eXzjUuIhHEW2tyqUC4+R7hX78sV/X212sagJiLFgClzkIHiMHXxLWB1i
GHJVhDaQUvI0PtcwLbHtOitdeuUwsFg6TP0ML9IPSCNK4gL/t5mOhozKDnuvcEW5
OpS9ahRGk0d0sE7YWzB8MlJCJjGGrp0k+IzaYIJx0t5iiU8EclKxtXhQcic7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUzxqLLITFcOrv4SwYEEFXbj+xJHIwHwYDVR0j
BBgwFoAUV+NRaepOhuf3QTrW108k0dp1MyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC81N0UzNTE2OUVBNEU4NkU3Rjc0MTNBRDZENzRGMjREMURBNzUzMzIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RTM1MTY5RUE0RTg2RTdG
NzQxM0FENkQ3NEYyNEQxREE3NTMzMjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzEzODM3MmUzMTM5MmUzNjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsTPTANBgkqhkiG9w0BAQsFAAOCAQEAhazKBRBJvsbe
esQuWWsj2VSB/pyRU5EXcjmlqPWxjDB/HPOELnspW1eBsZP5tb09QLITA+Dci1aP
Rlcz7DfgyS64VB+THa95k0UlV/hr4pjj2Q1tHw8F6pOIk+sELUigKYe165cbWya1
oIBMXTu0JSvVus+31EfYbQqGT+gp9xHOVv4n6X0ULbFo7Qu2hzpSPnLQwkoLU8t0
iZrY1ac5Iusen4s7aOn56uRVmUTU2n5SOoSCWc93IapXmw21AHdm/77A+bFtbBRf
fgbQAxzLdo2gsplSh+FjK5hPijzHRqLXKGnOJ5/7NjCTwner37DrrYOj6RpKbeq6
5p4yCWpVfw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:40 2024 by rpki-client on console-ams.rpki-client.org