Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e302e302f31362d3332203d3e203237373135.roa
File:                     3138362e3230322e302e302f31362d3332203d3e203237373135.roa (raw, json)
Hash identifier:          21p4lO/ctaSqEPRBYjnIn2tbq51HKr6Iz0iW8BDCAy4=
Subject key identifier:   32:5C:D2:EE:92:BA:04:AF:CD:48:07:2C:A3:A7:6D:93:40:DE:FF:8D
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       61A5D9F7BF316070FAFA6E536F271606E4815E14
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e302e302f31362d3332203d3e203237373135.roa
Signing time:             Thu 04 Apr 2024 01:16:59 +0000
ROA not before:           Thu 04 Apr 2024 01:11:59 +0000
ROA not after:            Thu 03 Apr 2025 01:16:59 +0000
asID:                     27715
IP address blocks:        186.202.0.0/16 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a5:d9:f7:bf:31:60:70:fa:fa:6e:53:6f:27:16:06:e4:81:5e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Apr  4 01:11:59 2024 GMT
            Not After : Apr  3 01:16:59 2025 GMT
        Subject: CN=325CD2EE92BA04AFCD48072CA3A76D9340DEFF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:d2:da:ab:7d:07:8c:d8:d8:26:3a:9a:55:
                    d4:dd:b3:47:ad:54:99:9f:33:4e:f7:18:95:3f:46:
                    99:15:43:70:cd:e5:38:aa:81:09:af:e8:c4:19:17:
                    74:2b:76:6f:62:29:41:f0:f3:06:a7:1b:76:2b:d9:
                    47:0d:7d:83:dc:2f:b4:9b:ff:99:61:44:33:49:97:
                    ba:b5:96:b8:a0:6b:b4:64:29:fb:83:b9:08:7b:62:
                    e5:f2:61:1d:43:46:04:fb:45:4b:63:e3:12:e4:6e:
                    68:9d:85:96:68:e8:3b:6f:d0:30:4f:79:d2:12:2f:
                    5e:c3:e4:51:7c:53:9b:e9:5c:4c:83:00:77:cf:48:
                    ea:da:5a:0f:36:44:2e:45:cd:18:62:d4:97:50:88:
                    28:b3:cc:a6:2a:cb:63:98:69:1d:07:df:7a:5d:3d:
                    eb:02:91:79:7a:91:18:dc:a2:d3:6f:6c:8b:23:24:
                    d7:be:48:91:4c:f4:60:9b:0e:bb:80:ee:e5:62:75:
                    34:a5:fb:be:08:95:b5:62:f6:20:f3:29:5c:12:55:
                    bc:98:fe:c9:67:fa:e7:a2:66:71:50:ba:ce:fd:3c:
                    0b:b9:30:9d:32:3f:58:c5:f0:43:e0:61:3d:f2:01:
                    60:e7:d3:c9:25:66:f5:c0:e4:0e:c0:05:38:fb:ed:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5C:D2:EE:92:BA:04:AF:CD:48:07:2C:A3:A7:6D:93:40:DE:FF:8D
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3138362e3230322e302e302f31362d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:11:90:4e:c4:86:6c:51:b2:cb:a3:69:0c:ee:b8:f2:ae:
         03:80:6a:f8:41:57:49:b1:d7:e0:2c:13:c0:6e:4d:7d:21:c1:
         c9:fd:5e:84:a5:da:29:23:b7:ae:34:e2:6e:69:ef:80:43:07:
         fb:ef:17:33:ae:20:ed:ae:60:6a:6b:8c:6e:55:fe:bf:57:06:
         aa:20:5b:d6:b6:da:1b:b6:dd:df:db:11:6f:c9:65:55:46:96:
         86:25:17:0a:bc:40:61:c4:97:cc:8c:f5:79:dc:df:5d:57:e1:
         52:c6:cc:74:0a:5e:bd:13:ee:20:73:34:ef:45:b7:03:c2:de:
         5a:43:31:27:ec:43:01:79:9e:22:f3:bb:56:1c:bc:01:16:9a:
         86:47:e9:6e:28:b9:91:08:6f:40:fe:92:cd:01:95:ee:1c:bd:
         04:8b:bb:42:3b:77:de:f9:f3:3c:c9:70:9b:0e:70:82:41:df:
         8d:01:67:31:8a:fd:0b:c6:e6:8c:3a:29:7f:df:e0:37:80:0d:
         9a:0e:11:a7:aa:17:fe:4b:23:7e:80:bc:53:a9:53:56:36:ff:
         64:e6:4a:2d:50:05:2b:67:cd:dc:df:85:1f:90:11:cd:94:1a:
         f2:49:ed:2c:5f:33:96:72:22:d7:15:43:61:5d:8a:60:27:57:
         fd:45:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:05 2024 by rpki-client on console-fra.rpki-client.org