Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32332d3233203d3e20323730353737.roa
File:                     3138372e39342e31322e302f32332d3233203d3e20323730353737.roa (raw, json)
Hash identifier:          cPUpwzYe2/7IYPB7RjMk8F/ply223A36xL7KeDEJ70g=
Subject key identifier:   25:A4:D9:22:89:67:63:B5:A7:54:2C:A2:C4:92:1F:F4:99:12:D8:75
Certificate issuer:       /CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
Certificate serial:       56E838862538BA4556110F5CFC417F93D73F1211
Authority key identifier: FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32332d3233203d3e20323730353737.roa
Signing time:             Tue 22 Oct 2024 21:08:47 +0000
ROA not before:           Tue 22 Oct 2024 21:03:47 +0000
ROA not after:            Tue 21 Oct 2025 21:08:47 +0000
asID:                     270577
IP address blocks:        187.94.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e8:38:86:25:38:ba:45:56:11:0f:5c:fc:41:7f:93:d7:3f:12:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
        Validity
            Not Before: Oct 22 21:03:47 2024 GMT
            Not After : Oct 21 21:08:47 2025 GMT
        Subject: CN=25A4D922896763B5A7542CA2C4921FF49912D875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:f9:de:4b:b2:cd:fe:d2:73:5e:bd:ec:0e:
                    9f:4a:a4:75:46:50:fd:bd:a0:63:2b:21:9f:bf:37:
                    7c:ff:b4:07:e4:b4:a0:7e:d3:fe:a3:d2:49:ea:de:
                    8e:13:ae:55:e0:cd:75:76:1e:71:90:6b:26:91:55:
                    9f:c1:8d:99:44:fc:97:d4:eb:e9:2c:21:f3:48:23:
                    58:3d:d1:e9:f0:87:b3:2b:f7:3d:2a:df:17:16:c7:
                    38:51:85:bc:c2:75:c9:6f:05:82:2e:1b:4f:e9:d2:
                    99:bb:a7:ef:58:7a:21:4c:89:df:f6:f8:9b:4a:06:
                    d1:f1:32:a3:86:99:95:67:7a:03:12:d0:70:1b:c9:
                    e9:89:f1:b5:4f:61:18:72:a0:d3:96:12:24:a8:67:
                    f7:3c:29:dc:b3:07:d8:38:89:67:88:2b:b5:3d:31:
                    7b:b4:61:57:a9:ec:24:f9:02:e4:83:ac:1e:c1:b7:
                    d9:37:43:fe:be:e1:b2:fa:cb:a7:22:1d:e5:62:94:
                    6e:18:00:4f:6a:b6:41:b1:86:65:d1:d7:8d:1e:66:
                    de:06:75:fa:11:93:cb:43:e6:9d:82:89:7a:43:95:
                    fa:df:49:d2:ce:2a:6b:b0:7e:59:2a:bd:c4:dc:3d:
                    f6:be:af:54:53:2a:f4:1d:a3:d5:6c:5c:f3:c6:2a:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A4:D9:22:89:67:63:B5:A7:54:2C:A2:C4:92:1F:F4:99:12:D8:75
            X509v3 Authority Key Identifier:
                keyid:FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32332d3233203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:4d:4b:a9:fd:26:19:85:fe:52:24:38:34:5a:f7:bf:b5:
         a2:77:2a:c9:a9:91:aa:e5:fa:78:70:c2:82:29:79:d7:58:16:
         43:9b:e1:7d:84:18:9c:a7:dd:7a:f0:0f:ec:d6:67:f3:be:a6:
         f8:3b:c4:5b:93:6f:7a:ad:51:4a:db:25:29:66:fc:ce:5f:7f:
         35:1e:e8:ba:05:dc:a2:6c:6d:fc:c3:ee:ce:ed:a7:18:cf:3d:
         4b:1e:08:7d:78:f2:b7:83:20:58:c3:6a:4e:f0:9f:fa:05:ee:
         88:83:24:91:4d:f7:df:7f:d5:e0:a2:f9:3c:6b:66:a6:da:6e:
         ff:c8:8e:39:14:fd:f2:10:e2:47:72:34:25:d0:43:36:4f:98:
         38:b1:8f:13:ea:9b:4a:ff:56:05:42:79:26:97:c1:08:42:af:
         93:b9:a9:bc:f2:8d:a9:26:12:0d:bb:99:48:7c:69:00:8a:80:
         65:b1:00:4b:0c:2d:1e:30:68:3c:c2:f6:45:92:ad:1e:0d:96:
         9b:fa:63:15:37:ab:bd:ad:f8:98:d5:45:da:de:e0:ef:38:6a:
         e9:b9:23:76:38:0a:a1:3e:cd:be:58:c7:a9:24:f0:50:12:03:
         1b:6c:df:52:23:0e:c9:fa:ac:5b:6a:61:7d:ac:c7:5c:8d:92:
         6a:2b:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org