Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3138362e3139322e33322e302f32302d3234203d3e203533313332.roa
File:                     3138362e3139322e33322e302f32302d3234203d3e203533313332.roa (raw, json)
Hash identifier:          aIiset8JrJkcx4vOIFDfc2SjRr6Deet7zSFKa47rkWc=
Subject key identifier:   6E:23:18:D7:05:D1:88:8F:78:08:6E:CD:31:62:D4:3D:B3:42:D3:E4
Certificate issuer:       /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial:       3C96DD19FA20DDCEC4410CA296820772ACDB32EB
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3138362e3139322e33322e302f32302d3234203d3e203533313332.roa
Signing time:             Thu 04 Apr 2024 03:33:10 +0000
ROA not before:           Thu 04 Apr 2024 03:28:10 +0000
ROA not after:            Thu 03 Apr 2025 03:33:10 +0000
asID:                     53132
IP address blocks:        186.192.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl
                          rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:dd:19:fa:20:dd:ce:c4:41:0c:a2:96:82:07:72:ac:db:32:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
        Validity
            Not Before: Apr  4 03:28:10 2024 GMT
            Not After : Apr  3 03:33:10 2025 GMT
        Subject: CN=6E2318D705D1888F78086ECD3162D43DB342D3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:95:a0:3c:c7:71:1c:94:31:bd:ac:d4:01:
                    e0:00:86:74:bd:2d:22:9b:4f:5f:ca:96:56:ae:b9:
                    1e:7e:e3:00:6c:05:59:41:ff:53:84:e6:9e:76:02:
                    1b:b9:86:2d:30:b7:6e:11:e3:4e:68:23:77:49:9c:
                    6b:98:b9:99:f7:45:a2:e7:78:f9:2d:54:11:18:e5:
                    b8:1a:80:99:30:79:4a:46:ff:2e:70:38:12:4e:ab:
                    c3:dc:10:20:8f:9c:cd:23:8c:b3:aa:57:49:6d:3c:
                    f7:19:79:e9:e9:ca:c1:e2:9b:d0:2d:74:1c:b5:08:
                    12:c1:c2:67:e5:7a:47:8a:78:19:f6:8d:e7:19:6e:
                    5b:32:35:e1:78:00:d5:4c:5b:39:65:49:2c:40:30:
                    91:ea:82:e5:2e:0a:c0:a9:8e:95:2c:85:f9:ae:49:
                    96:20:9a:cb:49:59:67:43:fc:a8:f3:af:58:66:d6:
                    e8:db:c9:a2:a3:00:a8:7c:d9:02:a1:0d:e0:a1:31:
                    be:88:01:8d:a3:e6:36:14:62:f1:2d:16:92:db:60:
                    1c:41:1f:09:1d:5b:fe:bc:26:74:f8:8c:45:3e:ec:
                    6a:fc:ba:17:b1:f4:9e:14:d9:84:c5:59:71:75:fc:
                    77:8c:23:1e:c3:e6:19:16:40:8f:3e:79:20:63:9c:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:23:18:D7:05:D1:88:8F:78:08:6E:CD:31:62:D4:3D:B3:42:D3:E4
            X509v3 Authority Key Identifier:
                keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3138362e3139322e33322e302f32302d3234203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:88:bd:0e:1a:11:8d:18:f7:e8:6b:c8:f0:83:05:2f:90:
         88:89:2c:4d:c4:82:d6:dc:30:fc:dc:62:a2:bb:a8:cc:4f:70:
         fa:b6:a9:23:0b:3a:e0:4d:fc:fe:38:b8:b9:af:35:b0:d3:28:
         8a:93:72:7d:e8:7c:0b:92:eb:7f:2b:dd:0c:f1:d9:a5:e0:58:
         00:ea:51:8b:88:4b:e1:9b:56:29:6d:59:f3:69:9b:0d:b4:06:
         52:00:34:da:29:c7:c9:98:af:03:1c:32:22:15:a5:ac:cb:f5:
         32:6c:93:ac:8d:4d:cc:eb:82:b4:81:19:00:31:99:f4:d0:e4:
         29:ab:df:01:79:97:b5:df:1b:e4:a7:a7:78:dd:80:8c:40:df:
         5f:21:4c:c3:47:44:66:7e:fd:14:9b:a9:1a:d5:55:34:14:b0:
         bb:a8:3c:c6:27:90:ac:ba:79:2c:fc:74:87:6f:b7:20:36:89:
         72:a7:df:49:6b:1f:4d:ec:a9:e4:88:a0:73:0f:de:fc:1e:d9:
         e1:20:0e:29:0a:46:11:cd:c9:74:a5:30:d5:a3:15:46:4a:d1:
         5a:76:47:3b:5a:8e:7c:f2:61:4d:80:83:9e:0f:4b:40:3d:c7:
         9f:83:d2:49:32:da:ec:7b:39:e5:b4:72:47:76:1a:8a:c2:39:
         25:40:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org