Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
File:                     3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          AoNbSNw/2hl/a0Dhph+o45aCMxXkXlC1rzWDQ5VSHoA=
Subject key identifier:   DF:FF:EE:BD:91:F2:8C:4A:4C:AC:45:F0:1B:80:45:5B:12:03:96:F8
Certificate issuer:       /CN=EE14C4AD9EB21100B0B337C4CC14BF630FD00C41
Certificate serial:       04CA91D65D0151868BE4320591F285130B0903A5
Authority key identifier: EE:14:C4:AD:9E:B2:11:00:B0:B3:37:C4:CC:14:BF:63:0F:D0:0C:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE14C4AD9EB21100B0B337C4CC14BF630FD00C41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
Signing time:             Thu 04 Apr 2024 01:28:41 +0000
ROA not before:           Thu 04 Apr 2024 01:23:41 +0000
ROA not after:            Thu 03 Apr 2025 01:28:41 +0000
asID:                     262675
IP address blocks:        186.233.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/EE14C4AD9EB21100B0B337C4CC14BF630FD00C41.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/EE14C4AD9EB21100B0B337C4CC14BF630FD00C41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE14C4AD9EB21100B0B337C4CC14BF630FD00C41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ca:91:d6:5d:01:51:86:8b:e4:32:05:91:f2:85:13:0b:09:03:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE14C4AD9EB21100B0B337C4CC14BF630FD00C41
        Validity
            Not Before: Apr  4 01:23:41 2024 GMT
            Not After : Apr  3 01:28:41 2025 GMT
        Subject: CN=DFFFEEBD91F28C4A4CAC45F01B80455B120396F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:f7:f2:5b:3d:2d:ec:4e:52:a4:f6:a0:a3:
                    40:fd:50:f3:55:52:e1:cb:56:82:c0:7a:d2:4e:c8:
                    f3:78:98:45:8a:8d:54:71:95:de:7a:aa:b8:60:8f:
                    d8:1a:4c:70:69:d2:75:a7:83:7c:d7:35:63:c6:d1:
                    6e:a3:15:64:91:5b:61:21:79:f0:e6:7f:0c:73:12:
                    07:55:ac:ff:4a:0e:f8:98:c0:86:d9:ec:74:74:e6:
                    d0:30:36:cb:c8:8e:14:71:42:c5:5a:1b:01:91:a7:
                    8f:1a:00:dd:d1:ac:da:fa:01:c0:04:c3:3b:f8:a2:
                    ad:66:d3:05:ff:9c:40:83:46:56:aa:28:22:f9:23:
                    da:31:14:25:ef:a7:c3:df:c3:ea:c1:dd:51:62:73:
                    97:d5:aa:63:68:c5:6c:30:9d:6e:96:fd:cd:10:e3:
                    80:aa:34:93:af:06:6b:e4:8a:2c:81:46:a6:ba:69:
                    24:6d:4f:a7:b4:f8:00:43:a3:9d:d9:f6:78:d9:59:
                    b0:dc:33:35:c4:6d:b2:94:f1:01:33:24:7c:01:e5:
                    58:ea:bc:2a:54:59:bb:cd:99:4e:fb:b4:23:67:36:
                    4d:ab:5e:d9:40:0f:51:af:2d:6f:17:5d:1c:37:d7:
                    75:ae:b1:5f:ee:c7:3f:58:37:1a:2d:44:0f:8a:d1:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FF:EE:BD:91:F2:8C:4A:4C:AC:45:F0:1B:80:45:5B:12:03:96:F8
            X509v3 Authority Key Identifier:
                keyid:EE:14:C4:AD:9E:B2:11:00:B0:B3:37:C4:CC:14:BF:63:0F:D0:0C:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/EE14C4AD9EB21100B0B337C4CC14BF630FD00C41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE14C4AD9EB21100B0B337C4CC14BF630FD00C41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:2f:5b:d9:33:b6:bb:95:15:d3:ff:31:8a:06:2d:3f:68:
         17:57:4c:72:7a:d6:fc:1b:9c:cc:07:92:77:3e:83:1b:4a:e8:
         90:a9:7a:68:44:82:06:80:57:c3:be:3b:ac:7a:b2:1e:0b:5b:
         d1:94:0b:bd:a2:93:47:a3:06:73:8a:42:8a:0c:0f:11:2e:19:
         be:3f:df:88:27:ed:77:77:0d:86:60:fe:87:16:d8:2a:5c:df:
         8d:71:b1:fc:3d:6e:5e:25:d6:df:6f:2f:74:06:7e:45:6c:55:
         cc:83:a2:63:80:e8:50:1e:fe:04:0a:00:45:ec:1e:c3:1d:34:
         41:36:24:be:21:94:69:2c:c6:be:dd:d9:42:5e:67:92:d5:37:
         6b:42:7f:67:1a:c7:dd:dc:77:6a:23:15:d7:78:9e:b4:80:ba:
         82:b1:6d:37:58:88:da:4b:0e:4e:32:c0:72:ec:18:a0:b9:1f:
         fd:93:c6:99:36:b0:a3:c3:dc:12:a2:25:05:85:99:92:8c:13:
         92:48:59:c7:ee:69:52:3f:4e:8a:03:77:7a:7e:5f:14:47:e0:
         ae:6d:48:5f:73:64:05:15:02:d5:e3:9b:15:14:f1:45:89:7e:
         68:e2:58:cf:b7:aa:14:66:03:a8:10:1d:bb:0d:c4:de:19:85:
         58:f5:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:19 2024 by rpki-client on console-fra.rpki-client.org