Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa
File:                     3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa (raw, json)
Hash identifier:          h0vQ0NCKBQn1+cc8RXK5LBhWAW8EnNJFG9sVqrGl7PA=
Subject key identifier:   4E:E1:8A:1F:8D:23:FE:BC:75:5E:63:78:66:98:15:B7:57:FE:41:A6
Certificate issuer:       /CN=8AE4EB207A648990E78CA113D88B9704FE8BCC31
Certificate serial:       5C33DDD2E9348D3175EE20D6EDCD103C4FD25F37
Authority key identifier: 8A:E4:EB:20:7A:64:89:90:E7:8C:A1:13:D8:8B:97:04:FE:8B:CC:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa
Signing time:             Thu 04 Apr 2024 09:37:32 +0000
ROA not before:           Thu 04 Apr 2024 09:32:32 +0000
ROA not after:            Thu 03 Apr 2025 09:37:32 +0000
asID:                     270600
IP address blocks:        189.36.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:33:dd:d2:e9:34:8d:31:75:ee:20:d6:ed:cd:10:3c:4f:d2:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4EB207A648990E78CA113D88B9704FE8BCC31
        Validity
            Not Before: Apr  4 09:32:32 2024 GMT
            Not After : Apr  3 09:37:32 2025 GMT
        Subject: CN=4EE18A1F8D23FEBC755E6378669815B757FE41A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:64:99:b1:7a:e3:83:4d:27:05:07:86:b3:
                    9d:2b:b8:96:03:45:9e:5b:50:5f:c1:28:9b:80:10:
                    3d:0c:b6:78:16:f3:0e:b7:5f:ef:46:47:d1:b6:5a:
                    52:b8:9b:e5:ea:00:01:11:65:fe:ff:e5:d9:eb:05:
                    b9:30:0f:1f:0a:7c:43:9e:e7:41:db:85:92:78:b5:
                    49:6f:5d:7b:57:87:7f:1f:3c:28:2c:b2:c2:63:54:
                    93:ae:d0:30:9d:ec:e2:ce:1b:bc:f9:4d:28:1d:48:
                    98:40:32:7c:4b:b5:4f:b1:15:fc:c2:cc:86:e1:03:
                    18:9e:92:44:7e:f7:94:d1:c2:f0:b6:0a:6c:6f:1a:
                    03:a1:00:ba:52:77:6d:94:7e:a5:f1:e6:81:89:3f:
                    19:92:e2:4e:c5:84:db:59:da:86:8e:d4:6e:01:d6:
                    0f:6a:a9:73:df:c9:d8:ab:f5:48:5e:8b:24:8b:55:
                    a6:c8:6e:9b:fc:f9:5b:c2:9b:06:26:77:89:3b:31:
                    98:eb:9d:12:08:1a:e7:81:b3:aa:4f:db:aa:a4:5a:
                    24:75:d1:49:9b:f1:2d:22:cd:90:eb:54:2c:93:19:
                    bf:1f:b2:c0:ca:f9:59:9d:c2:dd:c7:86:fc:98:7e:
                    45:cc:55:76:4e:8d:5a:9a:13:5a:bb:fd:ad:b9:8b:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E1:8A:1F:8D:23:FE:BC:75:5E:63:78:66:98:15:B7:57:FE:41:A6
            X509v3 Authority Key Identifier:
                keyid:8A:E4:EB:20:7A:64:89:90:E7:8C:A1:13:D8:8B:97:04:FE:8B:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/3138392e33362e3132382e302f32322d3234203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:3f:ab:4c:43:6d:da:7c:6d:c2:1a:ac:f2:6b:57:2f:17:
         a4:36:e4:90:05:c2:16:b0:ee:69:6a:ac:e1:d3:14:61:a0:02:
         50:50:87:d2:80:dc:db:3e:10:ed:cc:6a:0b:54:16:5f:34:0e:
         b5:d5:fb:bb:7a:23:32:ef:b1:56:e8:fb:8e:84:c3:8c:03:2b:
         43:6f:44:fb:d1:df:c9:09:cd:95:b9:a9:22:fd:81:55:01:0d:
         fa:87:72:8d:e1:1a:52:bc:cb:d5:02:ef:95:cd:1b:01:a9:d3:
         10:84:fb:72:80:ae:81:66:07:65:ed:f6:63:4e:01:aa:f2:2e:
         9d:10:f7:1b:9b:90:1e:24:a4:54:37:b5:8d:33:7b:6d:d8:0e:
         b0:b9:41:cd:13:c6:6f:d5:a5:cf:d8:6b:ac:8f:73:a2:32:97:
         bf:bd:89:1c:84:96:01:50:d9:69:74:15:e0:e3:60:68:fc:d0:
         34:7c:c7:f5:b7:aa:40:52:43:35:a3:20:91:8a:f5:4f:e0:89:
         36:9d:6d:67:a9:24:25:5c:1e:ca:66:f1:ce:02:ea:8e:d8:63:
         07:d6:84:bb:4d:c4:57:88:cd:21:c7:39:be:5a:0d:1d:bb:6a:
         aa:3e:27:74:33:e9:11:2a:0d:17:aa:a6:c4:bd:2b:bc:cd:90:
         41:18:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org