Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/3139312e33362e3233322e302f32322d3234203d3e20323633333434.roa
File:                     3139312e33362e3233322e302f32322d3234203d3e20323633333434.roa (raw, json)
Hash identifier:          DiwdcfHJ2uMSeCfeNYOukOI6wMXSkmRc1z+4xAWYLZ0=
Subject key identifier:   B2:5D:A1:1F:B8:44:B2:EF:FA:99:EE:F9:43:02:15:A2:2A:5D:7C:52
Certificate issuer:       /CN=E4B445687C5FB9BC74E73FA432C723FEADB41DBE
Certificate serial:       738C77AA09E6DA5782A849B2BAEB4F6F1FCB764D
Authority key identifier: E4:B4:45:68:7C:5F:B9:BC:74:E7:3F:A4:32:C7:23:FE:AD:B4:1D:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/3139312e33362e3233322e302f32322d3234203d3e20323633333434.roa
Signing time:             Fri 13 Sep 2024 12:24:29 +0000
ROA not before:           Fri 13 Sep 2024 12:19:29 +0000
ROA not after:            Fri 12 Sep 2025 12:24:29 +0000
asID:                     263344
IP address blocks:        191.36.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl
                          rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:77:aa:09:e6:da:57:82:a8:49:b2:ba:eb:4f:6f:1f:cb:76:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B445687C5FB9BC74E73FA432C723FEADB41DBE
        Validity
            Not Before: Sep 13 12:19:29 2024 GMT
            Not After : Sep 12 12:24:29 2025 GMT
        Subject: CN=B25DA11FB844B2EFFA99EEF9430215A22A5D7C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:ae:71:5c:2b:68:55:ad:64:bb:df:68:cd:
                    de:8e:e7:67:28:3f:8d:57:2a:0c:70:58:ac:27:f6:
                    70:c0:18:ac:ef:fc:87:3e:15:5d:a7:b4:8b:d4:80:
                    a9:37:4e:cb:03:c3:f4:93:98:6d:24:a7:33:96:cb:
                    fc:42:bf:2e:93:61:a3:a7:fb:41:57:a5:32:6e:13:
                    d6:f5:65:81:e2:3e:39:8b:66:7c:6b:38:37:0b:05:
                    3e:90:b0:57:d5:ed:ba:a2:a6:db:bf:4f:2e:7d:4f:
                    ab:ef:54:94:32:bb:4b:c2:8e:64:72:2c:23:a3:b2:
                    cb:ce:28:aa:63:4d:56:f3:d9:69:fa:6b:6c:d0:2f:
                    b3:f0:26:f0:2b:32:13:75:e5:82:e9:18:83:a4:be:
                    65:36:11:1f:81:e9:0d:34:fa:db:94:a9:04:fc:ed:
                    ac:44:02:77:53:bb:d8:ab:e4:3e:7c:58:27:c1:9c:
                    48:6f:6d:c7:70:a9:fd:ba:fc:0a:1c:0f:4a:5a:63:
                    bf:48:11:76:9e:da:bf:56:9d:d9:53:d9:dc:74:98:
                    0e:fc:a0:9b:fc:41:2b:f1:b9:f1:73:95:0c:d3:9a:
                    e0:5e:0a:e8:95:03:9b:20:2f:5e:df:34:23:0d:43:
                    84:f2:fc:a7:17:77:7a:83:31:8e:5c:9e:5d:02:d3:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5D:A1:1F:B8:44:B2:EF:FA:99:EE:F9:43:02:15:A2:2A:5D:7C:52
            X509v3 Authority Key Identifier:
                keyid:E4:B4:45:68:7C:5F:B9:BC:74:E7:3F:A4:32:C7:23:FE:AD:B4:1D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B445687C5FB9BC74E73FA432C723FEADB41DBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLDcuf35Yg78CQGCsrd7qHxa6dkRjokLb1nNKrx9SuSR/0/3139312e33362e3233322e302f32322d3234203d3e20323633333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:ab:8b:c3:d6:76:98:0a:e1:66:a0:9d:4a:61:1e:22:91:
         2c:8b:28:2a:6c:f3:44:40:70:66:ba:75:96:f0:e7:b4:f1:32:
         a1:d0:52:69:2b:75:18:d0:72:35:b9:70:4e:c3:b5:94:07:7c:
         09:9e:0c:04:44:ea:60:df:d2:39:5c:4b:61:34:08:8a:91:af:
         d4:8e:4e:7b:f6:9c:98:37:71:5f:00:16:5e:9b:d3:57:84:c5:
         eb:d6:ce:49:7b:97:db:57:cf:4b:d2:a1:58:5f:37:99:9c:b6:
         f7:a2:83:be:9b:1e:bf:4c:b8:58:5b:f4:9c:a6:7b:79:5e:ab:
         cd:1e:2a:c2:be:a5:e6:a3:f7:a6:fe:38:05:73:79:ff:f1:90:
         27:42:76:60:b9:90:34:c8:74:df:6a:95:0d:86:42:5e:7b:2b:
         09:07:5e:eb:77:c3:0f:43:74:fb:a4:bb:34:0f:94:cd:e4:ab:
         e4:f0:61:9f:68:55:b9:37:58:72:06:d8:a8:af:93:90:a5:e2:
         5c:7c:34:5c:93:6b:06:ea:62:b5:ce:9c:d1:9f:fa:9b:c9:f9:
         0a:e4:8c:26:37:7f:69:56:7c:fc:a5:b4:75:a4:ad:7f:ed:96:
         ba:bb:60:c8:8b:fa:e2:9f:70:8a:1d:42:e8:45:82:fa:56:e7:
         92:72:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:54 2024 by rpki-client on console-ams.rpki-client.org