Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa
File:                     3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa (raw, json)
Hash identifier:          45+R2zt3+L2b0Cby42Ti+qnAXzmHHSwQ8weobBSfU4k=
Subject key identifier:   7D:29:17:C1:CF:6C:54:94:96:AD:A9:1A:2F:F3:C3:69:D7:94:4B:C5
Certificate issuer:       /CN=EB8181693A9CCB6DED5E600379193536AEE60C32
Certificate serial:       16F8045F64A2BC6F323D584562C54F99CC642BEF
Authority key identifier: EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa
Signing time:             Wed 29 May 2024 12:48:05 +0000
ROA not before:           Wed 29 May 2024 12:43:05 +0000
ROA not after:            Wed 28 May 2025 12:48:05 +0000
asID:                     262821
IP address blocks:        138.94.100.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl
                          rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f8:04:5f:64:a2:bc:6f:32:3d:58:45:62:c5:4f:99:cc:64:2b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8181693A9CCB6DED5E600379193536AEE60C32
        Validity
            Not Before: May 29 12:43:05 2024 GMT
            Not After : May 28 12:48:05 2025 GMT
        Subject: CN=7D2917C1CF6C549496ADA91A2FF3C369D7944BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:cd:17:ef:db:44:14:06:6a:a3:e5:4c:07:
                    5f:63:ee:d6:48:8d:08:0f:03:9c:1d:6e:08:87:c6:
                    b6:81:50:4a:54:b1:38:c9:e1:37:55:27:cf:ce:44:
                    a6:88:8a:10:54:b4:d9:00:58:8e:6e:3e:1d:ac:73:
                    d5:3a:8f:ee:ee:df:eb:f8:45:ba:5d:9f:fe:a1:7d:
                    b6:b7:84:75:48:28:06:d0:33:42:98:54:f5:c5:cd:
                    be:66:ff:21:77:1d:0e:a4:64:08:21:a0:06:d1:18:
                    4c:95:07:93:03:2e:d8:2c:a3:d0:9c:9d:9d:23:d3:
                    ee:54:56:76:03:36:d8:b4:20:15:16:04:fd:7a:f9:
                    f8:d0:41:ce:cb:ad:6d:ae:e6:7f:ac:3f:75:96:bc:
                    c9:5f:98:df:b2:bd:bb:e6:69:a5:07:4d:41:c8:81:
                    5f:4c:56:f1:eb:04:7b:9f:6f:84:51:41:35:f9:b6:
                    f4:c4:55:f0:83:97:d1:d2:97:6f:1a:02:18:36:c6:
                    9b:99:e6:6d:95:6f:74:4d:90:a9:27:f6:b9:e8:e4:
                    28:0d:c3:52:68:aa:e2:95:e2:d6:54:64:03:5a:76:
                    c7:39:1c:9b:47:e7:50:0f:a9:2b:13:a5:0d:bf:f3:
                    d3:e5:3c:25:27:21:ad:bf:f8:04:08:77:a0:e7:85:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:29:17:C1:CF:6C:54:94:96:AD:A9:1A:2F:F3:C3:69:D7:94:4B:C5
            X509v3 Authority Key Identifier:
                keyid:EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3133382e39342e3130302e302f32322d3332203d3e20323632383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:16:6c:1e:8c:6f:29:73:d3:1f:66:27:b6:84:5a:e0:e2:
         8b:74:26:6c:30:61:02:ff:13:67:1c:15:ca:6d:08:f0:0f:85:
         c4:d3:8f:c5:ba:19:90:a6:97:e3:24:34:e6:75:81:42:57:6c:
         3b:92:30:5e:89:58:50:8e:f1:f9:02:d2:9c:02:1f:38:23:ae:
         ae:95:ea:cb:41:a5:2b:02:f6:29:ca:e9:e9:5c:b2:a8:c1:28:
         be:cc:e5:e6:53:42:c1:c6:ec:cb:08:53:ce:f6:19:06:86:0c:
         4b:1b:fb:22:a8:58:a3:bb:f7:3e:cd:de:79:b9:2e:8e:8f:9a:
         d7:47:06:2d:0b:b9:8a:83:ef:37:ae:c1:b1:5d:ac:ec:27:c5:
         79:bf:be:56:fe:20:8f:4f:62:27:f1:af:e9:11:e8:df:bf:e4:
         0b:3c:b5:c3:69:ac:3f:5a:3e:48:e7:a4:6c:af:8e:a3:f9:b5:
         b5:38:fa:23:f8:65:c3:67:c9:00:d0:cd:a5:e4:1c:fe:45:0f:
         ba:48:61:b4:44:c5:3a:30:29:e4:15:63:74:01:5a:0d:97:96:
         42:03:59:a5:8b:f5:0a:7c:89:e2:23:4c:0b:8b:88:e6:2f:16:
         54:ae:91:2e:16:04:67:24:e4:2b:28:89:70:01:da:7c:2f:1f:
         bd:c4:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org