Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233322e302f32322d3332203d3e20323632383231.roa
File:                     3138362e3235302e3233322e302f32322d3332203d3e20323632383231.roa (raw, json)
Hash identifier:          1+idHwz4mmwYjB3IXKslpPDbQ0p+96iE020TOGV5fTk=
Subject key identifier:   37:53:C5:88:E0:CE:46:89:81:1B:6A:6E:32:41:F1:51:BA:D0:A5:6C
Certificate issuer:       /CN=EB8181693A9CCB6DED5E600379193536AEE60C32
Certificate serial:       68C793F678C0504B65760FD5CAE325F45FD49FB9
Authority key identifier: EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233322e302f32322d3332203d3e20323632383231.roa
Signing time:             Wed 29 May 2024 12:47:37 +0000
ROA not before:           Wed 29 May 2024 12:42:37 +0000
ROA not after:            Wed 28 May 2025 12:47:37 +0000
asID:                     262821
IP address blocks:        186.250.232.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl
                          rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:93:f6:78:c0:50:4b:65:76:0f:d5:ca:e3:25:f4:5f:d4:9f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8181693A9CCB6DED5E600379193536AEE60C32
        Validity
            Not Before: May 29 12:42:37 2024 GMT
            Not After : May 28 12:47:37 2025 GMT
        Subject: CN=3753C588E0CE4689811B6A6E3241F151BAD0A56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:bb:e0:5d:9d:0e:fa:96:3e:96:2d:53:a4:
                    cb:a1:85:a2:a1:d9:36:ae:30:69:25:5e:ef:29:b0:
                    18:8b:04:ad:1b:72:2e:d2:80:af:fd:90:50:d6:e0:
                    ac:b0:fc:e4:b3:b4:d4:48:15:ab:3b:ba:a0:a2:9b:
                    40:63:7e:d9:4b:33:c1:03:b1:c9:da:95:5e:06:39:
                    00:b8:13:87:42:66:fe:a0:89:47:23:65:5a:4a:b1:
                    43:1f:68:56:d2:90:d9:37:7f:6d:db:12:c1:7b:35:
                    67:75:d4:cd:6a:c5:6a:4d:7e:6d:af:08:be:ef:4d:
                    ba:c6:4e:fe:67:0c:b4:57:4a:cb:f1:1d:dd:0e:1b:
                    9e:52:64:a5:2b:80:75:ee:00:b3:5f:9e:24:86:e4:
                    9e:2c:d4:70:26:a4:45:34:e2:f0:9b:f0:b0:1a:da:
                    c9:3d:c4:03:5c:fc:47:8a:4b:7b:a2:d6:be:5e:e2:
                    7f:43:6b:2c:dd:ff:5a:1a:e8:42:1e:d9:a7:61:2a:
                    0e:4a:38:52:19:11:a5:2f:1d:a5:f7:70:1a:97:19:
                    8c:8e:9f:2a:2c:16:ad:68:fb:67:36:09:ed:1e:36:
                    fc:d6:e2:32:e3:02:45:60:c2:47:ec:1a:bb:19:e7:
                    b1:11:78:88:cc:d7:21:b5:fa:cc:b5:10:e9:a7:ed:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:C5:88:E0:CE:46:89:81:1B:6A:6E:32:41:F1:51:BA:D0:A5:6C
            X509v3 Authority Key Identifier:
                keyid:EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233322e302f32322d3332203d3e20323632383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:cb:2e:94:92:de:15:3c:c2:43:28:f7:12:da:37:58:d7:
         39:c6:e6:61:6e:4f:d8:59:a8:f7:94:21:30:2a:e1:f0:a8:10:
         95:cf:72:bb:b8:08:62:77:5b:d4:5e:d4:4c:93:c9:79:57:50:
         76:d2:bf:56:84:ec:31:b6:22:50:e4:47:a1:1f:c1:c6:68:29:
         b2:0f:b6:e2:2b:c1:5b:64:07:4e:78:31:c1:2c:56:d9:7f:ae:
         85:68:f7:02:2d:dc:62:02:68:bc:e0:e7:c5:2e:7f:23:cc:0d:
         10:f9:7b:c7:63:9d:a0:ad:10:1e:6e:79:64:82:c6:3e:3a:88:
         65:e9:06:7a:49:7d:96:f3:d8:64:96:fb:07:9e:25:4c:01:84:
         30:80:2e:77:62:f6:e9:eb:4a:ed:c5:d6:51:97:63:42:9a:e7:
         01:9c:8a:4e:74:89:90:cf:49:cc:f7:31:ae:95:b1:52:f1:2d:
         96:36:c2:de:b8:4f:e0:e4:ec:4e:2d:bc:bd:65:cc:c6:ad:c2:
         35:32:70:56:19:73:16:62:53:ed:fb:d0:ac:ad:cb:d9:07:dd:
         bb:71:7d:33:18:64:3b:12:d8:f9:99:e4:06:e6:e8:20:b6:16:
         36:91:9f:11:9c:46:4f:5f:c9:b6:f5:e4:72:ce:55:93:0e:9b:
         97:d5:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org