Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa
File:                     3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa (raw, json)
Hash identifier:          o8+PrmgyLF20WtF/LP5fTaAkcm/HFiNkR2ud6wODmUI=
Subject key identifier:   0F:BC:AA:84:8C:92:3C:DE:D5:75:AA:F2:A1:6C:A1:37:F6:47:40:80
Certificate issuer:       /CN=EB8181693A9CCB6DED5E600379193536AEE60C32
Certificate serial:       729F8D07B4CD58679C740AA38F3F95A898E5FAAE
Authority key identifier: EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa
Signing time:             Wed 29 May 2024 12:48:14 +0000
ROA not before:           Wed 29 May 2024 12:43:14 +0000
ROA not after:            Wed 28 May 2025 12:48:14 +0000
asID:                     262821
IP address blocks:        186.250.236.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl
                          rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:8d:07:b4:cd:58:67:9c:74:0a:a3:8f:3f:95:a8:98:e5:fa:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8181693A9CCB6DED5E600379193536AEE60C32
        Validity
            Not Before: May 29 12:43:14 2024 GMT
            Not After : May 28 12:48:14 2025 GMT
        Subject: CN=0FBCAA848C923CDED575AAF2A16CA137F6474080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:75:76:f5:c2:19:a6:0a:2e:54:aa:cd:d5:
                    37:ad:5d:36:cc:64:ba:d0:ac:75:0e:e7:bf:ba:88:
                    45:ef:60:b1:ea:ba:80:ea:3f:a8:5a:e3:18:91:cb:
                    98:4d:cc:23:83:e5:01:54:3d:60:69:f9:5d:ff:ee:
                    bc:4b:24:08:35:9b:42:2f:14:6f:92:b1:43:a3:c1:
                    86:2f:ef:b8:a4:8a:5d:1d:03:b9:ad:3f:55:58:7a:
                    2c:be:0a:a3:70:5c:75:bb:77:57:81:22:10:66:68:
                    27:b7:d5:26:23:32:4e:f1:00:6c:51:79:4f:1a:4f:
                    79:b0:da:12:a7:80:27:59:a3:a6:16:d4:74:66:df:
                    24:4a:55:c9:d9:a8:7c:c2:a2:c9:1f:48:c7:d0:bf:
                    86:a0:e8:10:4b:45:ad:5c:46:28:3b:e1:78:c6:9d:
                    9c:9e:fc:ee:cf:b0:f4:20:53:f5:2b:b9:eb:2f:10:
                    9e:14:fa:43:95:16:52:7f:16:d2:c9:87:b0:20:21:
                    99:cd:57:73:1a:dd:52:68:f5:79:85:f6:9b:63:c2:
                    4e:3c:65:74:2c:80:3a:54:c8:3f:d4:e0:0d:94:8c:
                    c5:5c:b6:e8:e8:e1:76:69:87:de:3a:84:66:fd:c1:
                    cb:d7:86:7a:a0:bc:2a:3a:1d:c5:0d:d6:1d:29:59:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:AA:84:8C:92:3C:DE:D5:75:AA:F2:A1:6C:A1:37:F6:47:40:80
            X509v3 Authority Key Identifier:
                keyid:EB:81:81:69:3A:9C:CB:6D:ED:5E:60:03:79:19:35:36:AE:E6:0C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/EB8181693A9CCB6DED5E600379193536AEE60C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8181693A9CCB6DED5E600379193536AEE60C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1EeHiNzW5SY9UPKcLqebstJD2RZU8NeN4ZGUyYrsvKc/0/3138362e3235302e3233362e302f32322d3332203d3e20323632383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:f0:33:d1:7d:f4:40:3a:9a:3c:3f:dd:f7:d7:30:a2:45:
         07:7f:7e:d2:d0:82:de:63:df:e5:77:2c:9c:48:8b:04:f7:d4:
         a7:a6:c2:62:f5:23:22:a3:33:63:32:9e:6e:05:8a:79:7b:02:
         ab:c2:8b:24:3e:b5:86:f7:b7:ba:bc:e9:b4:f2:37:42:9b:e2:
         11:dd:fe:70:2d:e4:7d:1e:ce:33:16:e7:86:10:45:fd:df:19:
         05:22:ff:2b:c9:ae:69:a8:2d:5d:48:bf:dd:1f:2e:70:9b:37:
         d2:07:2d:0c:7f:71:6a:c0:f3:6f:08:02:cd:56:92:ae:5a:b2:
         90:9e:45:f1:a5:1c:ee:74:f1:b5:04:c7:72:6e:0e:24:32:7b:
         44:0c:48:80:fc:60:9c:a6:84:0c:bb:8f:d3:15:ab:de:8c:0a:
         0c:fe:86:45:8d:44:ae:89:5e:fc:d5:a6:26:a6:04:58:aa:d6:
         ca:7d:19:67:30:ac:67:c2:5a:ff:88:55:1f:52:30:14:3c:cf:
         c7:bb:b8:cc:ea:02:bc:27:85:93:d0:43:cd:79:29:8c:7f:ab:
         29:7f:7a:15:df:a3:d7:6b:3d:e9:b8:dc:f5:c6:8b:d3:c9:bd:
         bd:d8:6f:db:45:ba:83:01:b3:39:6e:20:90:ac:f1:c0:d6:2e:
         3b:b6:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org