Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa
File:                     3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa (raw, json)
Hash identifier:          HTY2LMlN2S9ORnpnax+xY2Z7qMMBbwO5PnPwHA8oWh0=
Subject key identifier:   13:80:51:C3:25:97:60:42:8A:C3:1C:F3:E7:B3:88:20:1D:64:3E:4C
Certificate issuer:       /CN=E90FADD185C99957F5FCF5080635615A398C0DA4
Certificate serial:       6F097D1191AA5E6B8A2DB42662C4AB6CC18D63CE
Authority key identifier: E9:0F:AD:D1:85:C9:99:57:F5:FC:F5:08:06:35:61:5A:39:8C:0D:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E90FADD185C99957F5FCF5080635615A398C0DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa
Signing time:             Mon 03 Jun 2024 20:19:36 +0000
ROA not before:           Mon 03 Jun 2024 20:14:36 +0000
ROA not after:            Mon 02 Jun 2025 20:19:36 +0000
asID:                     270596
IP address blocks:        187.17.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/E90FADD185C99957F5FCF5080635615A398C0DA4.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/E90FADD185C99957F5FCF5080635615A398C0DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E90FADD185C99957F5FCF5080635615A398C0DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:09:7d:11:91:aa:5e:6b:8a:2d:b4:26:62:c4:ab:6c:c1:8d:63:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E90FADD185C99957F5FCF5080635615A398C0DA4
        Validity
            Not Before: Jun  3 20:14:36 2024 GMT
            Not After : Jun  2 20:19:36 2025 GMT
        Subject: CN=138051C3259760428AC31CF3E7B388201D643E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:04:63:6b:74:b2:af:ba:ed:51:af:de:e2:9e:
                    9d:95:80:87:78:a7:42:ea:22:70:89:6f:e8:8d:61:
                    d7:30:70:fe:97:36:2c:69:11:43:4e:81:b7:b5:68:
                    c8:b1:f7:09:59:85:0f:85:25:28:8d:76:34:9d:09:
                    c6:cb:98:b7:db:c5:8c:68:29:59:6a:c4:d7:e9:af:
                    62:d5:7c:3e:6c:62:75:4f:6a:ac:75:f1:3d:2c:d9:
                    86:02:2a:3c:a0:cd:d7:51:58:a3:4c:51:40:2f:72:
                    8d:84:db:93:a0:bf:c1:74:e8:60:bd:41:a0:64:e6:
                    95:33:a0:c6:0f:93:11:f3:ae:9f:cf:d9:29:57:20:
                    3a:5a:5f:5d:d6:e5:d5:3d:87:00:c2:be:bc:ae:9a:
                    cf:21:51:ce:9f:d1:5e:f5:6e:bc:42:f1:16:c5:20:
                    ef:2d:d2:96:10:0d:15:40:ee:7d:6d:fb:c5:81:87:
                    63:cf:c3:b5:f2:72:21:33:e1:c1:c4:eb:1d:18:5c:
                    27:a1:7f:94:f3:7c:cc:0e:f4:03:b1:0b:6b:50:35:
                    bc:3a:96:da:73:32:a4:bb:3d:fa:18:7f:69:bb:d0:
                    63:e8:01:8d:f7:6d:8e:96:40:bc:11:38:65:33:66:
                    39:b2:ab:43:bd:b9:d3:3c:8e:9c:d3:ff:fe:b8:be:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:80:51:C3:25:97:60:42:8A:C3:1C:F3:E7:B3:88:20:1D:64:3E:4C
            X509v3 Authority Key Identifier:
                keyid:E9:0F:AD:D1:85:C9:99:57:F5:FC:F5:08:06:35:61:5A:39:8C:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/E90FADD185C99957F5FCF5080635615A398C0DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E90FADD185C99957F5FCF5080635615A398C0DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:59:31:ae:4b:8f:fd:3d:6b:35:06:71:e4:7b:dd:4a:69:
         37:cd:aa:be:e9:55:88:c7:24:07:93:8d:6f:0b:42:65:17:85:
         57:6f:b9:71:b1:ed:71:7c:be:0e:1c:26:1e:74:36:60:9e:ef:
         65:5b:24:3a:6e:61:28:99:2f:84:e9:df:f2:ae:5b:46:bd:86:
         10:91:80:dd:f8:11:29:f8:ef:04:67:73:bd:b2:a8:e0:50:85:
         42:84:5c:94:6c:cb:4b:62:7f:b8:88:5a:e6:2a:65:52:2f:8d:
         fe:08:7e:52:64:be:22:35:71:e1:be:a7:18:36:ac:17:af:c1:
         fd:be:8a:17:18:73:a8:0d:54:b5:07:7d:bf:ad:70:95:51:4c:
         a0:00:05:92:a8:9d:0e:4e:5e:01:94:e9:ab:c8:11:26:e5:2b:
         84:91:b6:95:24:01:e7:b4:2a:a7:91:c7:91:ba:51:63:0a:4b:
         2e:75:f1:8a:51:91:90:4f:95:70:58:59:b5:67:cb:73:cb:8e:
         d6:cb:f2:d3:55:b0:39:eb:fb:cd:d7:6a:2d:86:1b:2e:1d:46:
         ae:20:16:6d:26:07:0c:b8:96:c7:31:73:5f:78:da:83:28:d0:
         c4:43:e0:cb:f1:04:fd:1a:f2:83:c9:82:35:1b:5a:90:ce:e0:
         04:d4:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:10 2024 by rpki-client on console-ams.rpki-client.org