Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3138362e3231372e302e302f31362d3138203d3e203533313636.roa
File:                     3138362e3231372e302e302f31362d3138203d3e203533313636.roa (raw, json)
Hash identifier:          t8y/+0KRviTOGJenh078otVeXkzL6TYdfWnnXVDnfQw=
Subject key identifier:   83:8E:4D:A7:D1:AC:3D:59:71:F4:91:EA:6D:C6:51:A9:85:9C:14:3D
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       7B788848BC6CDD4ADEEE18A5629ECB15FA9062D0
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3138362e3231372e302e302f31362d3138203d3e203533313636.roa
Signing time:             Wed 03 Apr 2024 18:30:08 +0000
ROA not before:           Wed 03 Apr 2024 18:25:08 +0000
ROA not after:            Wed 02 Apr 2025 18:30:08 +0000
asID:                     53166
IP address blocks:        186.217.0.0/16 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:78:88:48:bc:6c:dd:4a:de:ee:18:a5:62:9e:cb:15:fa:90:62:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Apr  3 18:25:08 2024 GMT
            Not After : Apr  2 18:30:08 2025 GMT
        Subject: CN=838E4DA7D1AC3D5971F491EA6DC651A9859C143D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:ac:79:74:27:e7:4d:8d:0d:8c:4d:8e:9c:
                    c5:11:ea:99:e5:ed:3a:73:5c:88:0c:f7:9f:30:60:
                    35:a4:f4:7c:47:94:d8:46:4d:b0:4e:8f:07:dd:42:
                    55:80:c2:64:c4:9b:1e:f2:c0:55:ea:08:7d:68:d4:
                    fb:72:b4:46:66:86:a8:59:d0:1a:6c:2e:99:cf:37:
                    1d:7d:94:da:ac:12:35:38:24:6a:08:1f:57:a6:20:
                    d9:22:b0:88:61:e2:67:d8:a5:f7:b0:9b:55:74:f5:
                    82:f1:b9:12:c4:03:86:e0:59:27:51:63:27:1a:cb:
                    eb:b0:4d:26:4e:44:32:c4:52:0e:fa:39:78:6c:48:
                    af:0d:8f:e8:16:16:b2:85:85:24:1a:0f:28:2f:18:
                    d0:ed:7e:7a:d9:7d:9f:66:5d:d8:70:41:32:6f:bd:
                    53:f3:d0:dc:12:a7:3d:20:59:de:1e:da:b6:ea:11:
                    38:6a:13:ac:4d:89:4b:06:7d:c2:f2:1c:86:13:bd:
                    2e:76:17:aa:79:03:30:9e:eb:14:ea:ed:2d:2d:8f:
                    16:14:ad:e7:de:a7:83:f8:a7:b2:92:a8:52:29:90:
                    a4:5d:fb:39:9e:43:7a:0c:20:e8:06:58:72:2f:bd:
                    38:77:0c:93:43:e8:0e:95:22:70:5e:a1:a2:77:f7:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8E:4D:A7:D1:AC:3D:59:71:F4:91:EA:6D:C6:51:A9:85:9C:14:3D
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3138362e3231372e302e302f31362d3138203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:7d:20:20:ca:26:2c:29:3b:51:8e:f5:a3:c4:be:cc:44:0d:
         88:d3:61:15:63:12:e3:4a:81:9a:e8:10:e3:07:9f:28:77:24:
         f6:e5:97:52:08:63:22:34:56:8b:40:16:64:2f:7a:1c:12:bf:
         18:00:df:21:86:61:d9:76:f7:92:0a:42:ca:cf:85:d3:71:a0:
         50:2f:9f:f6:19:c8:a1:04:23:ff:44:ab:cf:c1:a8:a4:a7:5d:
         cd:ed:3f:a9:d9:df:b1:83:ad:c7:46:b6:e9:f3:cc:79:95:13:
         a4:04:72:7e:4e:0e:91:f6:17:d2:a5:b4:6f:f1:d9:db:e7:da:
         01:ba:3b:92:82:b9:db:00:50:0e:b2:ec:2b:49:35:13:6f:76:
         9f:42:4c:44:c0:d3:da:66:92:4c:e5:4d:99:bc:32:ac:47:5c:
         79:11:fe:06:25:90:47:45:64:d1:72:47:bd:50:62:16:e8:de:
         d4:4e:8c:24:1f:e0:5b:cc:df:6d:d1:37:32:94:c9:46:10:84:
         55:ae:5c:08:2c:85:39:47:6e:20:6f:e7:a8:cb:f6:2b:29:1d:
         8f:9e:2b:0d:cb:49:8a:db:9d:6e:b9:33:91:eb:b6:0d:c8:d4:
         d4:22:6b:98:ab:5c:d7:b8:1e:4d:a7:a6:24:6c:f5:ff:1b:85:
         85:d3:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org