Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa
File:                     3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          9x7RnnYMPZgMzV43EDcPtISmuuhqr8lMECyc1R2X1zc=
Subject key identifier:   3D:CE:FC:28:F0:35:F8:57:5C:A3:FC:C6:4C:30:E8:D4:56:43:3A:81
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       4398045A5AF838440C17EA835C5A26AD308F5A8C
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa
Signing time:             Mon 20 May 2024 17:29:00 +0000
ROA not before:           Mon 20 May 2024 17:24:00 +0000
ROA not after:            Mon 19 May 2025 17:29:00 +0000
asID:                     262355
IP address blocks:        186.195.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:98:04:5a:5a:f8:38:44:0c:17:ea:83:5c:5a:26:ad:30:8f:5a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: May 20 17:24:00 2024 GMT
            Not After : May 19 17:29:00 2025 GMT
        Subject: CN=3DCEFC28F035F8575CA3FCC64C30E8D456433A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:db:59:24:47:b0:f3:e4:2c:d1:fc:ed:f2:
                    87:21:51:93:ce:78:f3:09:10:6b:67:17:7e:8f:70:
                    e6:1c:54:cd:3d:cd:df:d8:b3:71:08:0f:e2:4a:97:
                    72:d6:41:25:fd:08:fd:de:d1:51:a8:78:91:b0:01:
                    f6:40:fe:f6:2e:c9:3d:21:46:6b:32:1d:17:ff:57:
                    ee:5d:cf:05:fd:51:e0:37:30:f8:55:04:50:ff:94:
                    00:a1:6e:4b:8a:7d:a7:2b:f8:d3:22:3f:58:1c:34:
                    17:be:55:8e:63:1e:ae:5c:5e:97:67:97:07:5f:c4:
                    a2:51:6c:30:43:8e:41:ed:1c:c3:6b:65:fb:94:86:
                    5a:24:1f:10:cd:f5:52:df:ea:8b:8b:aa:50:e4:2a:
                    f0:ae:13:8d:56:d2:c3:12:2c:da:d4:14:d1:50:d9:
                    56:22:dd:01:0c:a4:b7:dc:2d:23:9d:bf:ca:d0:9b:
                    da:c7:91:4b:60:d3:b8:af:48:04:64:6c:99:f0:40:
                    84:49:ad:17:3d:6b:ab:a4:41:6d:df:4b:9f:d3:62:
                    4b:49:55:96:de:dc:12:e5:c6:af:a1:46:0c:03:ba:
                    41:55:34:15:8c:26:8c:86:04:37:f8:cf:c9:77:5d:
                    d9:5b:24:5f:31:bb:c9:fe:44:cd:66:fa:de:af:ea:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:FC:28:F0:35:F8:57:5C:A3:FC:C6:4C:30:E8:D4:56:43:3A:81
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3139352e3131322e302f32302d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:c7:76:54:a2:ce:ff:5a:38:54:1c:d1:a2:6f:68:30:ee:
         68:b1:16:a1:b5:67:45:4e:9d:1c:4d:d3:a0:53:f8:5c:dd:0a:
         c0:90:8a:d0:b7:c9:88:7b:8b:f0:bd:80:ec:d5:c8:a0:df:7c:
         33:6a:ae:c4:8a:64:2f:ff:2f:ca:50:e6:d6:77:12:13:92:eb:
         23:60:7a:ac:65:3d:41:ae:f1:07:6a:c4:91:3f:5a:bd:9d:76:
         12:78:1f:50:81:09:35:7e:ad:4e:cc:71:a6:78:d9:16:29:7e:
         15:d2:db:39:b4:16:15:b9:e7:94:c1:39:e4:8d:c6:56:91:56:
         31:05:f4:22:40:1f:2c:78:2b:47:98:d8:91:3d:b3:70:8b:e8:
         42:f4:03:15:8c:d7:df:8f:e0:16:f2:4e:92:ab:da:af:3d:07:
         c5:89:75:95:f6:19:76:b1:7c:9b:da:b2:f4:b0:40:65:ce:d5:
         b4:81:c1:c1:c3:2e:f4:51:70:c2:01:c7:8c:67:ff:8c:85:d6:
         0e:eb:9c:75:ad:36:9e:03:02:fb:4d:40:20:9b:61:0d:70:30:
         19:35:ef:e7:db:fa:bc:4c:8b:1f:26:1c:a6:6c:8c:ee:85:52:
         85:27:8e:28:6e:3f:41:ac:50:cf:59:bd:a0:53:dd:95:53:c1:
         f3:b8:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:50 2024 by rpki-client on console-fra.rpki-client.org