Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa
File:                     3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa (raw, json)
Hash identifier:          740j9yWQ3VzBt4gawYQ2IrUDC5kaGD0jzp0M1w4xCq4=
Subject key identifier:   0C:53:69:E3:BF:D9:DB:9B:E4:16:C1:1B:E1:C2:E0:0D:D5:E4:63:7E
Certificate issuer:       /CN=47F932452F6354876C2CDBACA9AD34D90A502586
Certificate serial:       42A2FA09975263FE842C1801645365A58ED5C235
Authority key identifier: 47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa
Signing time:             Mon 20 May 2024 17:29:48 +0000
ROA not before:           Mon 20 May 2024 17:24:48 +0000
ROA not after:            Mon 19 May 2025 17:29:48 +0000
asID:                     262355
IP address blocks:        186.233.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl
                          rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:fa:09:97:52:63:fe:84:2c:18:01:64:53:65:a5:8e:d5:c2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F932452F6354876C2CDBACA9AD34D90A502586
        Validity
            Not Before: May 20 17:24:48 2024 GMT
            Not After : May 19 17:29:48 2025 GMT
        Subject: CN=0C5369E3BFD9DB9BE416C11BE1C2E00DD5E4637E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:e8:86:c8:35:1b:12:12:8c:ae:31:49:9b:
                    65:e6:e2:a4:3f:10:7c:b0:f4:95:09:c4:63:b0:4a:
                    45:ab:e4:3e:49:3c:3d:f9:75:6b:58:79:1a:4b:a2:
                    3d:89:ff:34:2e:1f:d5:a6:a7:54:ee:dd:22:8f:b2:
                    a8:30:b5:f2:79:46:89:ec:3e:38:ff:5e:e5:91:90:
                    58:a3:10:83:94:1a:47:17:8a:1e:fd:d9:85:46:8b:
                    78:9a:38:0e:18:1a:ae:50:b1:64:55:17:6b:d1:e6:
                    ed:40:c1:fb:78:23:5c:da:0f:32:4c:02:5d:2d:48:
                    4d:92:a8:21:08:59:0d:85:ff:b1:a4:00:5d:05:63:
                    8c:e3:b2:cf:4e:ac:ca:e2:b0:53:16:a4:9d:00:07:
                    62:54:75:0d:e3:a8:4a:4e:48:10:c4:12:2e:a0:ce:
                    5a:28:68:cf:09:65:a4:ab:7b:ba:ed:a7:7c:ea:6e:
                    0a:e8:cf:bd:5a:89:20:d0:cf:51:0f:db:e7:15:8d:
                    19:29:b4:3c:1d:4c:8e:5f:b0:48:04:f2:cb:f6:70:
                    70:e5:ea:3e:ae:7e:b0:26:31:4f:f5:e3:9b:78:b5:
                    93:36:7f:f6:ed:7b:3d:da:d2:2b:76:0d:d1:aa:ec:
                    70:b3:aa:e1:98:e4:a6:9b:83:2a:1a:cc:90:7e:79:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:53:69:E3:BF:D9:DB:9B:E4:16:C1:1B:E1:C2:E0:0D:D5:E4:63:7E
            X509v3 Authority Key Identifier:
                keyid:47:F9:32:45:2F:63:54:87:6C:2C:DB:AC:A9:AD:34:D9:0A:50:25:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/47F932452F6354876C2CDBACA9AD34D90A502586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F932452F6354876C2CDBACA9AD34D90A502586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFgLmf13kAPpPjE2UeMR2wPCfD3AEf5oanCF7o1Xpmuv/0/3138362e3233332e3138382e302f32322d3234203d3e20323632333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:73:d3:1d:31:06:82:1b:cd:a6:9e:15:73:a7:2e:2d:2e:a8:
         a0:32:56:98:f1:69:a3:0e:c2:65:22:b2:1b:9e:4f:e6:ba:9f:
         d1:d7:a6:14:11:63:82:c2:24:16:fb:ee:3e:8d:66:ea:7b:25:
         64:2f:20:df:c2:ab:49:6c:96:48:f7:e8:21:d8:07:77:0e:4f:
         62:04:b7:72:8d:a7:c8:90:5c:be:aa:1a:6d:60:5f:28:e6:01:
         8b:94:f0:50:8b:49:73:5a:e4:dc:3a:5a:d6:cf:33:80:c6:af:
         b9:23:0e:51:18:45:42:5b:b8:ff:37:d9:72:d1:31:fb:44:1c:
         64:8d:39:f2:b4:06:0b:e6:79:e4:56:68:7f:b2:55:df:7d:5b:
         af:32:dd:ec:db:21:df:28:dd:9b:d4:9e:e8:2b:1a:f1:c9:82:
         94:62:28:9d:a0:9c:60:26:6c:d8:cc:ec:db:f0:eb:3a:73:4e:
         02:59:84:a5:0a:d7:f4:ee:80:1e:66:e8:bd:51:59:aa:5d:0a:
         95:80:f0:43:1d:2d:c2:80:48:9f:50:d2:05:17:12:87:aa:7d:
         b7:c8:d9:66:fe:99:13:cd:f4:3c:ab:56:af:cc:4f:68:ff:61:
         13:b1:d7:b5:5b:52:07:35:cb:5c:0f:16:ca:00:72:12:d7:0d:
         e1:f2:58:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:52 2024 by rpki-client on console-ams.rpki-client.org