Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          uxsHjMC1bdR4clJZl8Q4fCY6b6I8y8K9ed6txYVVL2s=
Subject key identifier:   C2:57:E7:36:E8:35:31:90:95:C1:7F:D8:0C:EE:DD:38:8A:B9:48:F1
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       1B40658A40FC93F36DD4DEBF2E911DCE300AB41F
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 12 Nov 2024 21:44:34 +0000
ROA not before:           Tue 12 Nov 2024 21:39:34 +0000
ROA not after:            Tue 11 Nov 2025 21:44:34 +0000
asID:                     263335
IP address blocks:        191.36.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:40:65:8a:40:fc:93:f3:6d:d4:de:bf:2e:91:1d:ce:30:0a:b4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Nov 12 21:39:34 2024 GMT
            Not After : Nov 11 21:44:34 2025 GMT
        Subject: CN=C257E736E835319095C17FD80CEEDD388AB948F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:19:35:be:6b:1f:c9:ea:7d:db:2d:59:c0:
                    bb:c0:5f:22:06:db:7a:08:de:78:06:69:cb:80:20:
                    3d:5f:b3:6a:92:3a:d7:bd:a6:3b:6b:35:92:9c:7e:
                    3b:70:e3:59:3f:a8:37:cb:87:8e:29:f4:af:12:3f:
                    90:55:00:1d:af:db:b3:a9:3e:4a:04:fb:dd:77:ef:
                    67:b8:13:5c:d0:41:96:24:80:aa:a4:e2:e0:b7:66:
                    ff:3d:99:94:c3:0b:95:3e:ec:e2:01:b6:f1:57:07:
                    47:b7:f5:17:51:c0:df:98:96:c4:93:90:45:a7:51:
                    94:12:50:d9:8f:77:6c:6a:dc:7b:16:22:b9:2e:53:
                    d1:27:f7:b7:58:d1:9e:77:49:39:7a:41:85:37:62:
                    fe:e5:08:8b:ed:e8:7c:c4:74:de:97:4c:2a:5b:6c:
                    96:3b:14:80:41:28:8e:16:68:18:c1:46:69:f3:c2:
                    38:06:12:02:9a:99:03:92:27:ea:0a:94:65:22:26:
                    2e:59:ae:24:a9:fb:cb:4f:2f:f8:58:4d:61:bb:7f:
                    6b:c3:0e:9d:9c:2e:c5:9b:c7:7a:09:3c:05:37:c3:
                    01:91:32:ca:e2:d5:21:04:0f:ec:54:2b:3f:e7:61:
                    7d:51:eb:67:d7:2e:36:f2:7c:93:2b:77:ab:2e:58:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:57:E7:36:E8:35:31:90:95:C1:7F:D8:0C:EE:DD:38:8A:B9:48:F1
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:ca:13:89:07:5a:ba:a4:c4:c0:0f:ca:e7:64:f9:f6:f8:3d:
         4f:e9:75:b9:04:ca:39:0e:23:cd:d9:7a:83:59:55:b9:4c:47:
         88:36:63:85:58:43:75:94:f4:c8:3f:e7:eb:77:41:db:6d:d7:
         58:95:b7:d7:ad:fe:e2:93:27:74:a8:5b:c3:7f:5b:80:c2:1e:
         4d:f4:a1:87:b2:27:0b:9e:12:03:a6:ab:87:f9:2e:0a:06:41:
         9d:6e:74:15:61:3f:82:ad:30:01:b5:b8:c3:9c:7a:da:e5:68:
         a3:93:b5:5b:ac:fc:d5:89:c0:f9:ec:9f:2f:33:4e:a3:88:19:
         df:98:11:12:5f:ba:06:dd:14:10:da:5a:66:65:af:f4:ca:fe:
         44:a2:3c:20:43:ef:6b:0c:bb:87:0d:89:ef:bc:89:33:08:e4:
         a0:c5:1e:f2:df:76:bb:16:e1:60:4f:17:d9:ac:49:83:9c:63:
         e8:71:28:1a:9a:d0:c8:53:ab:e9:60:10:59:a1:0b:74:fc:bf:
         c8:8b:35:f4:4e:cf:0f:13:ec:92:57:67:df:6e:03:5e:16:c8:
         dd:5e:0f:c1:03:1b:23:06:a8:14:2f:3b:b8:20:d7:0a:8d:83:
         ab:d0:2b:af:aa:9a:34:d6:99:20:c7:5b:53:3e:ea:70:e0:ab:
         ae:15:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:37 2025 by rpki-client