Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          i6JKndtLp9GCRd0NghIK/I7B4EA6z+NnzGq41Fq1VPY=
Subject key identifier:   05:1A:1F:94:3D:6D:FA:51:51:71:AE:DF:79:68:71:3E:63:15:80:9E
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       0F6653D9DA0F7F3BD4638C7C37C9D999B646D734
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 12 Nov 2024 21:44:34 +0000
ROA not before:           Tue 12 Nov 2024 21:39:34 +0000
ROA not after:            Tue 11 Nov 2025 21:44:34 +0000
asID:                     263335
IP address blocks:        191.36.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:66:53:d9:da:0f:7f:3b:d4:63:8c:7c:37:c9:d9:99:b6:46:d7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Nov 12 21:39:34 2024 GMT
            Not After : Nov 11 21:44:34 2025 GMT
        Subject: CN=051A1F943D6DFA515171AEDF7968713E6315809E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:5f:09:bd:0a:f3:dd:78:6f:5f:e9:97:e4:
                    3c:7f:ae:05:cf:5e:7f:64:9d:83:76:4c:16:4a:a7:
                    f8:8f:e0:15:cc:b4:44:0f:e6:4a:8f:38:49:81:1e:
                    f3:31:e1:32:f3:30:d9:eb:7d:cf:b6:32:d0:5b:49:
                    0b:f3:a5:d2:36:0b:ff:59:5a:12:91:71:26:c5:38:
                    33:95:82:74:5e:aa:6b:9d:5f:92:f5:19:f6:10:e9:
                    a6:12:45:eb:75:09:e6:60:6a:64:95:68:c8:65:21:
                    1d:ba:c8:13:f5:93:27:73:72:c8:e8:cc:06:12:4b:
                    3c:2c:63:29:45:c1:41:40:69:10:b1:56:67:64:4f:
                    cb:88:8c:61:22:4e:ef:3c:1b:b4:3d:55:06:46:63:
                    00:e1:74:32:fb:6d:81:84:9c:3c:b5:20:7a:b3:48:
                    88:db:f1:9d:1e:24:18:8f:5f:ef:c9:e0:e4:47:ff:
                    dc:62:60:6c:66:5b:c6:50:10:97:42:62:ac:9f:59:
                    0c:cb:df:d8:d7:4a:fe:91:24:7a:cc:0b:9d:91:48:
                    e6:17:cf:5c:a1:2e:d1:86:24:11:eb:67:1a:ab:4a:
                    1a:f1:79:cd:d2:fa:bf:1a:d2:8d:22:fa:c7:d7:22:
                    4a:7f:8b:e8:ed:9b:a3:93:e0:c0:09:76:8a:4b:12:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:1F:94:3D:6D:FA:51:51:71:AE:DF:79:68:71:3E:63:15:80:9E
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133382e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:fb:ea:79:cf:76:43:f8:95:bf:eb:65:9f:8b:66:fd:64:
         ac:9d:54:9d:d2:3c:c4:ed:1f:0d:d9:be:7f:a4:2c:d4:dc:da:
         4d:4b:86:c6:28:5d:17:80:39:d8:57:98:1f:99:04:99:1a:37:
         b1:63:22:42:64:46:70:e8:45:52:de:26:68:0b:cb:05:2b:d2:
         92:6c:19:24:26:d6:0d:65:78:63:03:64:21:1a:d8:4b:d2:f3:
         c6:5a:88:ca:6c:38:17:6c:b9:34:75:43:5c:c9:5d:c9:f8:50:
         d0:0f:8b:8c:9e:cf:37:fe:54:35:b5:82:4f:bc:26:11:de:ab:
         25:20:b7:b6:20:c7:8e:be:56:87:17:5d:1b:1e:45:4d:2e:fc:
         f8:1a:94:84:bf:0d:e5:44:be:73:1d:c7:54:7f:a7:70:be:20:
         2e:74:51:4d:96:f6:c9:a8:ab:ac:bd:99:14:8f:3a:4a:b7:d8:
         22:db:d7:e2:e5:7e:dc:d6:87:85:ce:da:0c:68:0b:4c:29:b3:
         ad:cd:bf:24:65:d1:30:b3:a7:ae:86:a9:be:a3:58:ac:b5:f1:
         41:dd:76:f2:3b:41:23:4e:fe:aa:92:62:73:35:ca:d1:70:b5:
         cc:5a:77:e8:8b:ed:c2:ff:98:03:ef:45:15:72:26:9f:5f:83:
         b2:34:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:33 2025 by rpki-client