Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          UHi5I3IeH6AYWLtOrDfP9k9TB/ZFJ6CD5tPkdnZHRlU=
Subject key identifier:   25:10:09:34:BE:BB:78:5C:AF:02:0C:45:3F:CA:45:58:1D:49:4D:3D
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       53B64F1639726E89164859B490D335A3FDCDF508
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa
Signing time:             Tue 30 Apr 2024 19:25:11 +0000
ROA not before:           Tue 30 Apr 2024 19:20:11 +0000
ROA not after:            Tue 29 Apr 2025 19:25:11 +0000
asID:                     263335
IP address blocks:        191.36.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b6:4f:16:39:72:6e:89:16:48:59:b4:90:d3:35:a3:fd:cd:f5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Apr 30 19:20:11 2024 GMT
            Not After : Apr 29 19:25:11 2025 GMT
        Subject: CN=25100934BEBB785CAF020C453FCA45581D494D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:b3:1e:63:69:db:9c:0a:b4:d5:12:c2:54:
                    7a:4d:8d:74:15:26:71:ad:e2:72:25:ba:cc:8a:8a:
                    a0:a8:8b:2d:86:10:13:47:f0:26:1a:e7:cb:77:f4:
                    07:f0:79:b5:21:b0:16:21:fb:03:06:20:a9:82:49:
                    c3:94:74:30:72:f6:2c:3c:e9:98:01:85:35:c8:ad:
                    fe:35:86:b8:08:35:da:fe:a6:f3:82:30:26:8c:f8:
                    cc:82:ac:0b:df:fd:19:46:98:f1:8e:92:c1:93:b5:
                    ae:f4:02:55:28:ee:95:58:ca:9a:33:72:a5:7d:5d:
                    6f:8a:03:da:60:79:20:c3:ae:a4:cb:62:1d:07:f7:
                    bc:6f:32:35:ef:bb:02:bd:ff:9b:05:90:ca:8a:06:
                    12:76:77:81:79:be:4d:50:bf:a1:a7:b2:78:a2:23:
                    18:2a:f8:9d:71:75:20:e8:fc:7a:96:5c:9d:e7:d7:
                    eb:64:f8:e6:41:af:73:01:61:80:f7:b0:f2:af:61:
                    cf:39:cb:3d:7b:41:02:15:5f:1b:b3:58:bd:c8:f0:
                    3c:4d:31:6d:97:69:9f:a6:4b:1a:72:37:cb:68:2e:
                    dd:0f:e3:cc:50:8c:16:b6:b9:43:19:f3:1c:8b:ea:
                    42:fe:6f:22:43:3e:a0:a5:17:88:df:b6:54:0e:ab:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:10:09:34:BE:BB:78:5C:AF:02:0C:45:3F:CA:45:58:1D:49:4D:3D
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:7b:09:81:78:de:d7:b1:50:1e:9f:27:a8:0b:bf:85:55:
         38:03:cb:1e:a6:9e:f4:d8:06:7a:15:54:95:6b:aa:0e:46:89:
         a5:0b:4c:f7:e5:7e:be:a6:fb:7a:77:49:e5:cc:bf:c3:30:dc:
         8f:31:e1:d4:ac:a4:1e:0a:71:07:4b:c4:16:71:79:34:88:ea:
         f9:43:7c:a3:cf:14:c9:b7:53:da:1d:51:13:d8:74:cd:1c:ec:
         70:c0:61:2d:5e:b3:f2:40:82:fb:d5:2c:ca:cc:dd:d8:54:df:
         64:87:2c:e9:8d:dd:08:df:f7:2d:41:86:0e:94:06:96:90:a7:
         7e:27:43:66:6a:c9:7f:ef:78:30:1b:94:82:3b:8d:b2:88:98:
         a9:35:ad:10:f4:6f:66:47:bb:b2:6d:69:a1:49:13:27:5c:96:
         f6:a5:fe:5d:88:64:43:a9:5c:33:9b:57:5c:18:40:04:7d:88:
         de:37:ec:57:fb:d1:c9:fb:25:54:ca:9a:be:ed:e1:ee:a9:37:
         93:3d:ca:bd:6f:5d:b0:68:be:8b:42:ae:4b:1d:4f:32:40:68:
         eb:4d:74:c1:18:bf:c8:83:e3:cd:8d:c4:52:51:c4:f9:96:06:
         3e:2f:cd:15:79:d5:fc:20:d3:8e:a4:96:b0:4a:72:49:c4:ab:
         a3:52:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:10 2024 by rpki-client on console-ams.rpki-client.org