Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa (raw, json)
Hash identifier:          nHlqBdcssul/kum6VybVt4pBFudeaBA3GvsU45QUgvw=
Subject key identifier:   36:30:05:5F:41:19:5E:4C:29:C7:19:C0:CB:88:21:2E:95:7E:97:48
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       27E72EC229F454BF07E712206102B6DE8B7FD1C4
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa
Signing time:             Thu 04 Apr 2024 02:58:48 +0000
ROA not before:           Thu 04 Apr 2024 02:53:48 +0000
ROA not after:            Thu 03 Apr 2025 02:58:48 +0000
asID:                     263335
IP address blocks:        191.36.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e7:2e:c2:29:f4:54:bf:07:e7:12:20:61:02:b6:de:8b:7f:d1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Apr  4 02:53:48 2024 GMT
            Not After : Apr  3 02:58:48 2025 GMT
        Subject: CN=3630055F41195E4C29C719C0CB88212E957E9748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:d3:e2:9f:67:7a:83:30:ae:af:fd:29:b5:
                    14:7a:ef:1d:d2:f5:5e:d3:48:fc:97:ec:60:6f:07:
                    4b:9b:0e:46:5a:25:93:ab:9b:32:43:60:e4:c5:9d:
                    8f:6b:8a:32:bb:e6:7f:54:b0:77:5d:ca:af:13:a3:
                    b0:4b:a5:b4:e6:7e:47:cc:8d:70:00:50:98:9c:02:
                    77:d1:bf:d0:01:7f:3c:83:14:86:a6:e0:3b:4e:45:
                    ef:37:cd:f5:b7:ba:a2:82:27:bf:97:da:ed:ea:07:
                    39:b7:b9:b2:d2:4d:b3:05:f1:dc:a1:8d:eb:be:2b:
                    9b:9c:79:a2:25:aa:9b:74:0c:5d:17:15:7f:13:9b:
                    09:89:ad:b1:ec:dc:5d:5f:67:3d:a0:fa:dd:e7:e7:
                    05:e2:3d:6c:fc:7a:76:50:b7:79:3c:e9:54:03:4d:
                    b0:d8:06:95:9e:d5:92:76:32:00:03:81:1a:e0:4c:
                    5a:f9:91:7c:1e:e8:84:e2:9e:a5:55:c2:20:e9:49:
                    96:7a:c8:cd:be:27:9f:78:e5:3b:72:82:2f:7d:52:
                    3a:f3:d5:e9:f9:56:bd:9a:fa:41:16:3b:eb:08:be:
                    21:a4:88:49:fa:64:a8:21:95:be:1e:6c:de:65:2e:
                    f9:84:bc:77:97:f0:96:bc:d8:53:53:77:0b:9d:2a:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:30:05:5F:41:19:5E:4C:29:C7:19:C0:CB:88:21:2E:95:7E:97:48
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32322d3232203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:c9:77:93:8c:30:6f:76:2c:f0:1e:84:e2:b6:3f:be:a6:2d:
         83:85:f0:f8:15:7b:b3:18:d8:49:21:b0:05:02:1a:e4:cd:fb:
         ea:2d:25:a6:23:9d:cf:5e:60:b3:98:9d:0e:44:56:b4:c1:ed:
         1c:97:c8:39:dc:89:fa:15:d3:10:b0:36:47:10:33:b0:52:f0:
         65:5b:1c:0e:21:f8:5c:dc:6c:4f:26:bb:b1:da:aa:b9:05:06:
         bb:5e:d5:a6:eb:d9:fd:73:ab:9e:af:01:50:0a:7d:92:cf:a8:
         3b:94:91:03:ec:4e:df:a7:67:0e:aa:10:c1:d8:26:08:de:bf:
         66:09:85:48:cc:f9:09:7f:78:0b:3c:87:d0:06:10:c1:b7:6e:
         b3:46:46:e5:14:92:3f:9d:cf:3d:68:78:80:28:41:37:63:84:
         2f:50:42:e6:2d:36:84:a2:75:f4:25:79:a3:1f:8b:f3:f8:ab:
         ce:14:c4:29:bd:8c:ae:0b:b0:58:ca:a7:9a:4d:fd:34:09:97:
         92:e5:10:ef:00:35:ca:7b:00:32:0b:bd:f2:6d:dd:d5:b3:f6:
         2f:e1:f6:87:a2:3e:63:3b:4c:a5:97:d9:03:70:35:5a:df:47:
         f7:1b:b6:32:15:8f:87:5b:d4:53:91:a5:95:27:25:ab:6e:95:
         7f:c0:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:25 2024 by rpki-client on console-ams.rpki-client.org