Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          /LHz6A13jXMZlIGhlvWjtfdsjQUwh5Gt3Qw1WUinSxM=
Subject key identifier:   38:43:A5:9C:4C:64:79:2D:39:D6:B1:E2:F4:63:F8:13:06:DD:6D:56
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       5C513E65E6E547A5BD5B95974E3FE7FA7D5CA3DF
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
Signing time:             Thu 04 Apr 2024 02:58:48 +0000
ROA not before:           Thu 04 Apr 2024 02:53:48 +0000
ROA not after:            Thu 03 Apr 2025 02:58:48 +0000
asID:                     263335
IP address blocks:        191.36.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:51:3e:65:e6:e5:47:a5:bd:5b:95:97:4e:3f:e7:fa:7d:5c:a3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Apr  4 02:53:48 2024 GMT
            Not After : Apr  3 02:58:48 2025 GMT
        Subject: CN=3843A59C4C64792D39D6B1E2F463F81306DD6D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fc:c8:1b:63:e1:dc:a8:67:30:d8:10:a5:39:
                    1d:3a:28:4e:02:1b:41:6b:4a:8b:b0:ee:23:da:c6:
                    27:f8:ea:cc:ba:f4:cf:12:99:50:ed:b4:81:4a:6e:
                    02:f0:07:3e:8b:9e:95:a2:d6:c8:92:2a:8c:7e:67:
                    34:37:3b:5c:e5:66:a8:ff:61:18:48:d1:39:23:36:
                    f2:0a:4a:c6:6b:6b:82:c7:08:ba:c5:c7:c0:c0:58:
                    f4:7f:6e:7c:47:48:41:6f:b5:60:de:a7:30:de:d1:
                    5e:aa:63:93:d1:bf:26:33:10:56:9d:a4:71:3e:a7:
                    d7:a3:b1:7d:72:fe:d7:7c:cb:4f:2f:51:23:03:de:
                    1c:bb:63:f6:86:18:1d:c6:be:0c:37:4c:e4:c7:4a:
                    a3:36:b7:f7:d7:29:b3:a2:c6:df:c3:75:98:32:09:
                    e9:d7:1e:f6:20:b1:d2:a3:76:c5:fb:20:41:6a:40:
                    9c:40:29:ff:a5:a9:3d:df:d0:09:d5:19:25:dc:1e:
                    e1:2e:44:9c:bd:1c:e6:78:a4:68:e0:1b:7a:47:bd:
                    0e:7f:36:00:cd:ee:27:b8:af:f1:ff:eb:d5:b2:53:
                    80:19:89:77:15:c1:8f:92:95:a2:e6:b5:dc:10:86:
                    0d:9b:57:82:13:ab:22:4d:a1:d8:83:8d:0e:18:a7:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:A5:9C:4C:64:79:2D:39:D6:B1:E2:F4:63:F8:13:06:DD:6D:56
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:89:21:2e:a0:41:be:e9:a9:c9:fb:3e:8e:37:16:11:56:44:
         e2:6d:cb:e5:1f:72:6f:25:8c:da:6a:81:2e:79:4a:5c:c5:73:
         8c:c0:78:3f:c0:87:e5:02:62:67:48:72:72:6b:00:25:20:83:
         0a:a9:a6:4b:b2:64:86:44:e5:35:c3:c3:f7:97:0a:cd:99:12:
         a3:db:5d:35:f4:0c:b1:ee:ab:54:40:19:fb:1f:df:4d:52:da:
         bc:d5:54:c6:45:3e:1a:e0:32:5a:b4:af:9d:64:8d:47:d2:fe:
         c0:0f:95:22:d3:a0:d4:01:77:6a:51:16:69:f5:50:ab:16:d5:
         69:ae:22:d6:93:fe:e5:e8:01:ab:c4:fe:8a:36:a0:8d:1d:e4:
         bd:34:4a:71:bd:d1:34:88:18:dc:df:ee:02:c9:d2:79:69:51:
         da:0d:b8:40:5e:06:26:27:9b:15:14:2c:21:26:93:ad:7b:0e:
         dd:f8:e5:d1:b4:10:ea:5a:80:32:3d:69:69:35:e7:7a:71:45:
         57:29:2c:98:bc:99:0c:a5:ce:1b:67:6a:cd:42:4d:dc:14:f6:
         f5:06:8b:3e:a7:a1:f7:02:85:c7:43:4a:a4:66:7f:0b:34:72:
         ee:32:d5:21:47:a0:69:23:a0:71:bf:f6:21:94:e2:a4:fc:31:
         07:87:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:10 2024 by rpki-client on console-ams.rpki-client.org