Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa
File:                     3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa (raw, json)
Hash identifier:          PtawGWPygUoszcA+iDcordV7Lo1DVlL/w1VJUzpooSo=
Subject key identifier:   08:D1:56:47:48:0B:AC:3F:7D:18:35:C5:16:5B:3C:92:9F:9F:71:48
Certificate issuer:       /CN=D27F46706288934EA75FEFCBDB933497E0E92077
Certificate serial:       13A9540F1554A09C62514233FFBA39E7804628E5
Authority key identifier: D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa
Signing time:             Wed 03 Apr 2024 20:46:02 +0000
ROA not before:           Wed 03 Apr 2024 20:41:02 +0000
ROA not after:            Wed 02 Apr 2025 20:46:02 +0000
asID:                     266010
IP address blocks:        181.191.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl
                          rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a9:54:0f:15:54:a0:9c:62:51:42:33:ff:ba:39:e7:80:46:28:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27F46706288934EA75FEFCBDB933497E0E92077
        Validity
            Not Before: Apr  3 20:41:02 2024 GMT
            Not After : Apr  2 20:46:02 2025 GMT
        Subject: CN=08D15647480BAC3F7D1835C5165B3C929F9F7148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:5d:a3:ba:df:b3:83:40:8e:72:19:6a:36:
                    50:a1:dd:43:84:58:c8:2f:d7:be:c4:45:47:43:05:
                    96:2b:25:9e:9a:08:4d:f4:a3:87:eb:dd:b1:aa:14:
                    57:40:7b:eb:67:d3:0c:64:fb:08:a6:bd:0a:bf:a3:
                    e4:c4:3b:85:39:cc:53:17:c6:b3:6f:db:8b:cf:86:
                    61:4e:8d:0a:64:45:af:ce:e5:4d:c7:ac:84:74:16:
                    63:20:dd:2b:70:75:49:7a:24:a6:a7:d1:9f:9c:cc:
                    df:2c:c5:8e:c6:cd:ea:de:12:40:1a:9f:2a:94:47:
                    9d:58:e8:a5:ba:0f:6e:44:fb:f0:ca:7f:34:64:c1:
                    2f:6d:f9:b0:f6:5c:f0:aa:3a:fd:43:06:c5:0a:11:
                    d9:28:eb:25:e9:cf:be:a7:c9:de:e7:f6:bf:e1:40:
                    50:18:a3:ff:07:f6:bb:15:3a:ec:3d:36:c6:4b:a7:
                    45:42:6b:b6:2b:38:a5:4e:46:56:dd:96:ca:ee:80:
                    6f:c3:2b:49:bf:82:11:03:3a:a4:70:0e:69:48:9f:
                    76:82:8e:ce:3e:08:2f:4c:1c:f5:d5:6e:01:9d:b3:
                    9e:de:62:0d:7b:c3:a4:f7:f9:4e:34:ed:e1:0d:3f:
                    c4:a9:c2:9e:86:38:c9:f1:b0:78:2d:aa:12:f6:df:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D1:56:47:48:0B:AC:3F:7D:18:35:C5:16:5B:3C:92:9F:9F:71:48
            X509v3 Authority Key Identifier:
                keyid:D2:7F:46:70:62:88:93:4E:A7:5F:EF:CB:DB:93:34:97:E0:E9:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/D27F46706288934EA75FEFCBDB933497E0E92077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F46706288934EA75FEFCBDB933497E0E92077.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKkBAvBpYRx6fvwWnJc7mDWqabmaXQAayutRKS7dFyMi/1/3138312e3139312e3131322e302f32322d3232203d3e20323636303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:3b:b4:ee:c2:04:ef:f5:8f:e1:cc:ba:c5:0f:c3:fe:25:d7:
         13:4a:81:d8:52:25:21:e8:c5:77:a9:f1:59:62:5f:a2:23:87:
         78:05:26:c5:c7:78:ab:d8:24:da:2e:e6:7a:73:1c:69:f5:14:
         f7:4e:af:0a:55:ee:06:4c:f6:fa:19:38:9e:73:ef:20:c6:8d:
         fe:4c:f8:6f:3b:91:b9:2e:1b:64:67:0d:80:e8:75:64:93:c1:
         8f:a0:fa:7e:91:91:06:ce:89:d6:fe:04:c1:34:87:71:e5:96:
         23:e5:16:35:6b:28:b6:2c:59:b1:fe:dc:f9:e6:a8:e9:2b:12:
         de:25:02:8e:75:62:2e:81:7c:09:65:89:e6:a3:01:61:b1:2a:
         94:af:4d:a8:35:4c:0b:1f:26:2f:6f:dc:d8:75:b3:03:f0:8f:
         a2:57:13:c2:62:12:8d:52:13:a6:f1:56:04:99:ba:66:11:a7:
         8b:0f:50:5f:ed:7d:be:13:d4:93:5a:58:ef:5d:38:92:bf:1a:
         01:99:5a:d4:66:c0:e6:d9:42:e9:67:54:85:c8:ea:c6:69:fb:
         aa:0a:d9:a2:2f:45:9f:7c:2d:9f:dc:72:19:f6:00:69:c3:6e:
         92:75:e4:86:72:6d:d5:1f:02:e6:23:ac:31:14:cf:ef:62:7c:
         34:8d:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:33 2024 by rpki-client on console-fra.rpki-client.org