Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa
File:                     3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa (raw, json)
Hash identifier:          +LemOJwq75TeqH95sTWayQ4/fozI0ERkAofP0i1eXA0=
Subject key identifier:   2A:27:28:8E:95:1F:AB:A4:49:E0:FD:70:AE:FD:CF:5F:B7:87:EB:71
Certificate issuer:       /CN=931EED7EF470658CBBAAC332D748978DEF54B593
Certificate serial:       2AA3819954D3244BF25D8929532A64F5FDF9D386
Authority key identifier: 93:1E:ED:7E:F4:70:65:8C:BB:AA:C3:32:D7:48:97:8D:EF:54:B5:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa
Signing time:             Tue 30 Jul 2024 18:01:04 +0000
ROA not before:           Tue 30 Jul 2024 17:56:04 +0000
ROA not after:            Tue 29 Jul 2025 18:01:04 +0000
asID:                     263982
IP address blocks:        186.233.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.crl
                          rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a3:81:99:54:d3:24:4b:f2:5d:89:29:53:2a:64:f5:fd:f9:d3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931EED7EF470658CBBAAC332D748978DEF54B593
        Validity
            Not Before: Jul 30 17:56:04 2024 GMT
            Not After : Jul 29 18:01:04 2025 GMT
        Subject: CN=2A27288E951FABA449E0FD70AEFDCF5FB787EB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:4f:43:96:e2:11:fd:58:a9:37:41:84:cc:
                    a2:1c:a6:07:63:06:63:ef:93:71:6f:0d:f6:d3:06:
                    4d:55:d3:c7:98:0d:7e:33:9e:8a:eb:5d:74:df:fd:
                    59:97:c8:e9:7c:23:3e:13:98:db:73:c8:6d:1c:e3:
                    ae:3c:e8:9e:da:47:22:24:c5:73:48:08:d2:0c:42:
                    ec:db:67:ba:3b:52:e2:68:dc:22:94:bd:94:27:29:
                    0f:c3:04:1c:3b:bc:a1:68:dc:3f:49:05:ce:34:c5:
                    25:26:b7:96:77:22:bf:25:d9:e7:4d:2b:e9:9b:c4:
                    96:b9:0d:a3:c7:6c:bc:23:5b:e1:81:bc:1c:51:fe:
                    f7:b0:5d:6c:c8:38:78:f7:7a:06:e0:d1:d2:b6:68:
                    23:74:05:6e:1e:aa:94:2c:ae:37:44:c9:ef:e4:d9:
                    9c:c1:34:4e:96:2c:d2:da:c4:14:bb:2a:0f:44:fe:
                    f1:d9:5a:af:42:00:40:d8:14:8e:37:49:51:6a:7e:
                    8a:f6:fc:4c:15:7e:c3:a1:6c:65:79:a6:e0:ae:14:
                    da:4a:41:1a:00:80:3b:97:62:37:27:89:fd:4a:e4:
                    e9:78:01:54:76:77:e6:d5:4f:a6:d8:24:ed:b9:47:
                    e9:03:a0:12:ba:af:d9:ab:55:ff:96:94:b3:ed:57:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:27:28:8E:95:1F:AB:A4:49:E0:FD:70:AE:FD:CF:5F:B7:87:EB:71
            X509v3 Authority Key Identifier:
                keyid:93:1E:ED:7E:F4:70:65:8C:BB:AA:C3:32:D7:48:97:8D:EF:54:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/931EED7EF470658CBBAAC332D748978DEF54B593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931EED7EF470658CBBAAC332D748978DEF54B593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:20:91:55:ec:8b:5f:4c:54:ac:f4:ae:14:8d:c5:1b:af:
         95:5d:3f:c9:ed:e4:bd:de:b6:8d:e7:a9:25:92:87:15:66:b0:
         43:19:e2:89:75:e7:ac:68:c8:d9:d1:81:52:83:6b:cd:d8:14:
         ca:1d:32:0e:6b:6a:3e:77:17:46:41:9e:eb:6e:93:eb:0f:7d:
         0a:5b:65:b6:33:57:a7:07:11:29:dc:cc:eb:e3:be:d4:98:7a:
         ec:22:74:f4:ef:9a:41:8e:8e:21:2b:b4:8f:94:f0:8c:35:26:
         f3:5b:4f:6d:77:fb:12:53:2c:72:1f:49:68:78:96:bf:55:4d:
         d6:53:60:8f:26:3a:d5:71:ae:3b:ac:2a:bf:67:a3:d2:05:38:
         0c:4b:2b:f3:7c:7b:23:63:54:da:30:83:ae:3a:16:a0:dd:3d:
         b7:10:63:33:8f:7b:86:0a:9d:4b:f4:eb:e1:94:5d:14:98:b3:
         f1:19:5c:2a:c2:7c:4b:b7:4d:18:c5:12:fe:85:8f:96:40:5c:
         2b:c5:80:41:63:a4:af:80:ec:2a:af:19:59:d8:c1:52:e1:50:
         fb:26:ff:12:4d:7b:5b:09:e9:a0:f2:b0:a9:f8:6e:5c:25:83:
         77:29:e3:4b:00:b3:89:3c:ce:4a:62:68:5b:ee:ee:11:0b:71:
         7e:b6:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:10 2024 by rpki-client on console-ams.rpki-client.org