Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34302e302f32322d3234203d3e20323632383035.roa
File:                     3138362e3235302e34302e302f32322d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          N2Jrx9Ilkm/qDBzqOunekQT5MygNe5SOR2gfOZKoQUM=
Subject key identifier:   3E:43:C5:86:57:1D:29:00:C9:FB:6C:6C:FE:00:C3:3E:7F:77:93:AD
Certificate issuer:       /CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
Certificate serial:       221C1C908C9EBAEAB6E743908F4978D1A000CC72
Authority key identifier: 03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34302e302f32322d3234203d3e20323632383035.roa
Signing time:             Wed 03 Apr 2024 22:45:31 +0000
ROA not before:           Wed 03 Apr 2024 22:40:31 +0000
ROA not after:            Wed 02 Apr 2025 22:45:31 +0000
asID:                     262805
IP address blocks:        186.250.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1c:1c:90:8c:9e:ba:ea:b6:e7:43:90:8f:49:78:d1:a0:00:cc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
        Validity
            Not Before: Apr  3 22:40:31 2024 GMT
            Not After : Apr  2 22:45:31 2025 GMT
        Subject: CN=3E43C586571D2900C9FB6C6CFE00C33E7F7793AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:3c:c6:8a:7c:c2:e5:a2:c4:c9:67:87:0c:
                    98:dd:ae:7c:07:15:15:2c:14:5a:5d:b3:36:6a:18:
                    3a:85:65:af:3f:c0:99:9c:51:ec:6a:98:5d:2a:a3:
                    0c:56:cb:6b:6a:fb:17:05:aa:b5:6e:43:77:e0:67:
                    bd:4d:71:99:24:79:d4:a4:9b:31:c3:7c:a3:76:ad:
                    0a:e8:d1:f0:04:4b:c8:73:3b:59:72:41:94:eb:22:
                    13:6a:6a:a5:57:24:4f:e6:32:8f:df:30:e6:4f:03:
                    e1:12:23:ce:25:08:33:cb:db:59:7c:85:26:24:94:
                    c1:75:48:3f:07:8b:70:42:e8:80:99:2b:b1:1c:d0:
                    49:5b:07:61:28:53:4f:ea:36:ca:66:59:ed:0e:d3:
                    18:a8:7e:1f:97:cc:78:a1:b1:ae:18:8a:ca:c4:34:
                    f5:74:43:dd:71:ca:e8:e9:ff:71:98:70:fa:00:d7:
                    56:c3:71:9d:18:2a:e4:dd:09:32:41:54:1f:6b:25:
                    b5:c1:e4:1b:f5:63:de:d2:b7:cb:b7:68:2c:f1:c4:
                    1e:51:28:b8:72:87:55:9a:c9:4a:e3:6e:b6:56:2c:
                    c2:67:80:78:e3:59:49:20:19:93:ce:98:c3:d7:09:
                    8c:96:cf:8d:d1:0d:08:68:50:e0:65:66:a2:d3:a7:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:43:C5:86:57:1D:29:00:C9:FB:6C:6C:FE:00:C3:3E:7F:77:93:AD
            X509v3 Authority Key Identifier:
                keyid:03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34302e302f32322d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:56:f2:8c:97:08:d7:1e:7e:11:5e:3a:e2:34:5b:cb:0a:1b:
         f5:01:56:92:17:ad:5e:91:0b:22:1d:e4:ba:8b:71:f9:12:d3:
         99:c6:51:e9:2d:8d:7e:f7:20:e9:65:1a:02:8c:98:db:5e:c0:
         90:a3:49:b0:88:71:cb:ba:99:5f:67:77:a2:53:1a:25:aa:8b:
         d7:2c:26:bf:68:a0:0a:2b:47:78:92:86:f2:3c:45:bc:53:73:
         fc:df:54:2e:3f:eb:18:69:e5:3f:b0:39:9f:a7:d9:ab:5b:43:
         a8:51:fe:b2:9f:43:42:24:e7:14:52:ca:98:8d:6c:3a:ee:ad:
         c5:76:00:27:29:7c:aa:fc:fa:52:c9:80:b1:49:60:9d:e4:55:
         b4:c7:6d:41:71:78:5a:ea:f0:3c:db:07:4e:aa:46:39:ac:92:
         ee:5a:64:6a:1d:d3:00:93:77:76:e1:53:eb:2d:1d:8a:33:a0:
         6e:09:e3:b6:2e:16:70:c5:e6:46:3d:26:2c:76:a8:ef:aa:3d:
         c3:42:54:e0:20:71:9b:b5:a1:83:0c:67:99:fd:82:e7:9a:26:
         08:73:fe:cb:63:75:eb:ab:8a:a0:91:a4:73:09:6e:4b:70:e4:
         33:42:bf:53:dc:02:75:af:5d:3a:39:3f:00:06:02:2e:97:5a:
         3a:26:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org