Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa
File:                     3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          mmRdNA6Y9OsE9H1/EpA+p3Vfr+Zgnepq5HJC58WDYYk=
Subject key identifier:   FE:52:7D:6D:BF:C0:F6:08:04:2B:99:CA:28:BC:D6:41:DF:84:7E:91
Certificate issuer:       /CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
Certificate serial:       5E29BCCA6A23AB170139C184072E543A4D162E58
Authority key identifier: 03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa
Signing time:             Wed 03 Apr 2024 22:45:31 +0000
ROA not before:           Wed 03 Apr 2024 22:40:31 +0000
ROA not after:            Wed 02 Apr 2025 22:45:31 +0000
asID:                     262805
IP address blocks:        186.250.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:29:bc:ca:6a:23:ab:17:01:39:c1:84:07:2e:54:3a:4d:16:2e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
        Validity
            Not Before: Apr  3 22:40:31 2024 GMT
            Not After : Apr  2 22:45:31 2025 GMT
        Subject: CN=FE527D6DBFC0F608042B99CA28BCD641DF847E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:3e:04:bc:41:1a:28:d0:20:ac:3f:6b:36:
                    19:87:98:da:a5:a4:ed:0b:2e:94:ff:a0:4f:95:48:
                    58:ef:5f:94:78:29:58:9f:fc:97:82:97:a4:6a:46:
                    ea:f9:85:7c:7f:2e:c7:03:27:b6:e1:71:93:96:03:
                    6a:87:ad:35:6d:ce:b2:c7:12:50:d9:fb:49:fe:cb:
                    56:a4:ae:59:8e:0a:93:42:49:78:85:67:a2:94:66:
                    b5:a9:ab:ae:61:2b:d3:05:cc:d8:e2:2e:2d:fb:77:
                    26:2f:19:97:fa:d2:df:32:5c:7d:6d:22:9e:69:c1:
                    84:93:6b:c0:0a:b4:9c:00:ff:01:e0:d0:68:66:fe:
                    61:c5:7f:bf:15:33:44:c2:f2:a3:cd:7d:c4:3b:2d:
                    fb:fc:87:28:8f:7b:9a:f2:15:eb:30:da:f2:46:0e:
                    38:09:d5:bc:0d:4d:45:16:e1:45:7d:24:17:bf:09:
                    8c:a0:8d:05:54:41:d1:38:25:03:4b:77:79:eb:5e:
                    a6:74:df:3f:49:cb:e8:4e:38:fa:ce:a9:78:d5:46:
                    09:f6:e3:8f:1d:10:24:13:25:95:25:08:d4:91:7a:
                    62:c5:01:a5:46:43:e5:83:2e:b6:a1:e5:8d:58:b9:
                    98:b2:b2:16:38:e3:bb:a1:38:91:06:e5:51:7e:c9:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:52:7D:6D:BF:C0:F6:08:04:2B:99:CA:28:BC:D6:41:DF:84:7E:91
            X509v3 Authority Key Identifier:
                keyid:03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34352e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:69:90:ae:7c:d1:b4:d1:cb:f4:1f:f3:d8:b5:0f:06:83:ee:
         9e:74:a0:b1:a7:be:4a:55:9c:39:8e:eb:4a:f5:ee:97:54:5c:
         22:61:b6:f3:26:34:81:13:01:07:d6:8a:12:44:61:48:86:a0:
         5b:0a:ed:c7:c9:39:da:f1:b1:53:ba:5f:0e:a3:5b:33:ea:3c:
         0f:d8:9a:d1:97:67:82:e8:50:65:ab:4c:55:28:e7:37:ce:d1:
         0d:7c:fa:33:33:b7:d1:21:6a:32:cb:36:fc:26:da:fc:b7:15:
         9f:ef:1d:90:63:90:6c:4e:21:c7:64:3c:a2:da:10:ee:8d:77:
         86:65:9a:55:79:7a:e4:55:e2:18:15:ec:75:c4:bf:70:f0:25:
         ef:9d:6d:da:01:da:e0:f3:40:7b:12:a2:c0:32:29:33:90:d3:
         7a:bb:82:8f:e0:01:fd:27:a6:b2:a4:8a:f3:11:b7:13:35:0f:
         8b:6c:9e:c6:3e:38:61:68:4f:ad:cf:68:52:88:91:77:0a:51:
         2b:3b:0c:4b:a4:11:b8:e8:4c:64:18:c2:54:e6:5a:d0:a9:64:
         16:d6:fe:f3:90:5b:f0:16:52:29:70:be:fe:97:84:1b:6b:48:
         59:b6:32:84:07:b2:c2:71:7c:fd:0f:5a:0a:0f:42:f4:f1:b2:
         c6:e3:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:00 2024 by rpki-client on console-fra.rpki-client.org