Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa
File:                     3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          Cx4GH+IwuwNLYvULVMjAhzr4f7eC6K3+n4C9+ONuMNg=
Subject key identifier:   D3:99:2D:37:59:75:B6:0E:84:3F:FA:BA:F1:F6:2E:09:25:80:25:DC
Certificate issuer:       /CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
Certificate serial:       552BC3F3ED80F6456600C5772F4E1FE9A0D92115
Authority key identifier: 03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa
Signing time:             Wed 03 Apr 2024 22:45:31 +0000
ROA not before:           Wed 03 Apr 2024 22:40:31 +0000
ROA not after:            Wed 02 Apr 2025 22:45:31 +0000
asID:                     262805
IP address blocks:        186.250.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2b:c3:f3:ed:80:f6:45:66:00:c5:77:2f:4e:1f:e9:a0:d9:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0300C80E32BC11BAD2DEC8ACD83432D5488A2234
        Validity
            Not Before: Apr  3 22:40:31 2024 GMT
            Not After : Apr  2 22:45:31 2025 GMT
        Subject: CN=D3992D375975B60E843FFABAF1F62E09258025DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:e3:b9:44:a0:d7:d6:4d:3d:6b:91:3c:a8:
                    af:92:53:6e:21:c8:b8:cb:4d:24:10:42:c5:d7:46:
                    97:a9:96:5b:1b:e8:ba:dd:7e:81:34:d2:b9:15:cd:
                    0f:87:d4:4c:55:17:25:58:78:93:36:95:19:2e:66:
                    54:39:ec:dd:2c:4a:9e:ce:e3:27:a4:cf:cc:a5:3e:
                    4d:af:5b:d1:fb:ea:1d:e5:19:77:f6:03:c5:84:e8:
                    8a:a1:85:b4:c2:47:1f:88:3b:7e:5c:cd:9b:ea:3d:
                    12:a5:66:ba:14:81:38:40:dd:9f:7b:2d:36:a0:a4:
                    6d:00:b8:5d:e2:fe:2a:c7:1d:33:a2:aa:3c:82:3e:
                    2f:63:04:5b:90:57:00:24:fb:e4:8c:f4:49:85:ef:
                    d9:b6:ac:11:ea:9c:ae:a4:f9:34:ef:81:d2:7d:4e:
                    e2:8d:9a:07:fb:86:a1:1b:45:9c:e2:07:26:9c:d2:
                    e2:10:61:e6:d1:f6:50:30:33:54:6a:92:6d:db:2b:
                    50:45:58:57:6e:68:d9:3b:c8:66:e4:6c:37:03:9f:
                    ea:af:66:66:73:b2:89:56:44:b8:d9:d4:9c:68:6d:
                    1e:dd:e2:55:21:fc:b5:59:10:bd:4e:7c:4f:d3:25:
                    66:7a:24:b6:d8:0b:ed:90:28:86:86:8d:34:26:1c:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:99:2D:37:59:75:B6:0E:84:3F:FA:BA:F1:F6:2E:09:25:80:25:DC
            X509v3 Authority Key Identifier:
                keyid:03:00:C8:0E:32:BC:11:BA:D2:DE:C8:AC:D8:34:32:D5:48:8A:22:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0300C80E32BC11BAD2DEC8ACD83432D5488A2234.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/1/3138362e3235302e34372e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:ca:42:e4:46:2e:8f:db:57:45:31:d4:bc:96:d7:de:d7:
         fe:9d:62:6a:44:87:ab:40:18:fc:ad:ad:f2:9b:cc:d2:9f:e8:
         2a:22:10:71:5e:ad:ed:74:56:1f:1b:cb:bb:2f:f4:70:15:61:
         aa:08:7b:24:b8:8c:9a:7a:77:2e:a0:49:7f:e1:79:7b:99:24:
         e9:c2:49:e8:56:e2:68:78:09:a4:39:7a:ad:78:17:94:04:a1:
         27:dc:2a:30:8c:d3:d8:21:f5:16:40:aa:97:7d:a0:61:8b:c6:
         fe:16:cc:ce:55:2b:11:cf:86:67:6c:04:6d:08:d8:e5:e1:28:
         8f:8a:22:95:0b:06:f8:19:0d:95:63:26:90:b0:9d:4e:33:33:
         42:75:dd:c2:ac:df:ed:dc:18:43:0c:bf:4e:55:b0:28:7c:4a:
         8e:f8:7c:af:14:56:e0:6c:e2:4c:8a:b0:d0:9e:66:3f:25:ee:
         44:31:c0:13:f2:83:9f:20:d4:57:94:6b:1a:55:21:4a:6e:9b:
         2f:c9:cf:98:4d:1f:f5:04:94:be:26:6d:b3:83:31:b7:91:06:
         1a:5c:96:3e:17:34:62:d6:17:a3:1f:f7:a9:2e:d0:4a:10:ce:
         ab:81:75:02:69:57:4e:3f:34:3a:3b:62:cd:52:45:df:41:a3:
         b1:ae:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:55 2024 by rpki-client on console-ams.rpki-client.org