Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (raw, json)
Hash identifier:          jevtFUNHW8xiO+C+pnrYXQ07V8jjWqa//6NXpVSIg9w=
Subject key identifier:   F5:39:DF:E8:59:A4:09:89:EF:2B:32:51:CB:4B:15:E8:3E:58:00:18
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       33B5A8903DCB1E99F68DDAA61C2FC3FE927F838F
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     266535
IP address blocks:        160.238.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:a8:90:3d:cb:1e:99:f6:8d:da:a6:1c:2f:c3:fe:92:7f:83:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:56:43:9b:a6:82:c0:18:3e:49:2f:4a:ef:
                    dc:e7:d0:df:93:c7:03:ab:ba:0d:e0:e5:25:38:4b:
                    a2:1f:8a:93:2f:e4:32:88:4e:40:2a:fd:f6:ed:03:
                    ee:61:11:cc:99:3d:a6:a5:b5:79:75:c5:5f:40:b5:
                    71:2b:1a:da:9c:da:f0:ca:20:26:d0:84:c1:c7:42:
                    75:06:fc:c3:bf:15:d9:aa:8c:aa:03:44:e6:b7:bb:
                    55:13:67:e3:9a:5b:79:51:1b:47:e4:ad:71:1a:14:
                    78:de:60:49:09:13:53:dc:a2:e8:c7:18:20:4a:8c:
                    69:5e:cd:84:ef:89:d4:c7:b8:49:2e:e4:57:7d:b1:
                    08:9e:ab:3b:46:45:61:0b:c4:23:f9:d6:75:6d:33:
                    ab:a2:a1:d0:89:6a:b5:e0:5f:2c:92:68:67:1d:55:
                    08:f5:3a:75:bb:e7:9a:b7:68:04:01:b1:ce:c6:50:
                    b1:10:62:59:3e:54:5f:d8:31:bc:fe:61:6b:7b:c3:
                    c5:2a:4b:7c:51:43:07:79:09:37:ae:00:7c:c8:6f:
                    a9:95:e8:9b:4d:4a:0e:16:ec:07:0d:f4:1c:f1:33:
                    49:29:e4:15:d1:02:70:65:3d:6f:44:ed:85:f4:ad:
                    0a:32:8f:cc:ac:ee:d1:f8:90:7e:ee:52:6d:08:c4:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:39:DF:E8:59:A4:09:89:EF:2B:32:51:CB:4B:15:E8:3E:58:00:18
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:87:77:1d:69:c2:21:80:7e:f2:1b:b5:31:0a:04:d9:e3:
         4f:7b:1a:32:00:d1:2a:3f:29:03:d8:4b:1a:13:62:43:e5:82:
         9a:ea:3c:5a:d4:87:95:97:df:3f:a8:8e:6f:92:ea:59:cd:87:
         0d:9b:b6:18:f3:c4:a6:19:14:45:fd:b1:39:35:3d:4c:8f:fa:
         61:02:55:5e:34:9a:9f:13:21:11:77:8f:b9:37:cd:93:6a:27:
         12:b3:ec:ca:93:dc:ce:5d:84:44:ea:95:fa:7d:d0:2b:c4:c1:
         3c:04:6b:86:79:c3:d9:89:69:cb:ab:6f:0a:7c:10:58:2a:3c:
         f3:a7:d9:c2:af:97:5e:87:1b:1d:d8:eb:9e:c9:25:9a:95:7f:
         25:0f:b0:50:35:5c:fe:72:74:2d:e7:b9:6e:51:2c:3c:4a:b6:
         96:af:44:eb:cb:be:8b:30:b5:82:94:af:4f:09:40:40:d3:67:
         57:25:fc:ff:1a:23:35:16:92:73:2f:b2:ad:b0:82:8d:03:2a:
         13:57:fa:78:aa:ab:8c:e1:5d:3a:ee:b8:53:41:07:0f:7c:d1:
         fa:93:87:0a:86:24:69:66:dd:32:89:a5:7f:59:0b:f5:05:2b:
         34:00:84:eb:09:46:34:52:b3:a3:d4:ec:96:af:4c:2c:b2:1a:
         94:fa:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:19 2024 by rpki-client on console-ams.rpki-client.org