Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          yYVz7ENmTEy8A5jKnYHfp8LEM3jAYYIubZ8iaiLLGZw=
Subject key identifier:   0B:5B:E3:38:DE:ED:A8:1E:6C:AD:4B:24:0B:65:35:E0:4D:B6:2E:43
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       235C045FC64B0FB5701F5BF0E9AD8F2F0CFC46EF
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     266535
IP address blocks:        160.238.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:04:5f:c6:4b:0f:b5:70:1f:5b:f0:e9:ad:8f:2f:0c:fc:46:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject: CN=3082010A0282010100D308B1581A5656E381FF507C4C2B9AA708F01BF2A4D5B488EB9BFA94815784DCA8EADBAA0725F7F672E9D3497F20CBD9496F1F6A77DBE328619079513D66A98F459AECE08CAD2A541AF2E899804C81C4C137F28029F00C84C5985A4C2D0BFD7235C4F2AB832989B1EF2F2E474A6AC48F0367A77FE891CD52FF01EE6BE15D0FAAD0595307209BA58631420FAEE1908151C2C18233B1266BD99DBDAD76945FC3CE5F093CF06BEA278538CB4512C99870402B8C36C8F6944B901F21A80531ADD16153380FF38FFA57883279DA65668FB4D6A9F485D5F74529CCA958041F027C50CF7DA2BD25FCF1ACEA740E9E5E97B12B763407DD3EAFA48EC4984D6D4C1C5D0BBB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:b1:58:1a:56:56:e3:81:ff:50:7c:4c:2b:
                    9a:a7:08:f0:1b:f2:a4:d5:b4:88:eb:9b:fa:94:81:
                    57:84:dc:a8:ea:db:aa:07:25:f7:f6:72:e9:d3:49:
                    7f:20:cb:d9:49:6f:1f:6a:77:db:e3:28:61:90:79:
                    51:3d:66:a9:8f:45:9a:ec:e0:8c:ad:2a:54:1a:f2:
                    e8:99:80:4c:81:c4:c1:37:f2:80:29:f0:0c:84:c5:
                    98:5a:4c:2d:0b:fd:72:35:c4:f2:ab:83:29:89:b1:
                    ef:2f:2e:47:4a:6a:c4:8f:03:67:a7:7f:e8:91:cd:
                    52:ff:01:ee:6b:e1:5d:0f:aa:d0:59:53:07:20:9b:
                    a5:86:31:42:0f:ae:e1:90:81:51:c2:c1:82:33:b1:
                    26:6b:d9:9d:bd:ad:76:94:5f:c3:ce:5f:09:3c:f0:
                    6b:ea:27:85:38:cb:45:12:c9:98:70:40:2b:8c:36:
                    c8:f6:94:4b:90:1f:21:a8:05:31:ad:d1:61:53:38:
                    0f:f3:8f:fa:57:88:32:79:da:65:66:8f:b4:d6:a9:
                    f4:85:d5:f7:45:29:cc:a9:58:04:1f:02:7c:50:cf:
                    7d:a2:bd:25:fc:f1:ac:ea:74:0e:9e:5e:97:b1:2b:
                    76:34:07:dd:3e:af:a4:8e:c4:98:4d:6d:4c:1c:5d:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5B:E3:38:DE:ED:A8:1E:6C:AD:4B:24:0B:65:35:E0:4D:B6:2E:43
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:8a:d8:b1:37:1d:60:76:b6:81:15:23:c2:8c:c7:a4:56:
         0f:b9:f5:9a:ce:33:7f:bf:e6:e3:cf:dc:98:35:bb:a9:1d:6a:
         dd:f0:02:af:c2:81:af:4e:e9:e1:f5:e9:93:e3:6f:62:dc:d6:
         9c:e3:60:27:d3:83:3b:1c:aa:1c:a2:a1:d5:e6:a6:23:d5:4d:
         1c:b5:61:55:7f:cd:a7:11:59:cf:be:d3:dd:7e:48:a8:62:86:
         4b:69:14:29:c2:41:d4:39:70:37:03:6c:80:9b:3a:4f:ef:b4:
         e7:01:9e:3e:96:d2:53:27:47:5a:42:85:f6:b9:72:a8:15:4c:
         c7:98:83:cb:4a:fa:75:12:7a:bf:37:5c:00:47:aa:e2:0b:3c:
         2d:8a:e9:f4:eb:8e:c4:79:d9:57:81:02:e1:c0:5f:fd:68:f1:
         c1:6b:4c:24:69:aa:6a:ae:7a:0a:07:fe:e9:ff:5b:07:d3:33:
         5e:dd:93:fc:9c:c1:87:56:12:b2:6b:2e:27:30:11:66:3c:22:
         71:2b:5d:cf:d2:6f:b1:2d:a4:d1:3a:83:8f:cd:be:85:43:05:
         e2:0e:f9:82:a5:67:ab:85:db:88:42:92:34:0a:be:80:31:5f:
         b9:35:3c:e5:d2:d4:64:bb:6c:08:1f:87:de:ea:e3:3e:f8:77:
         7c:ea:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org