Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          h40m54A46Fa8PsfFW1WOyPYAcD3v7L4y+0n9lTboqP4=
Subject key identifier:   44:12:36:D7:4E:F5:43:09:34:F4:A1:A1:59:4C:07:65:58:A2:C0:8E
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       6ECD810849C4B86CAD51561F08DB4300828A1586
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:15 +0000
ROA not before:           Wed 03 Apr 2024 18:26:15 +0000
ROA not after:            Wed 02 Apr 2025 18:31:15 +0000
asID:                     266535
IP address blocks:        160.238.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:81:08:49:c4:b8:6c:ad:51:56:1f:08:db:43:00:82:8a:15:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:15 2024 GMT
            Not After : Apr  2 18:31:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:25:e6:5d:b3:86:ba:43:cc:38:c5:ce:70:
                    52:f5:b0:39:d4:38:32:49:59:eb:3d:39:60:52:ea:
                    a3:7a:c7:bc:f8:5b:8f:7a:75:45:db:89:3f:fb:3d:
                    b4:37:f0:8e:1a:33:2e:05:51:b9:53:8e:e8:b2:da:
                    03:a9:a2:cc:a6:d8:e7:58:36:39:3a:1c:0e:1f:42:
                    b5:17:33:41:ec:ab:64:52:cc:66:ce:6a:c6:61:81:
                    4e:dd:cb:f2:04:21:ac:0c:b9:c1:40:c7:51:ac:e4:
                    2c:ad:b1:c3:3d:55:8e:77:31:1a:71:a5:86:be:c3:
                    e0:b8:de:b8:3c:a9:16:03:d7:81:48:c9:c5:c6:2c:
                    36:f0:2b:1b:04:83:55:d5:9a:a7:af:a8:f4:d5:04:
                    3a:01:55:aa:b9:f9:73:47:53:18:22:5b:88:96:59:
                    fc:f4:ab:d1:98:bc:f0:dd:00:26:da:54:28:e4:76:
                    fe:a2:b4:3e:87:bd:5f:d8:c2:df:94:d6:3e:7c:91:
                    de:7b:01:9b:18:3b:1b:a7:dd:4b:df:ba:ff:26:00:
                    16:0a:7e:13:dd:4a:ac:92:9b:07:7b:da:2f:de:5e:
                    44:2c:40:12:5f:0f:20:29:56:08:91:77:b5:a3:06:
                    51:be:94:e4:ce:a0:24:99:c1:03:05:1b:7e:13:87:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:36:D7:4E:F5:43:09:34:F4:A1:A1:59:4C:07:65:58:A2:C0:8E
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:11:bd:6e:57:d0:31:80:32:e3:fe:24:19:31:de:9e:3c:f0:
         1d:14:d4:d9:46:d0:7e:74:27:27:3a:04:3a:d7:c9:e4:98:6d:
         83:bd:a4:8d:57:67:ea:a0:e8:a2:b1:8a:59:6e:a2:53:35:00:
         77:44:62:ed:50:e4:e2:44:6b:d0:27:44:7c:d7:d8:fd:63:13:
         2b:54:a8:d4:7d:6a:e1:ce:a1:f9:d5:f8:d3:48:08:0e:a7:9f:
         16:b4:eb:05:78:3e:08:d8:54:ad:08:f0:fb:e4:67:d5:47:9a:
         ff:50:d9:82:a5:6f:da:31:78:58:c6:e6:d6:d4:67:c7:fa:9b:
         5e:c5:46:ad:86:0f:9b:0d:90:31:37:9b:a0:36:18:d7:35:ec:
         80:5a:e4:f4:9b:52:2c:0a:34:ca:d7:95:f9:e5:17:9a:cf:14:
         e7:43:63:73:d4:d8:24:ae:81:df:d5:30:20:ae:9e:8f:4d:06:
         41:a9:28:22:a2:02:2a:cf:7c:06:ba:83:45:82:b2:a9:95:75:
         15:4a:6a:bc:89:8d:c4:37:44:0b:96:45:fe:41:e6:d1:25:dc:
         df:b1:df:ad:d5:6e:0e:ce:01:fb:87:e1:28:b0:98:8e:bc:91:
         c4:55:b6:5d:fa:f9:ba:fa:d1:19:9e:2f:67:84:78:58:6a:3e:
         e5:fd:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:10 2024 by rpki-client on console-ams.rpki-client.org