Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (raw, json)
Hash identifier:          K89qYPSZRsAGyH3C3RZm3mAGl8uCAzuAhHIl07MP1xw=
Subject key identifier:   BF:6F:C0:46:5A:4A:A1:A2:7A:F2:7D:9E:60:BF:2D:43:62:EE:E5:3B
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       5E45575F628F2825CD3B4314EEA209C77311A808
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     266535
IP address blocks:        160.238.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:45:57:5f:62:8f:28:25:cd:3b:43:14:ee:a2:09:c7:73:11:a8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:6b:1f:44:1d:a2:04:9d:cc:b1:88:9f:66:
                    be:09:02:26:0f:b1:a5:45:3d:e9:5d:52:ad:61:00:
                    25:5a:d7:ce:ff:0b:b9:22:ca:78:f3:51:a6:c2:59:
                    92:ed:51:e6:68:ac:d8:cf:3b:40:9c:17:19:7e:cb:
                    50:dd:b0:82:85:84:de:14:d6:ba:6a:f6:f0:e2:de:
                    05:3a:9d:11:c8:6f:0d:88:77:bd:30:c4:06:70:9d:
                    21:4f:f4:29:c5:7a:13:7d:55:50:6e:0c:9b:9a:d9:
                    b1:64:9a:73:3f:cf:5e:eb:05:67:7a:c3:27:26:f1:
                    9d:c1:18:b9:3d:aa:db:41:2e:15:02:fa:d3:08:40:
                    0b:c2:a5:ba:16:1e:ed:52:e2:8e:a6:66:d3:94:3b:
                    1e:94:59:5d:c8:af:8e:19:d4:61:ff:f0:11:4f:10:
                    02:d2:13:a9:09:9b:74:a2:e1:0b:27:f1:e9:c1:ac:
                    5b:ff:90:1e:78:b2:66:da:89:ef:fa:89:06:78:ce:
                    d4:f6:6a:a0:0e:6a:bd:4f:e4:66:b6:1b:7d:af:88:
                    48:cd:97:36:26:33:0d:78:89:29:00:69:5e:7c:2f:
                    37:c7:ee:d1:88:4c:76:7a:24:dc:bf:e5:f4:8c:eb:
                    7d:6d:ff:1e:1f:20:48:43:c7:8a:94:fd:b1:d0:cd:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:C0:46:5A:4A:A1:A2:7A:F2:7D:9E:60:BF:2D:43:62:EE:E5:3B
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:1b:dd:d7:c4:57:0a:81:fb:f4:34:30:a4:ee:eb:78:1a:
         e8:f7:34:15:25:8c:2c:e7:95:db:3f:6a:64:19:74:ca:89:1c:
         3a:c7:47:7e:86:43:db:13:e0:c4:ab:d0:39:52:4e:d3:c9:8e:
         4d:5d:fe:96:76:75:ba:44:13:e3:ee:7c:11:3e:64:ee:e9:14:
         e0:74:83:43:a4:fa:ec:69:f3:ec:d7:6d:89:6c:ea:46:22:6c:
         03:4e:a9:f2:19:e4:c8:f1:43:2b:2b:46:8b:a7:8a:5e:ca:e3:
         8d:43:95:82:4a:65:35:66:ad:c2:57:42:39:76:6a:c6:a0:e1:
         bf:83:40:f5:3e:11:c3:51:79:c0:4c:bb:d0:48:0d:38:5f:7b:
         8c:14:06:70:4f:5c:64:3d:2e:91:f8:00:11:5b:80:c4:04:b8:
         73:c7:69:0b:35:58:30:67:53:c9:d7:8f:58:b1:22:a9:7e:ea:
         43:55:da:11:65:3d:54:16:77:b7:60:8a:82:c3:57:e0:a2:98:
         a5:98:75:ea:67:67:c2:2b:ba:d8:d3:ae:88:c7:b8:28:dd:4f:
         56:49:11:e0:39:1e:58:a3:d8:bd:7d:d4:74:67:b7:e9:d9:f2:
         6c:1c:70:76:82:6d:63:ac:69:4e:77:80:df:84:b2:85:03:5c:
         df:0f:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:44 2024 by rpki-client on console-fra.rpki-client.org