Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          p1Ai199Kp7O3twidg/lqeOrPfQMF9s/Co80a+8lDFnU=
Subject key identifier:   A3:D7:C2:F8:C3:F8:81:E0:FC:48:FB:2F:A8:72:ED:A5:49:74:A9:1E
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       63A1134694E394929255BD8130AFB098246F1BE7
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:15 +0000
ROA not before:           Wed 03 Apr 2024 18:26:15 +0000
ROA not after:            Wed 02 Apr 2025 18:31:15 +0000
asID:                     266535
IP address blocks:        160.238.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a1:13:46:94:e3:94:92:92:55:bd:81:30:af:b0:98:24:6f:1b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:15 2024 GMT
            Not After : Apr  2 18:31:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:61:72:73:ed:65:9a:07:66:21:af:1a:3d:
                    9a:b5:8d:bb:68:70:69:2c:4a:f0:3d:86:44:4d:64:
                    2c:4a:be:29:1e:54:53:71:44:a3:3f:bc:17:8b:89:
                    66:7d:79:45:fa:10:57:3f:81:f8:1c:eb:35:8a:49:
                    1f:cb:57:3c:08:57:df:b4:f4:a2:76:0b:4d:46:b8:
                    f3:85:21:50:2a:b9:9a:02:c3:2d:63:33:82:30:6e:
                    44:51:db:6d:19:26:9d:d3:c5:c0:e0:e2:5c:16:0f:
                    2e:71:d1:c5:fa:aa:8c:5d:ea:5d:44:7e:39:d4:92:
                    5b:84:86:b3:95:57:18:00:77:87:13:8b:e9:74:30:
                    d5:67:89:f5:1d:67:82:1f:cd:f0:09:fe:4b:9e:05:
                    c9:c5:7d:7c:09:39:ec:98:66:bf:a8:d8:8a:cc:34:
                    35:3b:ba:b2:1c:2e:62:b3:bd:8c:38:66:07:87:94:
                    c2:a5:20:73:60:09:7f:de:dc:eb:d8:9e:f3:0e:ee:
                    31:d9:9c:68:dc:5a:65:d9:b6:87:fc:84:17:96:32:
                    31:0f:08:ee:84:76:42:85:ac:42:8f:f8:9b:e7:4c:
                    d2:9b:c8:a9:37:99:72:3f:52:01:73:82:3d:3c:c0:
                    90:f3:73:18:23:d3:7f:fd:2f:98:c2:92:cc:e8:e9:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D7:C2:F8:C3:F8:81:E0:FC:48:FB:2F:A8:72:ED:A5:49:74:A9:1E
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:77:c7:7f:48:9f:a9:d0:ac:30:77:de:89:aa:96:44:84:
         83:79:32:f4:80:98:61:78:e5:be:3d:c9:c8:2e:9f:cf:33:cd:
         83:bb:e9:2f:06:cb:84:2f:fe:ba:0a:e3:af:9f:28:6a:e1:84:
         ae:1b:da:78:c4:8f:bf:05:26:00:a1:af:03:55:18:ac:b1:4a:
         d8:23:6b:b9:d2:cc:88:ca:6b:26:de:09:a9:f6:36:92:97:6c:
         de:fd:b7:65:13:2b:a6:61:cc:98:de:5d:c4:d9:c3:db:7b:0a:
         2f:9f:80:01:34:fe:40:92:93:54:bc:b6:5f:27:ea:22:a4:a3:
         2c:ca:9d:f1:d4:cb:95:3c:1b:f7:d2:09:a3:fa:e5:70:bc:3b:
         45:3e:2c:22:0a:55:6b:15:15:88:78:45:cf:05:e0:e5:bb:e8:
         b9:3f:1a:af:24:f3:12:e3:2f:1a:98:f3:ea:27:78:f3:fa:f4:
         f6:b4:16:67:16:b7:75:df:b5:b8:bd:0d:32:1f:6a:f0:e0:ac:
         8e:06:7b:bc:32:6c:cb:30:86:94:85:1e:8e:83:d7:12:7c:cc:
         f9:4f:25:54:31:93:f6:cb:5b:3e:8b:b8:e1:4f:61:4f:8a:e9:
         0d:58:d2:28:61:34:00:45:2b:6c:ee:df:3a:f0:54:ab:0b:50:
         f7:ed:71:49
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUY6ETRpTjlJKSVb2BMK+wmCRvG+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNDA0MDMxODI2MTVaFw0yNTA0MDIxODMxMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI3MjYxNzI3M0VENjU5QTA3
NjYyMUFGMUEzRDlBQjU4REJCNjg3MDY5MkM0QUYwM0Q4NjQ0NEQ2NDJDNEFCRTI5
MUU1NDUzNzE0NEEzM0ZCQzE3OEI4OTY2N0Q3OTQ1RkExMDU3M0Y4MUY4MUNFQjM1
OEE0OTFGQ0I1NzNDMDg1N0RGQjRGNEEyNzYwQjRENDZCOEYzODUyMTUwMkFCOTlB
MDJDMzJENjMzMzgyMzA2RTQ0NTFEQjZEMTkyNjlERDNDNUMwRTBFMjVDMTYwRjJF
NzFEMUM1RkFBQThDNURFQTVENDQ3RTM5RDQ5MjVCODQ4NkIzOTU1NzE4MDA3Nzg3
MTM4QkU5NzQzMEQ1Njc4OUY1MUQ2NzgyMUZDREYwMDlGRTRCOUUwNUM5QzU3RDdD
MDkzOUVDOTg2NkJGQThEODhBQ0MzNDM1M0JCQUIyMUMyRTYyQjNCRDhDMzg2NjA3
ODc5NEMyQTUyMDczNjAwOTdGREVEQ0VCRDg5RUYzMEVFRTMxRDk5QzY4REM1QTY1
RDlCNjg3RkM4NDE3OTYzMjMxMEYwOEVFODQ3NjQyODVBQzQyOEZGODlCRTc0Q0Qy
OUJDOEE5Mzc5OTcyM0Y1MjAxNzM4MjNEM0NDMDkwRjM3MzE4MjNEMzdGRkQyRjk4
QzI5MkNDRThFOTU1ODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq3JhcnPtZZoHZiGvGj2atY27aHBpLErwPYZETWQsSr4pHlRTcUSj
P7wXi4lmfXlF+hBXP4H4HOs1ikkfy1c8CFfftPSidgtNRrjzhSFQKrmaAsMtYzOC
MG5EUdttGSad08XA4OJcFg8ucdHF+qqMXepdRH451JJbhIazlVcYAHeHE4vpdDDV
Z4n1HWeCH83wCf5LngXJxX18CTnsmGa/qNiKzDQ1O7qyHC5is72MOGYHh5TCpSBz
YAl/3tzr2J7zDu4x2Zxo3Fpl2baH/IQXljIxDwjuhHZChaxCj/ib50zSm8ipN5ly
P1IBc4I9PMCQ83MYI9N//S+YwpLM6OlVhwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKPXwvjD+IHg/Ej7L6hy7aVJdKkeMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8xLzMxMzYzMDJlMzIzMzM4MmUzMTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNTMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACg7qIwDQYJKoZIhvcNAQELBQADggEBAFHVd8d/SJ+p0Kwwd96JqpZEhIN5MvSA
mGF45b49ycgun88zzYO76S8Gy4Qv/roK46+fKGrhhK4b2njEj78FJgChrwNVGKyx
Stgja7nSzIjKaybeCan2NpKXbN79t2UTK6ZhzJjeXcTZw9t7Ci+fgAE0/kCSk1S8
tl8n6iKkoyzKnfHUy5U8G/fSCaP65XC8O0U+LCIKVWsVFYh4Rc8F4OW76Lk/Gq8k
8xLjLxqY8+onePP69Pa0FmcWt3Xftbi9DTIfavDgrI4Ge7wybMswhpSFHo6D1xJ8
zPlPJVQxk/bLWz6LuOFPYU+K6Q1Y0ihhNABFK2zu3zrwVKsLUPftcUk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org