Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          DhumZojLoUcHDBQf9oXS116tNicNOKT+Swh/3slik2M=
Subject key identifier:   C1:42:24:AA:A1:71:21:C0:A5:8A:58:D8:94:F4:AB:EC:A6:E7:86:C4
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       0A03B1B9F7ACAE55E78CA3E9BF58456814FE4D28
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 03 Apr 2024 18:31:14 +0000
ROA not before:           Wed 03 Apr 2024 18:26:14 +0000
ROA not after:            Wed 02 Apr 2025 18:31:14 +0000
asID:                     266535
IP address blocks:        160.238.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:03:b1:b9:f7:ac:ae:55:e7:8c:a3:e9:bf:58:45:68:14:fe:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Apr  3 18:26:14 2024 GMT
            Not After : Apr  2 18:31:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:ec:72:4b:73:30:27:b0:77:b9:07:95:ec:
                    80:45:12:1c:6f:2d:16:81:19:59:08:2b:ca:b2:b2:
                    d6:b4:c7:ae:f3:32:cb:03:8a:bc:f9:13:23:24:0f:
                    f0:73:c2:65:1b:a8:e5:08:78:ef:fe:60:af:a2:ea:
                    af:59:85:c2:9a:40:15:68:b1:e4:4d:55:26:b3:9d:
                    7b:8e:9b:cf:fd:3e:d5:3d:46:80:c2:27:23:52:53:
                    f9:55:b1:f3:01:86:f6:2f:85:8b:fa:40:74:a7:6a:
                    e5:63:f1:8f:82:71:b0:db:04:42:86:ab:ea:31:0f:
                    0b:ec:e2:67:54:cb:06:e8:83:c2:c3:38:af:0e:e3:
                    2a:50:8e:4d:61:eb:4b:9a:fe:76:ad:10:59:9b:f1:
                    0b:4e:6f:86:58:5e:33:e4:77:a4:7a:7c:a4:e2:68:
                    33:5d:59:dc:75:72:ae:59:ad:6c:48:93:dd:1d:1b:
                    c9:7b:21:1e:f1:b4:d4:a6:5c:0d:a1:2e:b7:89:65:
                    10:80:fd:fe:da:05:8b:bf:42:b8:aa:34:94:16:43:
                    8a:5c:c0:41:6d:ba:c1:1c:69:2a:33:ef:04:27:94:
                    25:b6:a2:31:fe:bd:62:da:ba:1d:6d:2e:23:60:fb:
                    9c:a8:c0:02:46:fb:2e:bb:77:9e:37:e7:b3:15:84:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:24:AA:A1:71:21:C0:A5:8A:58:D8:94:F4:AB:EC:A6:E7:86:C4
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:38:ce:b9:8a:8f:9b:d1:86:77:94:82:f1:51:33:d4:42:
         15:b2:58:59:b8:d1:c6:fb:92:4a:bc:e5:52:7b:d9:d3:c2:72:
         ad:23:95:fd:96:03:48:e9:27:57:17:1f:ab:90:ab:b5:cc:98:
         49:ec:0f:29:44:15:18:9b:1d:2d:57:a6:9f:52:13:eb:b0:5c:
         99:53:db:2f:f3:6a:0d:d4:7a:70:88:c1:94:ca:b1:55:85:87:
         33:be:9d:8a:4e:36:88:e9:2e:7b:02:0f:e3:5a:2c:5c:49:8f:
         71:27:97:a4:32:c3:ab:31:20:2f:f9:53:f3:cf:9f:31:c4:9f:
         de:ab:e7:92:81:43:98:95:7c:84:1b:6c:30:a2:25:75:23:6a:
         d9:11:7f:8a:e5:6a:a7:c5:be:aa:1f:9e:dc:35:38:49:17:1c:
         d4:c5:3a:73:80:24:ba:f4:92:c8:00:a8:cc:a9:ee:db:29:bb:
         75:04:22:41:ba:c1:66:db:73:55:1d:2f:3f:c2:5c:90:00:87:
         f6:5d:c2:50:3d:f3:bd:f8:c4:b8:29:fb:5f:e4:c2:13:83:42:
         00:8d:8c:93:f3:c8:65:8b:09:a2:c7:39:58:d7:a7:a7:8d:68:
         69:8c:98:3b:d5:07:47:53:41:e9:de:3f:c6:77:87:24:d0:62:
         7d:30:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:08 2024 by rpki-client on console-fra.rpki-client.org