Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3230312e33332e3136302e302f32302d3234203d3e203533313831.roa
File:                     3230312e33332e3136302e302f32302d3234203d3e203533313831.roa (raw, json)
Hash identifier:          Lfij6goq2Ajz6caAQ1dGss2oPepohpfXxbj0MNydAys=
Subject key identifier:   4C:BB:67:08:67:06:2C:78:D0:D9:09:78:7D:25:93:30:21:2F:2E:A3
Certificate issuer:       /CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
Certificate serial:       022B2C9813C3BCF369DBDF3A2A8B8195D6489230
Authority key identifier: E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3230312e33332e3136302e302f32302d3234203d3e203533313831.roa
Signing time:             Thu 04 Apr 2024 09:58:19 +0000
ROA not before:           Thu 04 Apr 2024 09:53:19 +0000
ROA not after:            Thu 03 Apr 2025 09:58:19 +0000
asID:                     53181
IP address blocks:        201.33.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2b:2c:98:13:c3:bc:f3:69:db:df:3a:2a:8b:81:95:d6:48:92:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
        Validity
            Not Before: Apr  4 09:53:19 2024 GMT
            Not After : Apr  3 09:58:19 2025 GMT
        Subject: CN=4CBB670867062C78D0D909787D259330212F2EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:06:fe:37:b3:26:be:5c:15:9d:a8:0a:ae:
                    17:41:f2:c9:ce:cd:b9:46:5a:2a:53:2c:52:10:7f:
                    77:63:34:56:c0:6e:2d:af:cd:91:5e:53:a1:2d:6c:
                    b4:89:b0:11:92:0c:f3:8e:ab:4e:a2:4b:cc:45:49:
                    39:64:52:26:77:ef:19:be:c9:62:3c:89:c9:e9:02:
                    5b:80:53:bd:a8:d0:3a:4e:63:fc:e7:2d:8b:61:9e:
                    86:48:52:b5:d8:a6:7a:f2:ee:15:d4:40:4d:2c:43:
                    27:3d:11:f5:af:4e:70:7d:44:69:05:32:54:2f:c1:
                    2d:65:a4:7c:55:ed:13:7a:4b:39:c0:7a:2d:a3:75:
                    3e:93:e6:2b:f8:ba:f8:13:07:b2:0a:3d:ad:25:cb:
                    e5:96:92:eb:8e:7c:e8:fd:5e:14:b7:99:04:8e:70:
                    77:30:37:a1:bd:f1:cf:10:d4:f5:a4:c0:86:3e:42:
                    0d:b8:4b:f1:9c:d5:3c:3b:91:e8:e7:a1:c3:3d:77:
                    ba:68:91:90:ca:d4:30:27:6e:8b:5e:e4:8f:77:de:
                    1a:26:95:a1:27:f1:c7:0f:9e:c7:38:a9:2e:4a:88:
                    03:44:1f:89:d2:56:dd:db:ae:65:08:e0:40:87:24:
                    bc:26:59:ce:3c:1d:92:09:33:45:95:f9:67:ed:52:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:67:08:67:06:2C:78:D0:D9:09:78:7D:25:93:30:21:2F:2E:A3
            X509v3 Authority Key Identifier:
                keyid:E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3230312e33332e3136302e302f32302d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:cf:d9:e8:b1:df:4c:23:d2:75:50:6e:2d:a1:3b:5c:0b:
         46:35:8f:58:6f:d7:c0:10:fe:7d:4a:94:bb:6d:79:d0:84:ed:
         e3:9b:f2:1e:1e:47:d1:75:da:c4:28:d3:1b:94:c8:30:82:a2:
         86:c9:aa:7a:99:c4:bc:f4:8a:c9:d6:04:b0:4e:34:94:84:b4:
         a3:dc:a7:cc:73:f5:b2:99:55:01:0e:2f:26:0d:0e:ad:2b:5f:
         e4:9b:82:4d:b2:d4:7d:1c:ed:e1:ad:49:f0:78:22:b8:9d:ef:
         60:d6:05:f7:af:d5:78:cb:b5:c2:d4:87:f6:7c:e6:be:6d:eb:
         09:ea:95:85:50:4c:6f:25:2e:98:e1:01:55:f9:5d:97:18:14:
         07:16:d4:78:7e:4a:14:ee:b3:be:7a:af:2a:be:2f:00:8b:7a:
         3d:ab:f8:b5:b3:f7:d4:9a:f4:38:4e:b3:12:ce:4e:de:bc:4b:
         d2:32:12:d8:46:8d:1d:8a:89:bf:1e:65:e5:5b:f6:03:8b:93:
         e8:af:b6:fa:7d:ea:42:7c:92:a6:93:97:53:9d:e4:ac:a8:ac:
         12:55:ec:d9:cd:b8:4e:cb:12:87:e3:aa:8e:26:6f:23:41:73:
         07:72:d5:83:cc:20:cc:4b:b7:ac:f8:b3:97:61:7f:b3:52:4c:
         1f:53:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org