Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa
File:                     3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          jU8ca5IawhgYIERhvPPaWy3cgDNHGalLGeQjy0Qm2Rs=
Subject key identifier:   CF:6E:EA:0C:67:C6:C5:C9:16:F6:57:3B:DD:23:6E:DB:80:39:F0:BA
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       1EEAC1904D423D4349CF912099FB6856C4438471
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:27 +0000
ROA not before:           Thu 04 Apr 2024 01:33:27 +0000
ROA not after:            Thu 03 Apr 2025 01:38:27 +0000
asID:                     263661
IP address blocks:        187.63.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ea:c1:90:4d:42:3d:43:49:cf:91:20:99:fb:68:56:c4:43:84:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:27 2024 GMT
            Not After : Apr  3 01:38:27 2025 GMT
        Subject: CN=CF6EEA0C67C6C5C916F6573BDD236EDB8039F0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:16:69:3e:bf:2b:78:c5:ad:97:e3:11:5c:
                    91:27:94:e8:dd:20:a9:c4:e2:be:fb:d1:c8:ed:ba:
                    26:d7:95:5a:54:08:67:3c:97:f7:a1:62:7b:22:8e:
                    7e:e2:10:7b:36:e5:f4:ca:f6:a1:48:76:cc:07:94:
                    49:4b:64:97:8e:c0:9c:21:5f:d7:f3:d0:81:71:eb:
                    77:e8:87:f5:e2:f3:9d:c7:48:3d:15:e8:19:82:17:
                    0f:d8:af:ad:71:49:d6:83:4c:05:3a:80:0d:e8:47:
                    02:75:6f:b0:47:27:3f:f7:c5:dc:fd:ba:8a:89:01:
                    5c:c7:0d:de:a3:ef:f2:67:60:01:ae:7c:4a:16:7c:
                    34:5e:df:a4:eb:70:ba:1e:cb:4b:a4:a8:4c:98:ff:
                    60:c2:cc:d0:21:48:f3:dd:38:e6:b7:c9:ce:d4:66:
                    84:83:92:fa:de:70:dd:eb:6a:f6:94:62:fa:04:5b:
                    3a:d1:80:be:70:89:93:b6:93:19:23:ff:3d:08:a8:
                    ed:4f:77:9a:5d:45:44:36:f0:b0:5f:84:8e:8c:77:
                    fc:2c:88:98:05:b5:da:d7:5c:a8:4e:15:83:da:76:
                    64:95:09:68:2e:9b:08:92:b9:6d:fd:8d:82:f2:8b:
                    b2:4c:ad:61:94:cd:f4:05:b0:cd:b6:f6:6c:ea:3c:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:EA:0C:67:C6:C5:C9:16:F6:57:3B:DD:23:6E:DB:80:39:F0:BA
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:26:b3:b3:9f:4d:ed:99:c3:6d:2a:7d:bd:89:f6:45:89:5a:
         7e:cf:ab:49:3b:4a:c6:8f:14:a2:4d:d4:94:67:9c:a1:4e:3b:
         34:6d:79:3d:b7:bb:5a:ab:0d:a1:ea:da:2d:d0:de:f5:a8:a4:
         5c:e6:d6:01:a4:f3:e3:c1:d2:39:7c:d3:3b:31:9a:2c:92:ae:
         10:ac:6e:ef:7b:1f:b6:95:1a:b4:d0:1b:23:09:53:bc:6a:ec:
         ae:07:95:53:5e:a9:1a:03:19:9d:6d:48:1e:5b:46:7b:8b:ff:
         b9:f1:65:43:ed:c1:3f:2e:2d:d0:2a:24:2d:30:b2:36:09:6b:
         7b:b2:0a:c9:9c:76:54:0a:85:fd:43:fb:42:cf:74:55:30:ae:
         c2:db:8a:22:03:4f:27:58:5b:37:eb:f5:00:dc:90:07:44:0a:
         5c:74:29:b1:f3:7e:96:70:60:c4:8a:23:0c:9e:98:4c:74:8f:
         a8:fb:37:84:d2:c2:83:e5:05:35:bf:f0:7b:c1:cd:66:55:29:
         7d:66:2b:01:7f:47:e4:53:35:dd:4e:04:a7:58:f2:86:23:91:
         64:2d:d0:3f:d9:19:14:78:aa:95:c4:45:3b:dd:11:73:56:09:
         53:7f:16:98:ba:fd:2b:d7:ea:f3:5f:77:cd:ff:41:1d:75:96:
         16:94:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org