Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa
File:                     3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          J42/D477cTg0J0QTqlSOadZQoOFfu550bQlDKBON7b0=
Subject key identifier:   D5:0C:95:2B:B3:D9:04:22:7F:94:20:C3:FA:15:56:9C:AB:DC:30:CF
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       6F3FFB5A4542F683BD2F1A34F5363370CA1F4CA9
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa
Signing time:             Wed 14 Aug 2024 21:48:14 +0000
ROA not before:           Wed 14 Aug 2024 21:43:14 +0000
ROA not after:            Wed 13 Aug 2025 21:48:14 +0000
asID:                     263661
IP address blocks:        187.63.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3f:fb:5a:45:42:f6:83:bd:2f:1a:34:f5:36:33:70:ca:1f:4c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Aug 14 21:43:14 2024 GMT
            Not After : Aug 13 21:48:14 2025 GMT
        Subject: CN=D50C952BB3D904227F9420C3FA15569CABDC30CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:cf:c6:c1:fc:af:bc:57:1e:67:84:82:63:
                    49:b5:30:33:2a:0b:4d:af:73:ef:1a:54:6d:56:5c:
                    3a:82:a3:91:f2:48:e5:17:1b:95:85:a4:3e:f6:a5:
                    95:b5:bb:19:3a:2a:54:70:12:8a:a4:f0:e4:ac:8e:
                    a1:e2:4f:94:c9:0c:f1:40:da:f3:83:4c:4f:99:2c:
                    51:c2:a6:0b:3c:03:d1:a2:ac:24:80:ee:b6:84:23:
                    62:5c:a9:dd:97:fc:00:c2:08:a0:ff:e8:9f:ff:a0:
                    4d:6d:f8:c4:5e:9f:42:c2:86:d5:4c:21:43:d6:fc:
                    7a:e1:d5:d9:c5:15:df:bc:5a:2f:22:27:6a:4a:a1:
                    03:76:d8:72:a8:56:68:36:89:9f:6f:01:fa:7b:d0:
                    d8:3a:be:d9:f4:d0:d6:96:22:f0:ec:96:cf:2c:b9:
                    ac:94:43:44:b1:d2:14:6d:28:59:0c:17:48:53:95:
                    7b:ef:93:fd:ac:1d:d8:ff:ae:d6:14:6c:ba:58:77:
                    7f:f6:54:87:65:8f:1d:de:32:ae:51:e8:d1:85:b4:
                    0c:eb:67:a7:c3:34:dd:0a:1e:7a:b2:7b:46:79:38:
                    74:7e:6c:89:30:29:ff:1c:06:9e:e6:54:d3:10:49:
                    ff:d6:77:14:8e:f4:22:76:40:79:c0:c6:a6:50:33:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:95:2B:B3:D9:04:22:7F:94:20:C3:FA:15:56:9C:AB:DC:30:CF
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233382e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:9c:80:38:63:0a:fd:c4:60:9f:14:2a:84:5d:93:79:eb:
         98:78:47:11:d3:d1:39:18:0b:01:c5:d3:55:03:96:4c:e7:a1:
         19:6f:44:9b:46:b5:c0:a0:66:cf:ac:55:2a:9b:2d:8e:21:dd:
         f7:67:f7:9c:c0:95:b6:61:7c:db:10:33:9a:a3:ba:99:8e:63:
         aa:c3:2b:ba:0c:e5:e1:8d:54:62:14:98:8f:85:00:4c:32:97:
         e7:46:a2:48:c7:78:92:87:24:ca:3c:36:d8:90:e5:1c:ca:e7:
         b7:da:14:64:4f:47:4f:84:47:b1:2f:1f:53:6d:5d:e5:47:5a:
         fd:ca:4b:98:46:19:86:0a:54:e4:da:c9:42:be:66:46:b5:d6:
         eb:46:b3:1a:1d:6b:a2:72:0f:fb:5e:39:82:eb:ca:08:03:33:
         50:a2:c0:b0:cf:67:26:b5:fd:0c:ab:60:2d:83:00:b3:81:65:
         31:c6:ad:32:80:d3:61:ad:45:40:6a:62:11:79:68:5c:d3:a5:
         d5:aa:da:61:db:da:86:a0:b5:4c:83:70:91:89:86:e1:65:cf:
         ae:78:4a:57:74:b0:c1:04:0e:05:67:a7:98:0c:36:51:a4:58:
         e3:ee:8e:56:9a:ff:76:11:ff:a8:44:e1:46:df:5e:00:99:1b:
         08:ca:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org