Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233392e302f32342d3234203d3e20323633363631.roa
File:                     3138372e36332e3233392e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          FCBw01JLmKQXTUKVkp0o5ljzxzFO2msr+wyHcZeOmY0=
Subject key identifier:   BE:BF:F2:05:16:0A:FA:E3:65:13:B6:94:17:AD:47:72:10:2A:57:E1
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       6E19E37EDDC5F06E94BAA96193AB9D534D22696E
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233392e302f32342d3234203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:33 +0000
ROA not before:           Thu 04 Apr 2024 01:33:33 +0000
ROA not after:            Thu 03 Apr 2025 01:38:33 +0000
asID:                     263661
IP address blocks:        187.63.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:19:e3:7e:dd:c5:f0:6e:94:ba:a9:61:93:ab:9d:53:4d:22:69:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:33 2024 GMT
            Not After : Apr  3 01:38:33 2025 GMT
        Subject: CN=BEBFF205160AFAE36513B69417AD4772102A57E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:83:44:6a:f8:ea:30:13:27:18:dc:01:16:01:
                    77:24:1b:42:84:d2:24:a0:0a:98:6f:56:7a:5c:39:
                    8b:c7:7c:78:fc:3f:f0:20:7e:66:61:c4:97:76:49:
                    81:33:50:0c:79:5e:b2:b6:22:1b:66:7f:24:d1:8b:
                    fe:4f:65:12:db:89:1b:0b:fc:ea:d9:2e:c6:e8:67:
                    2c:8e:d1:24:5f:ec:b0:ba:dc:83:1d:25:24:fd:ef:
                    e4:e2:be:45:d8:76:8c:24:61:f9:45:b7:a7:ec:e0:
                    4f:2e:54:46:c3:b9:b5:60:a7:50:db:e1:6d:81:e8:
                    19:83:b7:d2:05:e7:e3:38:14:bd:21:f8:7c:50:d9:
                    76:b4:27:6a:8c:89:62:d6:99:de:05:f7:1c:9d:e2:
                    dc:bd:f7:76:81:3b:a8:10:0b:91:04:fe:4a:5a:a9:
                    21:e2:be:1e:69:8a:4e:f4:24:ed:3d:29:26:d8:7b:
                    0e:0e:19:56:6d:5b:9b:c9:5e:8a:89:d7:91:4e:dd:
                    a8:ba:b9:8f:99:25:68:78:73:dc:9c:69:3e:51:bf:
                    12:1c:c7:aa:82:87:c6:ab:43:ea:48:71:3a:6c:f6:
                    97:ee:64:ab:c2:40:48:27:f0:c4:f6:b7:3a:7e:1a:
                    24:0b:ad:4d:9d:fd:5f:3c:1b:48:5f:4c:7e:c7:40:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BF:F2:05:16:0A:FA:E3:65:13:B6:94:17:AD:47:72:10:2A:57:E1
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233392e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:81:9e:f2:bf:e9:11:4b:36:03:f9:0d:16:8f:ed:e6:49:ac:
         4e:b8:0c:f1:a7:2b:b7:3a:fb:80:b6:5d:1a:b1:26:75:7e:01:
         d8:e8:72:bb:25:c6:18:a1:60:c4:5f:72:e2:ee:15:90:13:0f:
         b9:8b:c8:7d:94:73:29:97:96:2e:53:88:45:3c:15:ee:cb:c6:
         36:2b:a9:43:83:b8:bb:e6:95:7f:a4:5c:27:a5:3e:cd:c1:fa:
         f5:9f:e8:b1:d6:5f:ec:c2:40:35:b5:d8:de:bc:17:58:74:e9:
         2a:ba:fa:dd:8e:b4:68:72:f3:d0:74:9b:04:49:cb:f4:e5:6c:
         40:91:4f:10:ed:b1:de:91:ad:ab:f7:3e:6d:26:56:07:80:c3:
         b7:5f:b2:78:ec:5c:a8:cb:8e:33:4a:d3:19:2b:e9:0a:2a:6d:
         f9:0c:9a:10:1d:25:2b:1a:6e:c2:81:b3:f0:31:a6:35:17:a0:
         e3:c8:d5:89:e2:48:bd:22:4e:41:5e:1a:bd:fb:ec:45:cb:df:
         2c:e8:40:14:a0:b5:12:41:ba:8d:1b:f6:cf:64:8f:e1:ab:6a:
         56:65:b8:2a:38:13:2f:78:76:23:4b:d0:58:7e:51:cb:32:dc:
         59:57:76:aa:1d:89:d4:a2:40:c2:fb:e7:c9:a7:1f:dd:29:ec:
         18:8a:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:41 2024 by rpki-client on console-ams.rpki-client.org