Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32322d3332203d3e20323635393836.roa
File:                     3138312e3139312e33322e302f32322d3332203d3e20323635393836.roa (raw, json)
Hash identifier:          czPROiU08auIyXrT/8z6gBGmFYqLEuChP3/lBoJ4UiM=
Subject key identifier:   6C:24:B8:71:3F:BF:84:20:3D:22:45:ED:41:C1:80:D4:20:29:E4:05
Certificate issuer:       /CN=032B1F5A6BAD954ABAF8B4997A6416597A29708A
Certificate serial:       2E4505DC050E7AE03D32F29DE9991ED5CDDC96BE
Authority key identifier: 03:2B:1F:5A:6B:AD:95:4A:BA:F8:B4:99:7A:64:16:59:7A:29:70:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032B1F5A6BAD954ABAF8B4997A6416597A29708A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32322d3332203d3e20323635393836.roa
Signing time:             Fri 19 Apr 2024 14:48:40 +0000
ROA not before:           Fri 19 Apr 2024 14:43:40 +0000
ROA not after:            Fri 18 Apr 2025 14:48:40 +0000
asID:                     265986
IP address blocks:        181.191.32.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/032B1F5A6BAD954ABAF8B4997A6416597A29708A.crl
                          rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/032B1F5A6BAD954ABAF8B4997A6416597A29708A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032B1F5A6BAD954ABAF8B4997A6416597A29708A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:45:05:dc:05:0e:7a:e0:3d:32:f2:9d:e9:99:1e:d5:cd:dc:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032B1F5A6BAD954ABAF8B4997A6416597A29708A
        Validity
            Not Before: Apr 19 14:43:40 2024 GMT
            Not After : Apr 18 14:48:40 2025 GMT
        Subject: CN=6C24B8713FBF84203D2245ED41C180D42029E405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:c9:cc:88:74:50:0a:9c:11:7e:27:0d:27:
                    68:76:ed:6b:be:76:bd:36:35:b6:1c:87:2f:9b:d4:
                    22:10:df:0e:06:3b:5d:c4:d0:13:06:b3:bf:5f:9b:
                    59:9e:a7:44:2f:a0:a3:3d:79:ec:63:28:4c:6a:b7:
                    2e:14:a9:03:86:f4:96:4d:86:a1:d1:78:c6:b1:ce:
                    0b:c2:40:59:92:04:56:51:a2:02:23:54:65:27:81:
                    26:98:92:e3:07:7a:8d:f0:68:ef:ab:53:c9:ac:9a:
                    62:23:66:dd:f0:74:0c:e2:78:c2:f0:68:c7:60:c1:
                    91:9b:74:3d:56:7c:95:4e:95:e4:a3:95:4f:c3:49:
                    00:46:c9:75:8b:c2:a8:6a:2a:92:09:20:6b:80:65:
                    1a:36:17:3f:63:4e:19:16:ee:fc:2d:2d:3a:89:cd:
                    29:e4:83:d4:07:8e:60:70:52:04:56:15:0e:d6:f4:
                    ec:80:5f:6f:94:69:e7:cd:64:68:32:60:17:0d:f4:
                    f8:28:43:56:aa:14:b1:4f:17:3f:85:e0:c3:5c:d9:
                    65:0e:b3:35:56:15:ae:8e:e0:a9:3d:04:f7:3d:81:
                    2d:76:b2:1c:09:11:0a:10:10:42:59:0a:60:9d:22:
                    70:d1:74:36:ae:1d:05:c4:73:d2:4b:14:00:85:3a:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:B8:71:3F:BF:84:20:3D:22:45:ED:41:C1:80:D4:20:29:E4:05
            X509v3 Authority Key Identifier:
                keyid:03:2B:1F:5A:6B:AD:95:4A:BA:F8:B4:99:7A:64:16:59:7A:29:70:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/032B1F5A6BAD954ABAF8B4997A6416597A29708A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032B1F5A6BAD954ABAF8B4997A6416597A29708A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/3138312e3139312e33322e302f32322d3332203d3e20323635393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:26:34:77:a9:81:19:98:6f:4f:ed:6a:08:29:15:04:58:10:
         80:36:4e:8f:d8:2b:3c:70:c9:6a:c9:0b:ea:02:8c:b0:8d:78:
         d2:84:89:2f:f4:a3:b9:18:e8:f0:09:ae:d1:23:98:65:1c:a4:
         2d:90:7c:36:47:ea:7b:fa:5d:d3:06:3b:61:de:27:59:60:69:
         43:7c:31:20:62:a0:c7:76:44:12:85:b5:b9:3c:ff:1c:1d:4c:
         49:df:bb:df:29:a8:53:11:1f:8a:b1:b2:3e:b9:07:45:35:ee:
         23:e0:0d:29:2a:89:22:f3:62:0f:08:47:20:f7:82:28:4f:c4:
         63:b1:c7:40:49:f7:81:8e:82:f8:d0:da:1e:fc:83:c2:8d:6a:
         ba:a8:cd:d1:30:3f:ff:24:b8:b8:64:0d:80:c0:fc:1c:73:38:
         c9:16:55:2b:11:cc:e7:6a:1c:88:56:0f:8e:ba:f5:0b:b3:30:
         b7:8a:93:fb:6f:0e:7f:2b:93:e3:26:07:3f:1a:5f:ed:c0:b6:
         42:49:eb:bf:fb:9b:7d:3f:e2:b4:d9:67:bf:a2:16:59:00:2f:
         58:0b:78:83:a3:0e:05:76:30:4a:66:15:9a:02:69:52:d5:01:
         88:9f:cb:b8:30:d7:07:76:0c:32:ec:a8:a8:f5:c9:43:d3:de:
         71:4d:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org