Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa
File:                     3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          6euXhRonJuLChltX2gYPw3JLV+ShtQSB08EqUm3EYgg=
Subject key identifier:   76:59:F9:2C:C7:B1:37:33:EC:13:50:07:43:F7:1F:FF:64:18:EC:C5
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       02DB5A39B59E976EFDE9EDEFA114745C00C6435E
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa
Signing time:             Wed 03 Apr 2024 19:04:35 +0000
ROA not before:           Wed 03 Apr 2024 18:59:35 +0000
ROA not after:            Wed 02 Apr 2025 19:04:35 +0000
asID:                     263098
IP address blocks:        167.249.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:5a:39:b5:9e:97:6e:fd:e9:ed:ef:a1:14:74:5c:00:c6:43:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Apr  3 18:59:35 2024 GMT
            Not After : Apr  2 19:04:35 2025 GMT
        Subject: CN=7659F92CC7B13733EC13500743F71FFF6418ECC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:c2:38:09:be:46:0f:b2:e7:99:0d:e8:a2:
                    b5:68:b8:af:d5:0c:2a:69:08:c6:8d:35:19:d7:17:
                    74:47:e7:00:35:bb:f5:71:bc:c6:f3:12:8c:2b:2d:
                    a9:a4:b2:48:a0:44:40:c2:5d:0b:47:78:c9:dc:f6:
                    53:61:13:75:57:0f:6b:e3:d5:fa:0c:3c:87:e6:89:
                    07:46:5e:16:ad:06:7e:8d:ab:d6:f4:c5:ad:dc:56:
                    26:4a:40:55:20:a1:78:4d:1d:fb:8c:c9:96:36:7f:
                    13:4a:e2:17:6c:82:d0:0b:71:eb:f9:f1:2e:7e:8c:
                    59:78:4c:7a:5e:27:db:16:a0:ea:c8:ce:9a:b9:6d:
                    f6:d6:1c:95:57:01:36:c9:4e:dc:b2:e3:42:e9:92:
                    14:06:a6:87:21:1f:e4:93:84:84:ae:8d:78:ac:dd:
                    99:21:83:05:e7:c5:85:17:6b:bf:a1:73:3e:6b:2b:
                    66:5f:18:dc:0f:e3:3e:8c:27:41:8a:4b:b1:3e:58:
                    0e:f3:d9:31:11:bc:c3:70:43:89:c2:79:53:c0:ae:
                    65:7b:c0:03:40:9e:5d:0d:23:a0:59:7d:0b:65:61:
                    d4:cb:71:8e:56:2f:08:55:26:0c:d4:57:35:fa:9a:
                    21:be:ca:2d:7a:b1:66:ab:a8:9d:0f:e2:a5:2c:86:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:F9:2C:C7:B1:37:33:EC:13:50:07:43:F7:1F:FF:64:18:EC:C5
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:67:bc:e7:18:27:80:e0:15:ae:6d:64:27:eb:4f:32:1a:
         ee:29:c0:ee:f0:82:26:16:2f:cd:cc:ae:b2:fd:eb:3a:60:cd:
         b1:b9:b9:eb:46:cb:1a:1f:63:8f:66:82:4a:ef:c1:35:a9:cd:
         ce:3f:47:96:f4:fd:13:b2:85:51:2f:14:e3:5b:71:b8:95:b5:
         d5:00:e7:37:ea:c3:91:d0:e9:1a:20:0c:49:96:4e:fb:73:de:
         e6:f7:a3:36:f0:4c:05:ef:dd:f4:6e:91:d4:fb:ed:be:19:0e:
         96:90:41:c4:36:8b:f4:3e:e8:53:c4:4e:c3:c4:3a:5f:d7:b1:
         26:e1:49:69:0b:29:9a:f3:7e:bb:63:f0:a1:7b:c9:0e:eb:7f:
         5c:7a:1f:68:39:57:de:a0:61:fa:b4:a2:b1:42:48:ed:3e:25:
         ce:dc:f1:2d:78:f6:19:6f:aa:77:b5:fd:ce:c0:18:ca:3c:74:
         c4:c5:84:d6:ed:ea:15:45:d9:f1:8d:d7:11:18:a6:1f:85:29:
         44:51:58:65:5f:60:ca:c8:0d:97:2c:c4:7d:1d:53:9e:fb:fc:
         bc:99:8b:b6:b2:a5:1c:0f:bc:7d:fa:c3:32:22:cb:6b:f2:da:
         5e:71:a8:2d:62:44:33:49:62:33:a5:ab:d1:9c:5d:55:0c:a7:
         e7:ca:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:46 2024 by rpki-client on console-ams.rpki-client.org