Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa
File:                     3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          FVd7IxF37a2XVBynNJPJ7yR7sX4fGC6lg5MSlzO87Ss=
Subject key identifier:   EC:DD:E0:1A:28:F4:C2:B5:1C:C2:9D:9E:35:1F:8C:BB:11:1D:DC:EC
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       1ED2C2DD4264CC17384993FB8DD27D7973AE908F
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa
Signing time:             Wed 03 Apr 2024 19:04:35 +0000
ROA not before:           Wed 03 Apr 2024 18:59:35 +0000
ROA not after:            Wed 02 Apr 2025 19:04:35 +0000
asID:                     263098
IP address blocks:        186.208.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d2:c2:dd:42:64:cc:17:38:49:93:fb:8d:d2:7d:79:73:ae:90:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Apr  3 18:59:35 2024 GMT
            Not After : Apr  2 19:04:35 2025 GMT
        Subject: CN=ECDDE01A28F4C2B51CC29D9E351F8CBB111DDCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:3a:87:fc:cc:ad:de:71:c0:66:1e:e3:d0:
                    4b:e7:c5:0e:52:c2:27:94:a2:a3:cf:95:87:a4:93:
                    d0:da:d4:44:2d:50:8d:e0:f6:9a:94:72:b1:33:c9:
                    59:1a:09:db:b3:8f:b6:60:db:6c:ab:5f:72:cd:df:
                    81:3c:21:04:ad:ef:b0:0a:b4:92:e4:0b:07:7f:24:
                    e3:b1:48:d4:f9:07:76:fd:cf:ea:3c:59:ec:c9:80:
                    f4:f8:2c:34:09:d9:3e:7a:95:77:e3:48:da:14:24:
                    01:fe:4a:fc:98:8a:f9:7b:ac:24:32:f2:1a:e6:66:
                    50:45:04:df:f3:21:63:c9:94:60:d0:39:b5:07:58:
                    20:f2:76:61:6f:68:3b:6b:0b:fd:ee:fa:c0:d2:3f:
                    54:d2:5f:c2:fb:93:c5:00:bd:99:61:4b:90:aa:4b:
                    ed:da:97:2e:bf:d3:ea:a9:62:ad:bb:10:1e:74:39:
                    01:ab:9f:b2:72:34:81:32:cb:2a:d6:7c:5e:b5:f1:
                    49:6d:23:09:cd:0a:cb:45:17:21:9d:e8:ec:f7:00:
                    63:79:fc:25:e8:42:00:45:62:98:01:d9:8e:46:85:
                    2e:5d:f7:06:ec:be:8e:98:6a:a8:21:dc:49:28:55:
                    32:c0:6f:31:75:90:0b:29:e3:11:28:ce:aa:16:7f:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:E0:1A:28:F4:C2:B5:1C:C2:9D:9E:35:1F:8C:BB:11:1D:DC:EC
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:78:0c:32:bf:a6:a1:9a:53:1c:0c:23:2b:92:0a:df:80:63:
         93:fd:40:f9:c8:fb:76:7f:4d:61:71:b2:f8:20:fd:ca:5f:27:
         cc:cf:3d:91:8e:ef:45:84:82:56:91:47:8c:57:ad:66:56:7a:
         da:49:65:98:6b:ea:83:e9:ba:65:36:39:69:d1:62:f5:bc:0d:
         dd:a5:a5:6d:37:f1:bc:7e:9a:bb:cc:ea:f3:e7:77:9c:7e:7c:
         ad:3f:f8:c7:dd:5f:e0:bb:7a:28:80:34:dd:6c:2e:73:d0:1c:
         71:94:ed:06:b0:68:41:6a:a0:f3:47:ad:8a:63:cf:53:9d:bf:
         ea:d2:77:36:3c:ce:51:c8:47:93:bc:d6:8b:98:68:af:4c:51:
         ee:75:38:19:a3:7d:25:ed:f2:66:16:27:a7:33:02:25:90:0b:
         51:17:3d:29:54:10:01:84:47:54:3e:2e:55:e4:30:26:54:d2:
         af:b2:fb:74:bf:4c:43:20:38:20:9c:26:db:82:98:f3:f2:72:
         e8:5b:6f:ba:00:fd:e1:28:9b:09:29:ab:8b:cf:58:48:65:0b:
         c2:40:b4:19:91:31:69:56:89:50:45:d5:87:6a:db:02:d1:1d:
         f1:17:b3:63:80:75:fc:ad:6c:7a:6d:60:95:4a:5a:d0:ab:e9:
         ec:2b:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org