Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139322e302f32322d3232203d3e20323632353335.roa
File:                     3133382e33362e3139322e302f32322d3232203d3e20323632353335.roa (raw, json)
Hash identifier:          jiq0nVEeT52nt3zP1CyHLXJ5/A+lFD9osnBlM8UpDWc=
Subject key identifier:   33:77:1B:DE:4F:3B:76:BC:CF:0D:E3:42:05:F0:F6:6C:1D:70:A8:82
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       0BDF0CC890EDC87E34F033A7CE18CC22F1F8CAAA
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139322e302f32322d3232203d3e20323632353335.roa
Signing time:             Thu 12 Sep 2024 23:01:38 +0000
ROA not before:           Thu 12 Sep 2024 22:56:38 +0000
ROA not after:            Thu 11 Sep 2025 23:01:38 +0000
asID:                     262535
IP address blocks:        138.36.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:df:0c:c8:90:ed:c8:7e:34:f0:33:a7:ce:18:cc:22:f1:f8:ca:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Sep 12 22:56:38 2024 GMT
            Not After : Sep 11 23:01:38 2025 GMT
        Subject: CN=33771BDE4F3B76BCCF0DE34205F0F66C1D70A882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:f0:2e:56:45:3f:80:69:4a:7c:03:b5:32:
                    99:8f:2c:0d:81:d2:22:a7:fd:9e:c2:47:f5:cd:58:
                    99:ad:06:a3:b5:bf:91:1d:26:fb:24:88:7b:d9:7a:
                    3a:13:69:16:2d:73:38:65:a7:a8:8e:89:98:07:16:
                    85:7f:39:bd:1f:d5:0d:b2:d8:ca:e3:d7:8d:0e:a9:
                    9e:2e:18:83:b7:bb:29:a8:79:bf:ad:0d:f1:93:b8:
                    e0:a8:24:58:e8:08:fc:2d:48:56:bf:1b:40:cf:b5:
                    02:dc:ff:06:fa:47:13:21:f9:0a:85:38:24:b2:0d:
                    91:11:58:e3:a9:54:38:ee:a2:f1:0e:bd:82:f2:37:
                    49:66:6d:9a:bf:01:19:b7:95:18:b6:0c:b7:62:f7:
                    89:5b:61:29:19:19:54:36:cc:92:6d:0b:e6:d6:32:
                    a6:50:b7:1b:62:c5:5e:11:52:af:b9:4f:0a:e7:c3:
                    c9:3e:54:09:37:d8:f8:d7:24:eb:ca:d9:98:5c:a3:
                    55:63:b6:38:07:33:51:45:e7:a5:c1:3a:0c:fd:bf:
                    da:dc:88:7e:38:6e:d0:ce:d9:24:70:18:dd:47:50:
                    f1:b6:38:db:cf:bd:72:1d:46:35:ea:72:e1:6d:04:
                    0d:84:ee:de:15:dc:51:77:f4:65:ab:c8:0e:9c:fd:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:1B:DE:4F:3B:76:BC:CF:0D:E3:42:05:F0:F6:6C:1D:70:A8:82
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139322e302f32322d3232203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:f0:99:0e:6d:22:3b:8d:6d:93:fa:48:9c:cf:64:c1:f0:
         57:c8:70:c3:43:d3:c5:8f:c8:36:ef:c5:c6:5c:ac:82:e5:b1:
         54:f4:f8:06:1b:8a:78:8d:6f:74:34:06:fd:3f:72:af:32:59:
         0f:f3:1f:11:5c:07:21:2f:b1:8d:67:74:2a:96:f8:c7:7f:ed:
         e2:1e:e6:7a:4d:20:e7:1c:d7:cf:7d:a7:71:e0:30:63:6c:07:
         42:85:42:33:ac:0f:10:df:5a:71:93:98:92:ea:df:38:d7:c1:
         5d:6f:f0:ef:bd:a8:fc:03:2a:41:0e:65:d7:48:07:ee:0c:79:
         e7:b4:87:ba:d1:e5:27:42:a6:39:81:2e:77:a5:c4:c4:92:f1:
         29:e3:ab:30:aa:a3:a3:45:5f:42:65:01:bf:02:1f:82:4d:c5:
         c4:44:6d:d6:b3:ce:14:61:28:c6:72:db:42:8c:93:b9:aa:bc:
         bc:21:a8:01:c0:b1:f6:72:3d:1d:11:e5:f2:b2:eb:e5:c8:09:
         27:ed:8b:b3:7f:a7:87:36:a4:18:6c:2f:57:b0:54:e8:f5:36:
         49:bc:94:4f:9a:a7:1c:17:8d:b0:2a:ee:42:c4:8e:e7:b0:24:
         e4:23:43:07:c1:11:06:d8:42:d5:7a:95:7c:6a:6c:84:99:2d:
         a2:f6:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org