Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
File:                     3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa (raw, json)
Hash identifier:          IGdeEDWuq3LF/DialHVBReb4DXTSPb3XVqfn2phEcW4=
Subject key identifier:   13:9C:87:8D:F0:CC:49:1F:23:08:0E:15:54:28:41:B9:80:D2:04:CD
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       265B5A365FA870640451E1BB91D316F6C3CD080F
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
Signing time:             Thu 09 May 2024 13:35:30 +0000
ROA not before:           Thu 09 May 2024 13:30:30 +0000
ROA not after:            Thu 08 May 2025 13:35:30 +0000
asID:                     53196
IP address blocks:        186.232.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5b:5a:36:5f:a8:70:64:04:51:e1:bb:91:d3:16:f6:c3:cd:08:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: May  9 13:30:30 2024 GMT
            Not After : May  8 13:35:30 2025 GMT
        Subject: CN=139C878DF0CC491F23080E15542841B980D204CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:29:6f:0b:bf:a8:ac:57:af:0d:37:0d:3f:
                    38:f3:d2:c7:b6:c9:25:cf:8b:6c:55:9d:92:2a:31:
                    18:9a:55:a7:15:47:46:22:95:8f:a4:ad:62:bd:35:
                    73:da:a5:54:54:67:fe:16:5c:bf:b3:c0:ba:d6:5d:
                    5c:08:23:95:d1:14:3f:73:30:f9:ab:f2:7c:0a:d5:
                    29:eb:f8:9b:f9:4c:22:6e:8e:38:66:5c:8a:ce:2f:
                    8b:e1:af:1e:e1:86:31:55:d9:7e:2a:f1:8b:3f:c9:
                    2e:2a:26:9b:c4:e7:47:4c:23:bf:2c:10:9d:b6:32:
                    36:91:54:88:c2:9a:e0:6b:b2:3e:02:76:7f:8f:4b:
                    94:d8:23:76:39:24:9b:97:55:e5:e5:f0:8e:00:ac:
                    c1:be:d9:24:00:c9:06:30:85:e0:6c:56:a9:9c:0d:
                    d5:08:15:33:b7:b9:f6:e8:1d:ad:72:1c:35:34:0c:
                    0c:ca:3c:ba:4d:f6:fc:49:7c:38:e0:87:59:bb:3e:
                    80:8b:0c:47:61:bd:f2:41:39:d8:95:0a:f5:ef:a1:
                    4b:e0:96:b2:f4:03:79:e5:88:21:4d:cd:c3:14:0b:
                    53:2a:2f:40:0a:fb:ac:b7:ad:af:48:0e:60:55:93:
                    76:fa:e3:e9:9c:a2:90:0f:bf:2f:43:ba:0d:42:4e:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:87:8D:F0:CC:49:1F:23:08:0E:15:54:28:41:B9:80:D2:04:CD
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:80:1f:3a:e7:5f:8c:46:d5:b7:ed:74:44:5e:21:92:1d:7e:
         e5:2a:9b:f9:ce:08:b9:3b:40:cc:2d:3f:01:ba:c6:fe:a3:16:
         0c:fb:dc:0c:6c:55:0a:f6:56:da:e8:4f:90:8f:d0:f7:e9:ea:
         e1:7e:f5:2a:6d:ba:62:38:a9:f5:64:5d:16:d7:35:94:9c:3b:
         c3:f4:70:fb:8d:34:d2:6d:7b:61:90:44:c4:1b:e8:58:40:52:
         af:47:ed:74:ad:52:c7:95:03:7f:a7:c3:d3:85:b7:67:d7:f4:
         f4:ee:5d:8d:75:8a:f1:b9:c2:6b:c0:ed:6c:73:92:ec:3f:c8:
         d0:77:4e:05:19:10:b1:e7:a6:15:03:7a:4f:f8:9f:52:e9:df:
         55:cd:63:2b:84:d7:3f:38:d9:11:5c:37:7f:a8:b2:91:d3:29:
         de:3e:30:de:58:af:f5:e5:80:78:28:28:dc:d3:84:b0:95:03:
         cd:b5:92:c3:c6:0f:bf:6d:09:86:78:89:2a:a7:f8:29:5a:71:
         b2:d9:8f:f7:95:f5:b9:a9:41:d1:c0:a0:10:18:eb:d5:64:71:
         6c:09:9d:50:e0:a7:6a:da:ce:40:61:5f:2e:5b:e4:fe:b5:f2:
         8a:dd:c9:12:94:88:a7:97:eb:71:38:af:5c:30:3d:7b:40:f8:
         b4:dc:be:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:50 2024 by rpki-client on console-fra.rpki-client.org