Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
File:                     3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (raw, json)
Hash identifier:          +zK8G1zD++/RzPP4i+JAKf78LmzWXj2VkLskgr+Hgj0=
Subject key identifier:   46:7B:8F:18:0D:B7:B0:F4:1C:F9:99:2D:B9:BF:04:59:88:A4:D6:96
Certificate issuer:       /CN=EB2C362543491CC1147C06C78106957C5F504A23
Certificate serial:       352FA19ED224EFAABC535CA203B27B1AE329373B
Authority key identifier: EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
Signing time:             Wed 03 Apr 2024 18:39:08 +0000
ROA not before:           Wed 03 Apr 2024 18:34:08 +0000
ROA not after:            Wed 02 Apr 2025 18:39:08 +0000
asID:                     270632
IP address blocks:        189.126.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl
                          rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2f:a1:9e:d2:24:ef:aa:bc:53:5c:a2:03:b2:7b:1a:e3:29:37:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2C362543491CC1147C06C78106957C5F504A23
        Validity
            Not Before: Apr  3 18:34:08 2024 GMT
            Not After : Apr  2 18:39:08 2025 GMT
        Subject: CN=3082010A0282010100DE70BC5498EBC300872D6972B9BB00DF9D237B19CF1792A602A3DD4A58E9883F7FC1F27489076A02149F82C3A8909B13C277E05A330B1210066B914E6685654C5CACAC0F91E9F16FC89BB939B31A62C02442D3274167FAB5F83B401A8B96ED0F3E1BCB8BA86FBDD166BE3079857B4155742E071832ECFC0BADDB74C5B571E7D0C25E2A43B7FBD04E5D9F95F7DB9E3D9EAB5B4BE7472F9EF34493AB3BA7AAFC94A881C9B802ECD250C89484F6992B6A319EAB9AAFD4B2F6DDE29A67E0F8115D14C13D0A950DE47F8ECB92260FCB2959297F9B9759A159957A63E253DA4A174311005089AF3663790ABBF22AEFCA5EA0751C27315ECBDD7093B86CEB66E560BA4D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:bc:54:98:eb:c3:00:87:2d:69:72:b9:bb:
                    00:df:9d:23:7b:19:cf:17:92:a6:02:a3:dd:4a:58:
                    e9:88:3f:7f:c1:f2:74:89:07:6a:02:14:9f:82:c3:
                    a8:90:9b:13:c2:77:e0:5a:33:0b:12:10:06:6b:91:
                    4e:66:85:65:4c:5c:ac:ac:0f:91:e9:f1:6f:c8:9b:
                    b9:39:b3:1a:62:c0:24:42:d3:27:41:67:fa:b5:f8:
                    3b:40:1a:8b:96:ed:0f:3e:1b:cb:8b:a8:6f:bd:d1:
                    66:be:30:79:85:7b:41:55:74:2e:07:18:32:ec:fc:
                    0b:ad:db:74:c5:b5:71:e7:d0:c2:5e:2a:43:b7:fb:
                    d0:4e:5d:9f:95:f7:db:9e:3d:9e:ab:5b:4b:e7:47:
                    2f:9e:f3:44:93:ab:3b:a7:aa:fc:94:a8:81:c9:b8:
                    02:ec:d2:50:c8:94:84:f6:99:2b:6a:31:9e:ab:9a:
                    af:d4:b2:f6:dd:e2:9a:67:e0:f8:11:5d:14:c1:3d:
                    0a:95:0d:e4:7f:8e:cb:92:26:0f:cb:29:59:29:7f:
                    9b:97:59:a1:59:95:7a:63:e2:53:da:4a:17:43:11:
                    00:50:89:af:36:63:79:0a:bb:f2:2a:ef:ca:5e:a0:
                    75:1c:27:31:5e:cb:dd:70:93:b8:6c:eb:66:e5:60:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7B:8F:18:0D:B7:B0:F4:1C:F9:99:2D:B9:BF:04:59:88:A4:D6:96
            X509v3 Authority Key Identifier:
                keyid:EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:24:3c:ef:b8:5a:b7:6e:de:5e:81:97:a8:db:66:45:c6:
         e6:7c:b7:2d:5e:30:ff:0a:bc:22:6b:4d:43:2d:98:fa:1f:d7:
         73:19:a3:1d:4c:1d:30:84:de:91:f1:5b:dd:6d:f6:14:52:1b:
         7a:14:ca:1d:9a:12:91:27:e4:7e:c9:41:ae:93:8e:81:04:cb:
         99:21:5b:04:fe:6f:41:39:95:19:82:df:cf:39:31:44:67:8e:
         6d:24:f0:1c:68:b6:f5:ed:f5:a1:23:63:ac:35:ed:f0:7c:e8:
         29:19:1a:aa:21:f3:52:ac:ba:f2:e9:cd:48:cf:4b:cd:c8:e9:
         08:79:61:63:db:96:44:cc:de:e7:4f:2c:a1:43:46:6c:fb:74:
         2a:53:54:86:0c:e5:d5:67:72:3f:29:26:98:a5:60:6e:f5:ff:
         e4:09:bf:1f:2c:24:c1:ea:3e:81:6a:53:97:22:1a:1a:7c:63:
         d7:9b:93:a4:e2:2c:be:d1:6a:ca:a9:18:1c:cf:fe:32:fe:4c:
         fd:08:af:55:f9:b1:32:98:43:5b:73:39:48:e2:28:80:87:78:
         04:f4:73:ce:f0:8d:fe:90:11:1c:e8:ad:c7:d5:87:f5:86:d3:
         df:7e:8c:43:c5:5e:f1:99:0f:7d:47:00:77:c9:38:90:54:af:
         ba:23:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:40 2024 by rpki-client on console-fra.rpki-client.org