Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa
File:                     3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa (raw, json)
Hash identifier:          aOoeowHj+7SmI4gE9DmQV8u1c1RDeH1vm+N/zQ3nEJg=
Subject key identifier:   64:23:35:A8:21:68:02:AF:8C:CE:AE:6D:47:BB:D5:B8:2B:31:0D:79
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       7E6EE137B6CF7D91357499472C9E91E919783473
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa
Signing time:             Wed 03 Apr 2024 18:32:39 +0000
ROA not before:           Wed 03 Apr 2024 18:27:39 +0000
ROA not after:            Wed 02 Apr 2025 18:32:39 +0000
asID:                     265477
IP address blocks:        168.197.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6e:e1:37:b6:cf:7d:91:35:74:99:47:2c:9e:91:e9:19:78:34:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Apr  3 18:27:39 2024 GMT
            Not After : Apr  2 18:32:39 2025 GMT
        Subject: CN=642335A8216802AF8CCEAE6D47BBD5B82B310D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:38:19:2e:a9:b6:57:e8:7b:d2:f5:c0:28:6f:
                    ca:be:ab:61:6c:01:4f:9b:48:fa:75:9e:9a:9e:ed:
                    bf:28:5b:c3:20:b6:bd:cd:1f:66:6a:63:f3:5f:6f:
                    bc:d9:39:7d:f8:5b:41:92:a5:20:78:c6:58:ff:83:
                    66:01:11:7a:77:71:36:09:2b:79:a0:91:f6:cb:49:
                    2f:50:58:75:20:15:ac:4a:26:45:c5:1a:9e:f3:ac:
                    8f:1e:10:c6:88:a0:97:a1:89:61:18:8f:a1:a9:22:
                    2f:1b:5b:66:ff:b3:6f:10:15:23:6e:56:4a:97:db:
                    9a:8b:0e:82:5d:17:86:04:8c:16:5c:67:e7:4e:dc:
                    0e:81:76:e3:22:60:13:07:8a:79:cb:07:e8:a7:6b:
                    95:4c:db:93:e9:0a:3b:b7:de:49:fe:61:3f:40:68:
                    6b:d6:10:d5:39:c6:2b:26:bc:2d:89:62:b3:67:7d:
                    47:78:08:d3:b2:6f:53:a8:21:8c:45:54:36:70:38:
                    67:7f:c5:e8:b2:c7:fb:7b:d8:8b:dc:04:38:d6:4e:
                    a8:65:aa:75:f1:8b:14:f0:19:ce:d1:f3:8c:4d:e9:
                    94:5c:1a:41:67:72:d7:cc:94:19:f0:1c:c3:1f:2e:
                    35:53:98:a3:6c:1e:8c:85:6e:db:79:33:fd:b7:4b:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:23:35:A8:21:68:02:AF:8C:CE:AE:6D:47:BB:D5:B8:2B:31:0D:79
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32322d3232203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:71:8b:e3:9c:ce:39:b1:3b:cc:74:ba:26:ba:3d:a5:a4:0b:
         1b:66:70:15:7f:ca:17:b7:f8:26:75:1a:68:fc:b6:ab:1a:d8:
         86:b3:da:32:96:fb:b8:17:8c:90:be:c4:b2:60:00:06:dd:93:
         b2:46:9c:e0:c1:ce:51:6c:36:d0:15:24:6d:ad:c9:4a:19:e2:
         88:c3:72:0c:44:01:64:da:bc:f2:a1:af:bc:97:80:5a:6a:11:
         f5:a9:8b:ef:0d:32:4f:c9:51:e6:45:9a:2c:11:30:1e:e6:e9:
         8d:b8:8a:2d:18:3f:c2:32:da:04:8d:c3:97:71:7d:ab:bd:a5:
         96:98:59:02:4c:79:76:3e:ac:1f:5e:49:13:ff:f2:9d:d5:f3:
         b3:cb:eb:ee:91:9c:d1:ee:f7:c4:07:49:f7:12:53:6c:e6:9c:
         fb:e5:49:cb:de:2b:6d:a7:c3:af:73:25:2a:4f:5e:56:fe:3f:
         09:77:8f:55:fc:1c:10:73:2c:9a:01:39:43:05:55:ca:bd:be:
         24:ec:be:64:c1:52:1b:29:0d:4b:df:48:ec:2d:fe:95:c6:e6:
         b8:23:80:4f:d2:51:1f:22:41:03:0c:c4:72:48:b2:75:e3:3a:
         5f:b2:14:da:a7:08:d9:a8:cb:5c:7b:e2:7d:f0:32:bc:00:95:
         db:57:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org