Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          mBYY642lk4Qlx+o9eyEw/GbYE7sh/w0Jfp3VoX1mFxg=
Subject key identifier:   88:3B:67:96:F0:16:2F:16:93:36:3A:DC:B3:B7:A6:44:2B:A8:F2:9A
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       5E1704831E41686B33B5521D8824988C0ACE71A5
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa
Signing time:             Wed 03 Apr 2024 18:32:39 +0000
ROA not before:           Wed 03 Apr 2024 18:27:39 +0000
ROA not after:            Wed 02 Apr 2025 18:32:39 +0000
asID:                     265477
IP address blocks:        168.197.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:17:04:83:1e:41:68:6b:33:b5:52:1d:88:24:98:8c:0a:ce:71:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Apr  3 18:27:39 2024 GMT
            Not After : Apr  2 18:32:39 2025 GMT
        Subject: CN=883B6796F0162F1693363ADCB3B7A6442BA8F29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:94:c8:01:12:44:77:5f:67:b0:72:5f:be:ff:
                    1f:8f:8a:ae:72:e9:49:9f:ff:ce:07:c0:27:31:92:
                    9c:1a:b6:52:c1:d0:f4:13:2f:8b:09:06:3e:e9:43:
                    3e:b1:83:0a:4e:23:74:33:f7:08:03:cc:db:06:03:
                    46:9e:a5:3d:02:a7:16:9c:bd:7e:24:c7:ee:bc:f9:
                    f6:1f:f1:78:eb:e7:ed:6a:f0:73:27:5e:e5:bd:e9:
                    6e:2c:63:7d:3a:e2:a2:d4:d8:06:84:4a:80:83:33:
                    f5:e9:c9:66:7b:18:98:5b:ee:8c:e0:c9:a0:c3:d5:
                    0b:28:e3:cf:65:5a:68:7d:e3:6c:b3:5f:e8:68:2e:
                    2d:7f:0d:fe:34:c3:41:1f:2e:86:c9:3a:93:8c:2d:
                    fc:a9:f7:23:8e:90:90:96:86:0c:10:f9:0e:a6:a0:
                    71:5e:24:af:3a:13:5a:e3:e9:92:f6:2f:31:de:51:
                    b6:20:12:b7:bf:31:ae:e9:43:12:04:49:48:9d:2d:
                    cc:9b:2c:53:04:9e:2d:c2:a6:da:99:20:87:bd:fd:
                    66:98:42:51:26:6f:d8:eb:a5:fb:ac:fd:d6:54:9f:
                    ed:86:c7:45:ff:c6:8d:a7:31:d9:65:fe:2e:42:c8:
                    3f:98:c3:21:8b:d2:d2:7c:a4:ec:79:99:5a:df:34:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:67:96:F0:16:2F:16:93:36:3A:DC:B3:B7:A6:44:2B:A8:F2:9A
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130372e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:2b:44:12:99:db:72:a0:af:14:94:3f:0e:0e:a9:f8:c5:e9:
         2d:c3:d4:f5:0f:31:55:30:1f:94:93:28:13:b6:e0:71:7a:be:
         1a:80:a6:66:8b:cd:d5:a2:65:f9:f0:6c:9a:50:da:c1:e7:6d:
         38:49:64:05:f8:3d:7f:76:24:22:7e:31:6a:0b:1e:98:70:65:
         5f:40:34:42:c5:03:ff:32:b9:d2:d6:ed:fe:64:cc:91:63:92:
         d4:bb:a0:1e:5f:d9:74:87:71:06:12:01:87:6b:b4:b3:66:34:
         bf:d6:10:5a:fe:f2:89:34:40:5b:4e:b0:e4:ba:80:e4:8d:55:
         b8:dc:cb:02:a1:58:dd:3b:b7:2c:2b:9f:74:9a:0d:02:f4:b9:
         8d:07:2d:8c:18:09:d8:5d:58:9b:62:b5:33:e7:86:6c:ef:eb:
         52:66:cd:91:55:69:6c:19:a0:50:37:dc:95:41:4a:30:7f:d2:
         ef:ee:19:51:30:29:2b:8c:e3:74:c0:c7:29:cf:47:89:d1:78:
         6a:1e:c9:84:3b:80:ac:dd:37:54:09:3a:89:04:36:4b:a7:ab:
         66:e9:fc:cd:7c:69:e4:83:95:81:69:f7:96:60:ce:85:08:41:
         b3:23:58:d6:70:3f:19:59:29:c2:84:02:b2:8c:25:4c:9a:37:
         67:ac:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org