Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          qgMtS2465BNCX6wD/DlAR8tStLlzvt7LypnU/px6JHg=
Subject key identifier:   89:6D:B2:03:58:E3:58:DF:CA:A1:80:92:D3:1D:05:D9:CB:DB:19:DA
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       6F1274F0836F3CA56F927FAC2136F3808D8293A0
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        168.227.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:12:74:f0:83:6f:3c:a5:6f:92:7f:ac:21:36:f3:80:8d:82:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:7e:3b:46:4b:43:61:60:5f:2b:90:39:c1:
                    b6:e7:26:6b:36:45:0c:7d:ab:84:d0:d4:bc:4e:a4:
                    03:02:35:d6:6b:98:a7:48:fc:38:76:d0:99:b4:0a:
                    c2:2f:83:a0:93:1c:69:ef:ce:11:f6:c9:27:6c:d2:
                    ce:e6:65:75:f4:1e:c6:2d:cd:f1:af:32:24:07:89:
                    7c:5b:62:c5:c9:07:67:a0:1f:b8:e0:b5:a4:3d:3d:
                    74:26:b2:02:44:92:90:41:a1:4e:b1:a4:71:00:24:
                    d3:cf:3f:bf:5b:01:84:9f:f6:9e:2a:bb:49:78:d0:
                    89:cb:85:cc:36:e3:4b:25:86:10:51:0b:a0:67:fe:
                    9c:02:91:53:fa:4b:14:57:a7:c9:b0:c1:de:fb:f5:
                    2a:81:18:b8:30:f7:b4:14:d9:39:8d:5b:2e:54:16:
                    00:5c:24:e4:d1:fb:64:3b:2a:21:95:37:fa:29:ed:
                    1d:a0:5e:54:18:7d:0b:65:05:30:91:d3:29:90:50:
                    94:fa:f4:f7:81:dd:77:fc:55:fc:d9:b1:ff:6a:99:
                    3d:4f:72:9b:a7:b7:ca:a0:0b:33:fa:24:56:b8:70:
                    db:61:64:11:01:15:04:86:73:45:d1:99:a0:e0:55:
                    fc:81:0a:9b:24:af:7a:76:68:b7:bc:04:66:13:a3:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6D:B2:03:58:E3:58:DF:CA:A1:80:92:D3:1D:05:D9:CB:DB:19:DA
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230392e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:ff:b6:42:38:f6:bd:77:a1:88:a7:a9:5a:1d:98:f4:80:
         85:c2:56:cd:5a:d6:90:13:12:94:c9:d4:02:63:6a:cc:8f:d9:
         b9:11:60:1c:8c:0a:97:ca:48:39:bb:3f:b5:b2:1a:fd:ee:7e:
         d0:40:f6:26:da:6d:45:21:60:d5:19:53:85:b2:ec:3f:a6:bd:
         08:27:29:d6:52:a0:1e:e4:1d:79:03:bd:40:a3:b9:ba:d5:a7:
         65:02:6a:df:20:1c:6e:62:d9:ec:5f:e9:e3:4a:5c:84:cc:7c:
         d0:de:24:ad:d7:96:a0:0c:dd:43:39:f3:21:17:2a:cc:34:54:
         4a:e6:f8:80:93:f5:bd:83:b3:b9:06:ea:d6:5a:50:6f:f6:04:
         e6:be:cd:81:2f:ed:d6:a9:8b:87:d7:64:aa:bb:44:d9:41:72:
         52:c2:57:7f:94:82:b4:24:64:50:20:79:5d:88:d7:84:5c:51:
         65:52:4d:6d:52:09:2a:0d:3e:9b:36:fe:1e:0a:e5:0e:b2:a7:
         d5:a9:ca:05:e2:05:66:d5:5f:bd:9a:72:90:0c:99:bc:8a:fa:
         2f:91:11:e8:a5:12:8f:f7:ea:b8:fd:c4:99:c2:89:76:f1:45:
         d0:29:27:95:76:96:98:83:48:5a:b1:54:11:25:9c:21:05:41:
         54:6c:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org