Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa
File:                     3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa (raw, json)
Hash identifier:          mbBXnJsPDlEzxK1DC6SLyPK3ANcJaxQBJKXOsoDLGdg=
Subject key identifier:   6F:8C:9B:87:FF:30:68:EC:95:4B:74:5F:8D:7B:36:CE:9D:01:2F:01
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       62E3C84D5BA4C6D99EE58054BCB67439E8988CC8
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa
Signing time:             Thu 04 Apr 2024 10:06:20 +0000
ROA not before:           Thu 04 Apr 2024 10:01:20 +0000
ROA not after:            Thu 03 Apr 2025 10:06:20 +0000
asID:                     263289
IP address blocks:        177.190.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e3:c8:4d:5b:a4:c6:d9:9e:e5:80:54:bc:b6:74:39:e8:98:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Apr  4 10:01:20 2024 GMT
            Not After : Apr  3 10:06:20 2025 GMT
        Subject: CN=6F8C9B87FF3068EC954B745F8D7B36CE9D012F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:7d:35:2b:00:08:f8:4f:1f:48:72:83:7f:
                    a6:5b:e3:da:ed:1e:9a:89:68:8e:d9:e7:61:fa:ae:
                    c1:43:99:9a:07:4b:7a:60:9a:1b:de:af:9a:32:4e:
                    f0:8b:60:96:aa:18:6e:58:9e:44:52:40:b0:73:51:
                    3f:6c:f0:1f:c5:d3:c3:86:df:f4:1c:6b:23:93:e7:
                    ae:10:44:6a:d5:35:35:db:7d:6d:44:61:35:a0:b0:
                    44:c2:af:b7:70:b4:1c:e4:4b:7a:b9:48:dc:fb:ba:
                    95:60:e2:d6:0a:0c:30:0c:b6:3b:b4:50:36:9c:3f:
                    88:bd:82:76:5b:bc:00:b5:7c:cc:c0:4a:ef:9f:cf:
                    03:d6:54:d6:07:42:b7:1f:41:44:1c:22:1e:0b:ad:
                    b4:0e:57:64:b4:78:ce:ae:0e:9d:5d:a9:af:fd:43:
                    c5:f3:03:da:db:b5:63:71:64:85:13:bc:a2:cf:16:
                    e1:a1:8f:ff:01:7c:7d:44:1a:4f:28:6f:d4:6d:3a:
                    86:83:eb:1b:9c:3f:53:41:44:d6:ac:4c:14:ae:e0:
                    6d:c1:41:33:1e:4b:00:a4:f9:49:4d:82:8e:46:89:
                    86:84:bd:ec:77:f0:9f:9e:c1:d5:df:b4:fa:09:52:
                    63:26:63:a3:43:e2:eb:de:a9:48:03:97:67:72:7a:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:9B:87:FF:30:68:EC:95:4B:74:5F:8D:7B:36:CE:9D:01:2F:01
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36382e302f32322d3232203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:c0:d1:98:67:aa:2a:09:91:77:78:44:e7:9d:b2:76:fd:
         a8:18:74:cf:72:85:a4:86:20:42:83:f2:89:2e:3e:f6:75:eb:
         9c:f4:dd:9d:a3:67:8d:88:c1:15:a1:3a:cf:c4:b0:19:2c:24:
         3b:f8:e3:17:07:0d:a2:03:6f:ca:98:a2:2a:74:2e:0e:92:75:
         72:d8:00:a5:63:dd:18:44:c1:76:41:18:ef:75:50:e1:b3:8f:
         ca:34:ba:3b:ea:df:72:1c:06:da:85:8d:0f:d1:e3:f0:3d:3e:
         c1:fb:6d:9f:9e:de:c5:76:df:d4:7d:b3:d7:d8:22:fb:c1:3f:
         f5:ad:28:87:c3:58:3e:cf:4b:20:45:d6:fc:8c:3e:31:c3:eb:
         43:9b:58:5d:1f:e1:54:63:fb:60:5e:80:0e:31:46:73:f0:d1:
         01:53:3e:e6:5d:d1:5d:85:c3:8b:d1:0d:a7:a7:9d:1c:a2:44:
         ad:d1:b9:8d:e4:ea:7d:c6:7a:4b:c7:66:b0:1f:f9:44:44:4f:
         94:d7:e0:fe:a7:35:fb:9b:a6:4e:8a:71:67:ac:0d:32:ab:46:
         31:78:89:ac:45:f4:08:ea:ff:92:1f:a8:eb:ba:f2:94:5f:eb:
         8c:36:2f:6b:4f:04:45:b8:ba:19:f6:be:d9:1e:8e:84:e9:93:
         86:14:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org