Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa
File:                     3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa (raw, json)
Hash identifier:          9p/nnVoWEz4qRTmy+4vhw5J0AEXs1fmd2Dzyzuov3RA=
Subject key identifier:   AD:48:5A:5C:D0:06:1A:85:83:26:CF:2C:80:1E:AC:FE:EE:FE:1E:17
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       3FFF311624B5EED3090A2BFCF351B4E2CE8EEB0C
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa
Signing time:             Thu 04 Apr 2024 10:06:20 +0000
ROA not before:           Thu 04 Apr 2024 10:01:20 +0000
ROA not after:            Thu 03 Apr 2025 10:06:20 +0000
asID:                     263289
IP address blocks:        177.190.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ff:31:16:24:b5:ee:d3:09:0a:2b:fc:f3:51:b4:e2:ce:8e:eb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Apr  4 10:01:20 2024 GMT
            Not After : Apr  3 10:06:20 2025 GMT
        Subject: CN=AD485A5CD0061A858326CF2C801EACFEEEFE1E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b4:bc:15:7b:b6:d9:92:f3:15:b1:1e:f9:83:
                    ac:58:0d:1c:a0:cf:ad:b5:88:54:d8:ca:7b:44:d2:
                    64:7b:a6:b9:df:2b:64:78:e0:41:29:ff:2a:26:a9:
                    da:40:f3:c2:ef:99:3b:5f:2c:8f:e9:4f:58:9c:d9:
                    1c:aa:14:37:64:94:27:f7:a3:bb:b3:19:2c:24:c8:
                    77:5b:ea:e5:e9:94:db:c8:b4:f7:07:ec:a5:34:ec:
                    80:14:28:07:37:9f:e7:a6:31:74:58:c2:e0:3b:3e:
                    78:72:12:92:e1:c6:f9:34:35:ea:39:4a:46:e0:b1:
                    ca:35:d8:68:e9:91:1d:60:28:27:d2:3c:c5:23:90:
                    e6:e0:5a:3c:15:ef:8d:5b:46:47:c3:8b:a7:e4:9f:
                    d3:c9:4b:f2:cf:67:71:72:1a:14:95:c8:50:1a:9b:
                    ef:1a:d1:33:aa:bf:f0:c4:c7:d0:4a:47:b2:d6:78:
                    77:48:f6:3f:15:df:7f:ef:20:7b:ae:ad:c8:ce:a6:
                    e5:f3:45:59:3e:e7:c1:89:5b:fa:31:c8:f8:88:3e:
                    b8:3e:54:5b:c1:d0:d8:2c:46:9e:aa:22:d1:0c:2d:
                    b6:29:4e:ff:41:eb:84:54:d6:da:6c:af:c1:60:39:
                    ba:96:33:7b:eb:87:4a:d0:3c:7b:51:95:63:fb:b3:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:48:5A:5C:D0:06:1A:85:83:26:CF:2C:80:1E:AC:FE:EE:FE:1E:17
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36382e302f32332d3233203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:c8:f0:0a:ac:ff:15:0d:39:2a:e4:0d:ea:ed:ea:e0:d2:
         08:cb:06:aa:7d:e2:ab:0d:e9:47:15:b7:1e:45:8e:0e:10:e3:
         a7:93:82:2c:9c:21:3a:0d:66:e8:54:a8:c1:0d:cc:20:ec:13:
         3a:93:1a:75:32:50:71:58:99:01:af:e0:15:0d:b6:08:18:92:
         6d:7e:58:ee:c6:a4:ff:59:9f:72:59:66:39:f5:46:5e:65:15:
         4d:82:11:26:bb:1a:7f:da:7a:da:7b:b8:09:6b:d8:47:6a:b0:
         08:04:ea:b9:5b:b5:83:f0:94:6d:9d:03:27:09:93:b8:12:0e:
         18:4a:8f:0c:11:f0:e4:72:96:61:9f:8a:c4:fc:84:21:0f:fe:
         81:43:08:49:55:f5:cc:c9:fa:83:08:7e:2a:0d:5f:a4:e3:a1:
         2d:ee:e2:19:75:f1:1f:b7:45:75:c6:ef:3f:69:61:40:ad:05:
         1d:03:6d:8a:29:88:15:22:81:6c:1e:ac:33:81:60:93:e9:e7:
         fe:ce:b1:4c:1c:f0:e1:fa:90:4d:68:d4:b1:ca:79:52:7b:e7:
         60:ca:6d:43:cb:bb:c6:e4:ed:2b:85:53:fd:b1:92:b9:36:e2:
         08:85:e2:da:46:ef:07:10:7b:5c:2c:02:cb:69:39:aa:d8:ce:
         8a:a0:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org