Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa
File:                     3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa (raw, json)
Hash identifier:          hB8IpWnexh0uddjxCzpggT1AeMAHOl33F0PbRq+qlEM=
Subject key identifier:   C8:0E:2B:FD:34:71:9D:2C:1D:3A:6C:1D:A5:F0:2E:FB:E7:5E:F2:F9
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       1EB5593F6E13C47D1CE908D19EB979B54A0AAB18
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa
Signing time:             Thu 04 Apr 2024 16:23:04 +0000
ROA not before:           Thu 04 Apr 2024 16:18:04 +0000
ROA not after:            Thu 03 Apr 2025 16:23:04 +0000
asID:                     265311
IP address blocks:        168.121.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b5:59:3f:6e:13:c4:7d:1c:e9:08:d1:9e:b9:79:b5:4a:0a:ab:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Apr  4 16:18:04 2024 GMT
            Not After : Apr  3 16:23:04 2025 GMT
        Subject: CN=C80E2BFD34719D2C1D3A6C1DA5F02EFBE75EF2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:0f:33:b2:c3:1f:4b:75:64:a5:f3:ed:67:
                    95:e7:32:73:fb:e8:8e:88:e4:bc:e8:ff:01:e1:53:
                    e2:da:c5:c9:f6:15:1a:c9:3d:0b:bb:bb:19:76:4e:
                    7d:8d:ce:0d:6b:89:5c:ee:1e:50:60:96:b1:57:45:
                    c1:f7:5a:a1:f6:12:3b:27:20:ba:61:a0:fb:23:2f:
                    a9:e6:e9:7d:fc:32:be:28:a9:43:58:96:bc:ee:19:
                    40:8a:fa:07:b0:4d:5d:fa:06:04:b4:9c:eb:52:02:
                    88:7d:3c:1a:d2:5a:5f:c2:b6:6a:02:a8:fd:b2:ba:
                    0d:b9:f2:c2:6f:d7:37:e5:3a:c1:33:d3:cf:52:48:
                    5e:4f:f5:25:b3:a0:d3:ce:ad:d0:1c:1d:95:93:4b:
                    c5:1f:72:d5:d8:72:83:d5:57:e0:a4:d9:ca:f3:71:
                    1b:69:39:c4:59:d5:85:0f:b7:e9:f8:ce:0a:18:86:
                    4d:33:be:48:36:59:a8:5e:ce:e6:f1:01:7c:6b:10:
                    10:86:da:7d:b1:6d:29:45:69:49:e6:2c:b8:45:ff:
                    66:78:c9:4c:4d:85:58:00:5c:96:09:ae:91:8f:79:
                    05:05:a5:67:73:da:1e:4b:7d:89:ea:88:ac:e7:0a:
                    fa:6c:2c:14:b0:aa:74:2a:42:82:3d:69:58:64:1e:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0E:2B:FD:34:71:9D:2C:1D:3A:6C:1D:A5:F0:2E:FB:E7:5E:F2:F9
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/3136382e3132312e3131342e302f32332d3233203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:b8:f7:1b:77:27:03:bc:37:98:86:05:61:97:00:6c:18:
         64:07:8a:e0:9b:a7:cc:d8:72:e2:74:ae:f5:74:58:47:01:a3:
         fb:51:5e:3f:1f:c7:ee:4e:69:b9:aa:68:ea:d8:43:7f:78:8b:
         93:31:65:52:ac:ac:48:89:4b:e0:fb:3d:cf:8f:1b:85:2c:5f:
         a1:e7:08:19:ea:08:82:fc:43:bf:9f:86:1f:92:5e:ed:0e:bd:
         9e:b6:3c:fc:c7:7b:a5:a2:68:8a:99:8f:25:60:59:0c:04:26:
         a9:e4:a8:e3:75:cb:1b:0c:42:39:f5:03:07:2b:fb:cb:30:4e:
         b9:c6:af:f7:01:bb:53:44:fd:10:57:50:2d:d4:9f:19:6b:5e:
         9e:bd:da:40:b8:72:b7:fd:09:38:05:5b:7c:13:79:d7:0d:7a:
         1b:0f:5d:24:30:da:22:14:d1:f9:9c:e0:ba:8c:0e:79:61:26:
         b4:b4:6d:c2:4f:8a:db:21:fc:41:be:86:7e:16:fa:04:32:cf:
         ec:93:98:93:a9:11:3b:a5:51:27:7c:d5:cd:32:f1:9e:9c:56:
         fa:7d:27:a1:73:4d:49:14:7f:21:62:55:85:da:89:11:f3:c3:
         31:dc:51:17:35:53:36:43:3c:e2:e1:2d:67:71:39:a7:50:0e:
         ba:a4:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:14 2024 by rpki-client on console-fra.rpki-client.org