Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa
File:                     3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (raw, json)
Hash identifier:          VuTstlvyXB0xubrHOn9THXqFwl6iEdrk6cax5iMfwMY=
Subject key identifier:   9C:39:C2:82:0C:A3:71:95:52:E3:E2:B5:7A:81:1A:09:92:1C:5F:BB
Certificate issuer:       /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
Certificate serial:       1EA9BAA960DA0CE2AED0D065CFF8210D54F9AFBA
Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa
Signing time:             Thu 04 Apr 2024 16:59:53 +0000
ROA not before:           Thu 04 Apr 2024 16:54:53 +0000
ROA not after:            Thu 03 Apr 2025 16:59:53 +0000
asID:                     265420
IP address blocks:        168.195.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl
                          rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a9:ba:a9:60:da:0c:e2:ae:d0:d0:65:cf:f8:21:0d:54:f9:af:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
        Validity
            Not Before: Apr  4 16:54:53 2024 GMT
            Not After : Apr  3 16:59:53 2025 GMT
        Subject: CN=9C39C2820CA3719552E3E2B57A811A09921C5FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:b8:95:4d:1f:ff:f6:8c:3b:1f:62:25:58:
                    ed:02:c1:fa:f4:fe:b9:8c:db:61:88:d0:e1:9d:06:
                    cb:ab:2e:23:20:bc:6e:2a:f8:c7:c7:3c:5b:db:18:
                    3b:03:d6:17:d3:d5:79:90:83:66:8e:c1:c2:b3:04:
                    0b:34:c1:ac:6d:d1:9d:32:8b:9a:a6:69:c6:c8:c6:
                    0a:eb:12:f5:0d:8f:bd:63:58:3d:98:18:4e:92:6e:
                    28:b5:39:36:4e:73:91:33:de:42:b3:48:0e:62:56:
                    39:df:26:00:df:a8:45:dc:e9:74:f2:01:ca:0b:5d:
                    c0:63:82:b2:61:49:ae:de:6f:7b:d5:46:37:fc:d9:
                    32:35:a4:fa:d9:65:2a:45:f8:8d:ba:92:29:4b:be:
                    05:45:89:2e:80:c0:72:f0:a9:b8:66:cf:77:0a:cf:
                    52:15:97:45:57:3b:a9:7c:06:93:f6:eb:d8:d2:da:
                    c8:9e:e6:aa:1d:30:55:51:0c:e0:9d:41:1c:45:67:
                    60:77:8b:55:eb:7d:0a:81:1b:bc:81:d7:23:86:e4:
                    04:f7:a0:09:bc:e5:7d:d6:e4:8b:fb:ab:13:2c:fa:
                    ec:bb:9e:24:45:41:71:76:cc:77:07:8a:a5:8d:c3:
                    52:f6:25:22:62:41:08:3a:1c:95:ca:b0:bc:d9:05:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:39:C2:82:0C:A3:71:95:52:E3:E2:B5:7A:81:1A:09:92:1C:5F:BB
            X509v3 Authority Key Identifier:
                keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:1f:6d:4b:91:f4:1f:a3:4d:2c:4e:71:46:55:b1:f3:83:
         a1:42:2f:32:07:8d:81:58:20:73:dd:8d:3e:de:35:1e:bb:61:
         01:71:31:2e:5e:f0:61:06:69:72:a8:2d:56:ff:9c:ff:7b:33:
         d4:88:ea:63:ca:a5:04:75:75:36:a3:18:b5:02:7e:18:f8:16:
         d0:fa:91:a8:5c:18:7f:7f:4f:e8:7a:f3:72:12:33:9c:9d:f1:
         8b:ed:3c:76:91:d6:ba:ba:67:1d:ba:f3:4c:c0:fc:57:5c:50:
         b8:4d:84:10:5d:0b:5e:50:17:7c:74:81:97:a2:f6:91:80:f4:
         8c:1d:e5:8c:f3:d1:32:16:01:d0:2b:95:59:8e:d8:80:40:95:
         d3:84:3e:dd:fb:1b:6e:65:db:a1:a4:52:f6:37:f8:c0:62:73:
         d5:ba:ff:77:d1:eb:24:7d:28:bf:24:81:9e:3a:05:f2:61:4f:
         e5:ea:58:cf:22:28:d9:ad:9d:cf:36:2b:b7:37:44:e8:f0:9e:
         49:3e:f4:d5:f1:a6:6b:7f:21:5b:1a:49:e6:50:dd:7b:bc:d1:
         bd:a1:66:70:20:e3:79:a2:95:33:2e:75:21:85:a9:04:50:29:
         99:79:9d:b5:d3:f3:ca:4d:91:62:83:08:12:17:4d:9a:1e:91:
         9a:98:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org