Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
File:                     3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          gI34WFduoo8O9Cd73UUDU7zPgn8z1vyRtk3Z9bcJNZg=
Subject key identifier:   2C:74:4C:05:0C:2E:3C:8B:53:CF:01:A4:3D:A1:AB:B7:74:1A:7C:7D
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       3B5AA6D9748975B41D73BDC52B989C40D3B21CC5
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:20 +0000
ROA not before:           Mon 09 Sep 2024 14:55:20 +0000
ROA not after:            Mon 08 Sep 2025 15:00:20 +0000
asID:                     28270
IP address blocks:        168.232.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5a:a6:d9:74:89:75:b4:1d:73:bd:c5:2b:98:9c:40:d3:b2:1c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:20 2024 GMT
            Not After : Sep  8 15:00:20 2025 GMT
        Subject: CN=2C744C050C2E3C8B53CF01A43DA1ABB7741A7C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:13:95:2a:ac:bd:af:7f:99:bb:a0:bf:3f:
                    35:5b:ad:1c:7e:19:19:c7:6c:df:4d:6c:c9:92:1f:
                    25:ac:15:cb:2c:77:83:3c:b6:de:43:a4:4a:8a:94:
                    57:b8:f7:b2:d6:8a:8b:c6:a5:d6:50:87:87:e9:53:
                    b7:15:32:8f:c5:3f:16:a4:96:7b:25:65:f4:03:5f:
                    53:e6:a7:be:ff:9e:14:f4:9c:bb:99:99:4f:ba:eb:
                    c1:37:ef:94:b6:5a:3b:df:ba:fe:29:af:6e:0b:47:
                    dc:3a:98:80:31:75:e5:06:1e:c4:81:c6:d2:4e:23:
                    87:48:53:76:90:61:ea:05:99:09:d0:d1:e3:44:75:
                    1e:b1:16:00:5a:48:f9:b0:80:a6:49:db:f2:39:43:
                    38:9e:c7:b2:50:60:e7:6e:aa:ed:e0:f6:e6:e5:f3:
                    aa:34:af:c1:5d:f4:3b:cb:3d:8a:c2:66:00:64:20:
                    7a:5b:39:02:77:28:25:d9:2e:3d:2b:2a:8c:fc:6c:
                    4f:63:29:7c:f9:1a:8e:0e:ee:5e:38:91:ae:71:b9:
                    45:be:19:df:78:53:6e:28:95:73:35:75:ac:57:44:
                    72:52:ff:40:bc:59:67:b0:3a:07:0a:84:cf:83:73:
                    09:7e:9e:d6:87:0c:2a:cc:22:c0:b0:2e:d8:68:31:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:74:4C:05:0C:2E:3C:8B:53:CF:01:A4:3D:A1:AB:B7:74:1A:7C:7D
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:8a:63:ef:99:59:71:75:f8:4d:5c:3f:3d:bf:22:7e:cc:
         5c:c3:73:b1:1d:db:bc:f1:e3:89:d6:7f:f2:ae:e3:8c:95:8e:
         ee:47:15:47:69:b6:ce:b4:3a:b8:a6:1b:22:0e:30:05:e7:b8:
         9c:30:23:de:ac:a7:8c:eb:d4:f9:ba:82:42:bb:e5:85:9d:61:
         a8:4b:85:a6:89:5c:13:aa:96:df:aa:45:c5:7c:8e:9e:48:ce:
         78:f8:ea:73:9b:7a:ee:49:4e:37:ff:17:89:cc:02:c8:f7:9d:
         c2:bc:d7:67:89:cf:ab:dc:04:9b:da:76:c7:c5:03:87:6b:63:
         c7:78:04:59:ed:c4:b2:b1:51:16:af:97:41:47:53:1b:b0:d8:
         b0:39:72:68:15:01:3d:66:69:7e:e3:db:03:6d:af:04:d3:86:
         ee:0f:a4:b5:52:68:15:7f:a6:6d:da:2a:d4:00:fd:c6:b0:40:
         36:2a:d1:d5:d9:df:64:44:89:8e:56:4d:a6:4a:fe:4a:7e:e7:
         3c:7e:ea:31:38:e1:66:ff:bb:4a:10:3b:8e:13:79:2a:55:ff:
         c1:82:cc:da:4a:0c:01:56:9d:b3:4d:d3:8e:24:51:ab:1d:fc:
         a7:70:25:17:54:0b:bd:91:e6:30:f4:c7:36:5e:b0:d0:45:53:
         d0:3c:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org