Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
File:                     3136382e3139352e302e302f32332d3234203d3e20323635343130.roa (raw, json)
Hash identifier:          oBEZustU0rUVnpcJYxR2GPNgS2323faFfa0zuWRvf0A=
Subject key identifier:   86:64:75:8B:6D:E9:51:53:82:DC:7F:4C:02:01:74:05:02:E2:25:05
Certificate issuer:       /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial:       630A02BB4042506D3024CEEAEDF1D114E5070285
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa
Signing time:             Thu 04 Apr 2024 16:32:58 +0000
ROA not before:           Thu 04 Apr 2024 16:27:58 +0000
ROA not after:            Thu 03 Apr 2025 16:32:58 +0000
asID:                     265410
IP address blocks:        168.195.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
                          rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0a:02:bb:40:42:50:6d:30:24:ce:ea:ed:f1:d1:14:e5:07:02:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
        Validity
            Not Before: Apr  4 16:27:58 2024 GMT
            Not After : Apr  3 16:32:58 2025 GMT
        Subject: CN=8664758B6DE9515382DC7F4C0201740502E22505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:06:d9:20:24:9c:02:24:08:fa:24:26:72:
                    7f:41:0f:4b:67:dd:c4:82:da:36:b6:6a:36:7a:18:
                    d8:94:d4:34:b8:23:b5:06:dc:9e:f4:87:99:f0:d7:
                    bb:02:a0:56:cc:4a:a8:6a:df:70:4b:fa:5d:fa:7b:
                    46:be:b5:8b:2f:4e:06:0a:b4:2e:54:e6:26:99:a9:
                    d5:28:72:0d:9b:30:dc:67:03:56:dc:67:8d:35:b2:
                    fe:31:78:89:f4:e3:1b:14:f1:7a:c4:f9:a6:a2:52:
                    5d:19:f2:72:d8:00:f7:5c:09:a4:0c:cc:82:4d:39:
                    c1:19:10:61:4d:58:4c:da:ad:be:62:8a:e0:3f:e4:
                    9f:85:ad:0c:0b:8a:db:6a:7b:df:ab:69:7a:f2:23:
                    a8:6f:1d:5d:12:0f:a9:95:65:56:46:7a:56:6c:98:
                    97:67:0b:a3:dd:1d:42:b0:57:6c:91:06:50:5a:44:
                    ef:cd:96:c3:d3:23:c5:4a:16:4e:1c:8f:08:ed:60:
                    5b:ee:4a:a3:2a:44:b7:09:71:a5:32:81:2c:9d:e2:
                    9f:d7:b2:34:b6:9f:da:39:c8:cf:07:ae:62:a0:ed:
                    ea:34:77:50:e1:56:06:dd:60:08:b4:b5:09:91:f2:
                    2a:35:df:ef:11:79:b9:73:75:20:42:55:f6:8f:13:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:75:8B:6D:E9:51:53:82:DC:7F:4C:02:01:74:05:02:E2:25:05
            X509v3 Authority Key Identifier:
                keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e302e302f32332d3234203d3e20323635343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:5f:21:10:2e:57:98:7f:3f:77:ae:1a:07:e5:43:15:4d:d9:
         96:cd:04:ba:20:0f:07:6d:cd:b8:69:aa:00:1f:65:45:97:ad:
         d7:1d:fb:b7:7a:c9:18:d3:b9:dd:44:4c:a8:c5:47:20:45:09:
         ab:39:f6:06:df:25:22:c8:74:61:c6:00:a7:26:ef:d5:64:c7:
         71:92:38:a4:68:1e:ac:13:b7:ed:19:e8:ea:32:ed:6a:26:d5:
         f9:98:75:9c:34:5f:7b:7e:b8:6a:6b:2f:a4:65:ac:67:be:4c:
         61:a3:7a:72:13:8b:79:be:82:87:9d:a2:c7:11:88:bc:cc:ac:
         f5:6d:0c:9a:a4:76:32:9c:bd:39:bd:72:30:e5:bf:cc:b9:3e:
         04:50:58:33:93:87:31:f7:d3:d7:28:d9:d2:bb:1f:8d:3e:2e:
         3b:65:0a:30:bb:01:57:74:f4:80:c3:b0:01:23:cc:9e:31:4c:
         cb:92:b9:76:ce:a1:eb:8a:40:44:d7:ce:09:3e:2e:09:ce:a8:
         47:1e:8f:c7:ea:a0:41:64:ff:20:2e:6d:e5:c5:bd:bd:d7:45:
         03:30:50:5d:43:98:0e:f3:d0:08:47:3b:99:ff:2b:9b:b2:06:
         53:a0:bc:0a:6c:47:fe:82:ce:85:db:4a:6a:18:fc:98:16:0c:
         ce:71:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org