Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa
File:                     3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (raw, json)
Hash identifier:          PjQGJUWihAQ7N/aXUdaxuB/EmeJAI8ZLFzgCDvLqvvo=
Subject key identifier:   47:8A:1B:5B:F6:FC:4C:45:84:DE:3D:22:EA:A5:0D:A8:B0:C3:E9:77
Certificate issuer:       /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
Certificate serial:       5CBD5096FAAB8534F172E293D016E23955DF61DD
Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa
Signing time:             Wed 03 Apr 2024 19:45:52 +0000
ROA not before:           Wed 03 Apr 2024 19:40:52 +0000
ROA not after:            Wed 02 Apr 2025 19:45:52 +0000
asID:                     266154
IP address blocks:        192.140.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bd:50:96:fa:ab:85:34:f1:72:e2:93:d0:16:e2:39:55:df:61:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
        Validity
            Not Before: Apr  3 19:40:52 2024 GMT
            Not After : Apr  2 19:45:52 2025 GMT
        Subject: CN=478A1B5BF6FC4C4584DE3D22EAA50DA8B0C3E977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:ef:0a:d4:9d:d5:ff:65:e4:b6:38:9b:59:
                    f3:b3:82:90:a4:88:5e:2a:af:b3:af:54:9a:82:77:
                    c3:c8:a4:83:f8:31:85:55:e9:f9:c4:bd:fa:2e:c8:
                    6d:81:fe:d1:bd:b8:6a:db:da:cb:6f:9f:3b:a7:ac:
                    29:f3:22:b5:26:7d:c5:e8:ac:36:11:6a:cd:0e:5b:
                    cb:fc:92:1b:cf:5f:5c:fb:23:7b:52:a1:9d:9e:c8:
                    ed:61:38:4f:11:ae:91:12:92:1f:96:b9:4c:26:32:
                    2f:a4:53:ac:3b:be:08:66:b8:3b:7e:73:34:8f:d6:
                    43:74:b0:38:35:46:95:83:d3:0c:c4:d5:ef:71:cf:
                    aa:b3:ad:62:4c:31:de:de:68:19:f3:c6:0f:8d:3d:
                    5a:e0:a8:27:79:44:6a:48:cc:f1:2a:4e:fa:00:80:
                    de:c4:89:3c:60:5e:3c:9d:26:eb:59:6a:87:23:eb:
                    c0:73:9c:f2:78:0f:24:0a:1b:ba:8e:7a:12:d3:be:
                    b8:00:00:c4:90:1e:b4:41:42:3c:f0:2e:36:55:36:
                    4c:de:7b:4c:42:d0:d7:a2:9d:e1:07:06:01:5f:96:
                    dd:18:23:4f:15:64:84:7c:85:89:2e:a6:41:c9:b0:
                    92:2f:ac:4d:19:35:8a:62:12:c4:b2:5d:bb:a4:5c:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:1B:5B:F6:FC:4C:45:84:DE:3D:22:EA:A5:0D:A8:B0:C3:E9:77
            X509v3 Authority Key Identifier:
                keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c3:eb:df:3b:7c:9d:38:4e:e7:78:f8:59:c3:0d:54:01:ac:
         b0:f5:cb:b8:c3:9f:eb:97:e5:86:df:50:aa:bc:32:9c:bc:ec:
         26:60:ee:60:c5:c7:be:21:86:9c:f0:5b:ad:74:e2:6d:90:1d:
         06:78:b7:fd:bf:1e:a3:45:7a:a8:08:6d:f3:14:f0:8e:78:51:
         5e:db:df:93:f1:db:68:e1:eb:4e:40:5a:af:4b:61:a4:ff:64:
         7e:01:53:67:11:fb:de:3e:98:fd:bd:ad:08:1b:8e:37:bc:32:
         54:c6:ea:72:47:33:11:c7:75:22:e5:0a:00:9d:65:6f:14:e7:
         41:ff:16:f8:3e:5e:e4:a1:0b:c4:fd:74:3a:d1:a4:d5:05:c8:
         db:04:56:f4:9a:b3:00:df:7d:fe:9b:37:30:cc:c3:8b:50:70:
         df:be:dc:0e:dc:e9:24:62:f4:a0:2c:9d:af:ca:56:c5:d0:48:
         f6:70:57:e7:88:44:d7:4a:ef:6f:ae:7f:7f:7d:46:fe:a7:9d:
         ab:44:ca:01:6d:ac:68:4e:57:bd:d2:f2:e6:70:1f:ab:ef:49:
         62:e5:82:72:a9:83:6c:cf:3a:57:e3:f1:46:c9:37:7a:70:19:
         f0:76:1b:b8:55:56:91:60:a9:09:69:81:8c:fb:98:90:1e:0d:
         62:2c:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:02 2024 by rpki-client on console-ams.rpki-client.org