Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa
File:                     3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa (raw, json)
Hash identifier:          b1wdzfaBCdC/oWcaL+2cSovhq9LpyHIlfXH5EOFmg5c=
Subject key identifier:   E2:E6:17:63:CA:96:B0:95:96:B3:39:46:83:DE:4A:DF:05:C4:14:DA
Certificate issuer:       /CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
Certificate serial:       681992304508A5B9201841B24B9F91484AAF7A0E
Authority key identifier: D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa
Signing time:             Thu 04 Apr 2024 01:58:14 +0000
ROA not before:           Thu 04 Apr 2024 01:53:14 +0000
ROA not after:            Thu 03 Apr 2025 01:58:14 +0000
asID:                     267463
IP address blocks:        192.141.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl
                          rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:19:92:30:45:08:a5:b9:20:18:41:b2:4b:9f:91:48:4a:af:7a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
        Validity
            Not Before: Apr  4 01:53:14 2024 GMT
            Not After : Apr  3 01:58:14 2025 GMT
        Subject: CN=E2E61763CA96B09596B3394683DE4ADF05C414DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:96:86:b5:da:58:49:b3:3a:65:a3:6a:c1:
                    2f:95:86:95:8b:f8:f2:37:54:11:77:65:ea:ea:dc:
                    01:f3:12:1f:cf:b3:6b:32:c3:03:0b:37:ca:8a:8e:
                    d2:21:af:d6:e7:d5:d0:f1:b2:be:31:b1:06:b2:af:
                    e0:97:22:59:40:3b:a3:b9:48:74:d0:38:68:fe:c6:
                    21:16:66:94:b6:00:01:55:42:da:ed:f8:12:97:83:
                    fa:31:51:28:25:15:44:b0:15:84:8a:33:ee:9e:87:
                    28:d2:8e:be:b4:dd:a8:26:32:c6:07:5f:ba:e9:db:
                    dc:b5:70:57:d8:b2:a3:e9:d4:b9:65:37:7a:d7:3b:
                    34:c0:14:3e:64:23:3c:e6:15:2c:43:87:8d:38:8f:
                    f9:ac:97:a1:1b:2b:bf:45:9b:93:15:27:73:0c:e6:
                    5b:51:9f:6c:d9:42:1e:54:58:8c:42:c7:ed:e6:8e:
                    10:8f:cb:cf:35:45:99:02:84:e4:64:8e:f3:f1:b7:
                    50:34:b8:58:8e:25:ce:cb:0a:c8:2e:8e:47:d9:0a:
                    ee:49:4b:87:14:96:ed:80:94:7d:80:41:c1:e2:a3:
                    8e:56:5d:10:15:0b:9c:6e:57:2b:82:8a:bc:fe:c7:
                    ef:44:aa:55:72:a3:61:e7:a2:c9:eb:79:a9:f3:91:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:17:63:CA:96:B0:95:96:B3:39:46:83:DE:4A:DF:05:C4:14:DA
            X509v3 Authority Key Identifier:
                keyid:D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:76:a9:af:ba:6d:1e:05:2b:22:07:d5:9f:44:cb:42:82:8d:
         c7:eb:49:0f:f1:26:7c:5e:94:d3:e2:ad:99:c2:2f:55:13:d3:
         2d:61:20:d5:bb:a1:93:ef:ed:ac:cd:35:2f:5c:ef:45:39:f9:
         aa:bb:aa:53:13:88:3e:10:5b:58:9a:c7:59:12:b4:6d:5f:60:
         ab:e4:fa:a3:8b:9a:5e:53:74:39:46:1f:c7:17:18:ac:ff:1c:
         05:f4:6d:01:13:36:9c:18:9a:a1:5a:f2:a1:e7:95:e8:ac:4a:
         20:55:6c:3f:17:d7:46:17:d3:57:51:e2:47:83:c3:b3:5b:6e:
         2c:bd:40:af:2a:32:fe:39:7b:68:5a:14:93:59:7b:22:2d:2a:
         36:80:10:ee:2c:5f:9f:59:e8:e7:b9:4b:c6:b8:6b:fc:a1:d9:
         db:e8:f8:53:a1:8e:39:3f:ca:78:4c:82:f5:ca:a8:c2:d2:c3:
         a7:eb:7c:a4:a3:a9:c2:8d:71:cb:c8:bf:ea:a0:68:ac:c0:18:
         96:e0:7c:f7:33:69:ee:f2:b6:07:0c:00:f3:0d:e4:30:8e:b9:
         c7:73:f3:09:50:d0:86:6b:97:5f:c6:aa:40:f4:08:5f:08:63:
         4a:73:81:41:32:6a:ce:44:20:a7:93:e5:6e:89:ac:72:19:fe:
         1a:02:76:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:14 2024 by rpki-client on console-fra.rpki-client.org