Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
File:                     3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier:          sho/fsyu/g+USQbuvjHBL5LuaYEwOoyAV+vNKzUpsoU=
Subject key identifier:   AE:DC:5D:D0:E2:D7:15:5C:8F:40:94:0B:8D:2D:73:2B:0C:D6:A4:6E
Certificate issuer:       /CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
Certificate serial:       5FFE5F2CB7577D02BE77FCA9C61AB054BD316701
Authority key identifier: 9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
Signing time:             Thu 04 Apr 2024 11:23:23 +0000
ROA not before:           Thu 04 Apr 2024 11:18:23 +0000
ROA not after:            Thu 03 Apr 2025 11:23:23 +0000
asID:                     52872
IP address blocks:        168.197.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fe:5f:2c:b7:57:7d:02:be:77:fc:a9:c6:1a:b0:54:bd:31:67:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
        Validity
            Not Before: Apr  4 11:18:23 2024 GMT
            Not After : Apr  3 11:23:23 2025 GMT
        Subject: CN=AEDC5DD0E2D7155C8F40940B8D2D732B0CD6A46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:89:da:8b:1a:ae:4f:7f:59:7a:e5:e7:3b:
                    29:b2:a8:37:77:1c:72:45:cb:ca:b9:9a:f5:4a:0a:
                    f7:b4:42:26:42:ad:f0:36:6a:a8:ec:05:78:63:42:
                    41:0a:ca:db:80:52:f1:49:f2:95:f8:e0:23:f6:d8:
                    56:af:10:79:df:b5:5b:38:8e:af:66:d3:55:9a:bc:
                    a3:60:39:81:f4:25:e0:57:4d:62:4c:38:b1:3d:94:
                    d1:54:ab:20:6a:bf:ce:eb:67:f0:1d:d3:d2:82:ad:
                    04:e6:57:5e:d3:c3:db:ab:cc:b3:e0:9f:cc:bf:81:
                    9d:11:ac:c9:e3:14:8c:94:93:77:7f:9c:d3:fa:9f:
                    fd:64:2d:50:01:dd:9a:28:52:ec:43:53:eb:43:7c:
                    9c:b9:8f:54:3d:3c:d9:82:f3:1e:49:42:bc:88:58:
                    c1:cd:cf:fc:d3:32:a8:17:86:d3:e6:b0:1e:cd:f6:
                    b4:64:c3:d7:ee:8b:b4:fc:db:7a:1f:a6:b0:51:fe:
                    80:1e:bf:3e:c4:f1:bb:09:44:1f:ab:27:40:c6:92:
                    f0:d7:bc:0a:57:bb:5b:32:93:24:8b:a3:73:28:a1:
                    cf:d1:3f:aa:c8:d7:88:4a:4f:e9:95:d5:02:c2:97:
                    04:68:67:37:38:4d:ba:7d:7a:51:19:43:c7:c7:cf:
                    1c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DC:5D:D0:E2:D7:15:5C:8F:40:94:0B:8D:2D:73:2B:0C:D6:A4:6E
            X509v3 Authority Key Identifier:
                keyid:9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:57:73:a1:17:be:b1:e8:a3:15:79:46:b7:ed:4b:51:88:ea:
         af:dd:a2:b9:60:4b:af:ca:43:bf:e8:33:91:fa:b9:61:6e:99:
         ea:3e:ad:b7:46:5c:c9:d4:fd:69:a4:ad:bc:73:d1:08:6b:a0:
         06:11:f5:cc:5d:3c:69:82:b1:ad:63:ca:4e:56:e8:ec:a4:cb:
         5f:0b:09:38:fc:74:f9:d2:6f:f8:4c:37:ee:0e:ce:ef:eb:bc:
         7a:6b:56:de:65:f0:61:83:11:68:18:fc:fa:cf:96:40:6f:3e:
         f8:08:55:15:f4:56:95:9e:bb:e6:ab:92:e0:3f:0d:81:b2:68:
         0b:80:f5:60:9b:ec:35:2a:58:e2:72:f4:36:68:20:fe:0a:78:
         ad:79:67:94:4f:d9:a0:32:a9:53:61:74:5c:27:3c:0c:40:87:
         91:fb:d6:4e:08:ed:a7:78:32:fb:0e:e0:b2:a0:e9:f8:49:16:
         6d:21:7e:af:d8:ca:a2:8d:c1:88:00:48:50:92:f9:d2:cd:64:
         bd:e7:99:e1:23:89:23:86:9a:7d:3b:07:08:b4:8f:6f:63:c4:
         cb:3e:c7:fc:8b:33:c0:bd:d7:78:25:ba:8a:2b:ca:7e:71:0a:
         74:db:3a:14:79:5e:57:29:ff:55:c1:2a:ac:23:98:af:4a:31:
         38:9d:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org