Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (raw, json)
Hash identifier:          OWA2DI/lE4Nx5/JNov3fpL8MncJhQwD4iLMrZCagcIc=
Subject key identifier:   C4:88:09:5C:D7:66:E4:A7:58:44:2D:B2:64:84:80:FC:24:18:CC:93
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       42104BA064BAB03809B8C2312BC5B339CD234234
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa
Signing time:             Wed 03 Apr 2024 18:31:01 +0000
ROA not before:           Wed 03 Apr 2024 18:26:01 +0000
ROA not after:            Wed 02 Apr 2025 18:31:01 +0000
asID:                     265425
IP address blocks:        168.195.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:10:4b:a0:64:ba:b0:38:09:b8:c2:31:2b:c5:b3:39:cd:23:42:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr  3 18:26:01 2024 GMT
            Not After : Apr  2 18:31:01 2025 GMT
        Subject: CN=C488095CD766E4A758442DB2648480FC2418CC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:92:4c:c8:2e:6c:2d:f8:48:6d:6f:85:a4:
                    68:81:bd:cf:72:89:46:02:74:1d:b7:5f:a0:aa:16:
                    d2:37:ca:a7:fd:84:61:30:8e:ca:e8:12:8b:2c:79:
                    0c:66:f8:c5:cc:68:4e:a6:d5:a5:43:d5:3f:97:93:
                    54:cf:de:7a:f2:b3:f2:88:70:92:9a:aa:d7:ce:f3:
                    79:82:fe:a9:ce:75:25:1f:3a:19:1d:98:1d:c7:e3:
                    6b:ed:d9:bd:96:60:98:0c:4b:1a:47:fe:cc:8a:e0:
                    8d:4e:ce:f9:72:fa:6d:f7:85:de:ff:69:d6:42:23:
                    d4:ad:cd:63:42:3a:8d:36:80:88:e7:d4:75:6c:7b:
                    45:3e:59:ce:df:ac:08:ec:78:5c:bd:38:1e:e7:03:
                    cd:ed:70:d7:92:94:1c:2f:d9:ec:b7:09:05:9b:ef:
                    6d:c2:e7:af:0b:c9:46:11:43:d5:e2:15:4f:ed:de:
                    a1:4c:4e:97:7e:0d:97:1a:fb:ba:0a:d8:fc:e6:18:
                    a9:56:12:e3:ef:e4:67:36:6d:58:ee:79:7d:28:dc:
                    59:91:4c:23:fb:37:ac:ae:b6:24:3b:ff:a3:3c:06:
                    15:99:90:74:c9:14:14:73:10:a4:07:86:bc:bb:8c:
                    97:c3:b4:75:c2:91:98:e8:4e:1f:c3:f3:d4:88:8e:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:88:09:5C:D7:66:E4:A7:58:44:2D:B2:64:84:80:FC:24:18:CC:93
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:d6:b7:79:69:83:0b:54:43:dd:00:59:df:00:fb:23:53:
         32:c7:15:ca:09:83:1b:02:6f:f4:64:75:ec:c1:a1:8f:b9:59:
         d5:90:13:5f:92:fa:ec:e0:46:cb:fb:2e:26:e6:91:46:c2:de:
         c1:88:16:31:6c:de:e0:d2:ba:c9:78:aa:f5:19:28:f6:1b:5d:
         c6:d2:b1:c5:81:b4:59:11:ed:a3:38:53:aa:a4:8a:ed:0f:57:
         53:25:fa:be:11:ad:44:ad:25:a0:f1:65:ac:61:3c:3c:7c:c2:
         1d:d8:c4:60:4c:8b:c8:06:03:18:be:5f:8f:e3:7c:64:3f:64:
         01:72:b3:ee:cc:63:4a:b3:67:54:85:a1:77:c7:d5:8c:02:02:
         97:b8:14:7a:48:85:b4:26:f0:f3:1e:3a:dd:61:70:aa:0e:2f:
         13:13:a6:33:bc:f1:61:77:35:bd:87:3b:24:a1:98:8a:c5:9a:
         b1:80:81:71:f5:87:0d:49:d1:99:ed:c8:0a:dc:7c:a1:3f:cb:
         46:d2:70:36:09:cc:c3:d6:ee:ff:e2:88:c7:ee:10:e4:8b:ed:
         ac:7d:cd:46:9b:4d:39:b6:a6:93:ef:a5:01:6c:01:19:89:c7:
         81:64:c2:27:c2:e4:ce:67:64:19:be:ed:ee:81:49:6a:95:c1:
         88:b6:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:09 2024 by rpki-client on console-ams.rpki-client.org