Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          MfsRSn5CC527tcDzjQR02pnRO0vKQOGnCI4OQ8JH1pI=
Subject key identifier:   D4:0B:17:6F:4F:FD:83:84:06:4C:A1:1B:63:17:64:26:29:A8:78:5B
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       1BC0D16B213D5880F461C2D25625393DF95A1B7B
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 03 Apr 2024 18:31:03 +0000
ROA not before:           Wed 03 Apr 2024 18:26:03 +0000
ROA not after:            Wed 02 Apr 2025 18:31:03 +0000
asID:                     265425
IP address blocks:        168.195.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c0:d1:6b:21:3d:58:80:f4:61:c2:d2:56:25:39:3d:f9:5a:1b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Apr  3 18:26:03 2024 GMT
            Not After : Apr  2 18:31:03 2025 GMT
        Subject: CN=D40B176F4FFD8384064CA11B6317642629A8785B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:8e:7f:bb:8b:7c:4f:ba:80:b0:ee:9a:51:
                    41:49:fa:89:f4:b6:91:25:7f:7e:a4:17:41:e2:7e:
                    8d:d9:f5:c3:8a:4a:51:77:ba:78:3e:b9:5e:e2:0e:
                    22:ae:6b:ab:bb:43:00:88:5f:ff:9e:36:a2:b5:2e:
                    73:fa:0f:0a:37:03:fd:1a:35:bf:81:c8:50:6c:51:
                    6b:0a:07:36:fc:11:a6:58:55:f3:ef:8d:86:50:bc:
                    ca:2f:85:c7:ab:93:3c:c9:82:fa:3a:93:e7:ea:10:
                    48:87:a6:5c:b9:42:03:9f:d7:21:e5:81:e8:74:36:
                    96:1b:1a:bf:e3:ff:1b:5a:cf:73:19:a8:ac:24:e5:
                    86:b0:59:9e:b2:7f:4f:74:04:25:ff:ec:bf:66:29:
                    37:b4:20:de:2f:c7:28:4b:c7:fa:3c:0c:f4:dd:91:
                    d2:df:d4:c5:f7:21:1b:1a:0a:91:64:c5:0e:b4:f8:
                    da:3f:fa:3d:2c:f0:cb:11:d4:17:84:dc:3d:8e:76:
                    cc:7d:05:63:46:fa:23:e8:62:7a:ae:87:98:ff:21:
                    90:52:33:68:d6:d1:d1:c6:f2:fb:91:d6:f9:90:e2:
                    af:ca:2b:6e:f2:b4:01:ed:b1:a2:ea:20:c6:9d:25:
                    31:41:6f:c9:3e:00:7c:ef:94:6d:6e:ca:47:28:8e:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:17:6F:4F:FD:83:84:06:4C:A1:1B:63:17:64:26:29:A8:78:5B
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:42:bf:7b:30:27:8f:70:14:05:e0:ed:29:cf:d5:05:af:
         9a:3f:2d:d7:9e:cc:a8:b6:f3:44:c3:03:9d:72:4e:2d:92:c3:
         5f:51:50:30:0d:b7:81:0a:fc:09:dc:bd:94:9e:0a:a9:30:f4:
         5d:64:21:26:cf:ac:de:fa:1b:06:75:6b:3b:9d:86:00:e1:35:
         ac:07:10:06:3f:a8:0d:d0:ee:03:51:57:9d:e9:7e:46:eb:92:
         8c:76:91:93:19:55:40:86:a2:81:aa:7e:f5:c7:ed:1d:f8:bf:
         28:28:5e:1d:cf:d9:00:1c:90:38:dd:1f:24:67:64:b5:22:a3:
         9b:e8:e8:62:dd:74:49:a3:1a:b9:35:8f:30:52:90:90:9f:c3:
         56:db:1c:da:dd:6d:74:b9:1a:8b:a8:c2:76:95:fd:2b:4b:1d:
         57:7f:97:55:51:01:a9:48:77:db:5e:76:b9:a4:de:f6:86:78:
         bf:81:f5:54:29:2d:f8:1b:0d:5f:a5:82:09:97:b6:a6:2f:f2:
         47:65:85:ed:88:e4:56:d9:5d:77:31:92:a4:54:43:38:4b:29:
         62:16:94:2f:68:3a:73:55:4e:e6:db:b2:6e:61:83:11:92:41:
         f3:ab:67:9e:3c:a9:ce:c2:1e:52:a2:c4:50:fc:5a:ea:c2:65:
         d4:25:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org