Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
File:                     3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa (raw, json)
Hash identifier:          Lw/UNfkPp5Aq+ZnB0gIu0Awl3ev4tCpJ8yKqBdHVwEE=
Subject key identifier:   D9:39:5A:31:4A:04:50:01:99:44:FD:4C:7A:B1:92:B8:54:A5:A6:A0
Certificate issuer:       /CN=80F07BF6DABFC69298F3C52A47F39C92BD26D981
Certificate serial:       1E59F8CD360A89FC37299B6C348C26A914416E29
Authority key identifier: 80:F0:7B:F6:DA:BF:C6:92:98:F3:C5:2A:47:F3:9C:92:BD:26:D9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa
Signing time:             Fri 01 Nov 2024 19:55:11 +0000
ROA not before:           Fri 01 Nov 2024 19:50:11 +0000
ROA not after:            Fri 31 Oct 2025 19:55:11 +0000
asID:                     262469
IP address blocks:        168.196.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.crl
                          rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:59:f8:cd:36:0a:89:fc:37:29:9b:6c:34:8c:26:a9:14:41:6e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F07BF6DABFC69298F3C52A47F39C92BD26D981
        Validity
            Not Before: Nov  1 19:50:11 2024 GMT
            Not After : Oct 31 19:55:11 2025 GMT
        Subject: CN=D9395A314A0450019944FD4C7AB192B854A5A6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:1a:8d:f3:52:4d:1e:cc:f8:d9:02:d9:56:
                    d2:49:79:c3:98:12:b7:55:93:28:ae:f6:86:f4:26:
                    d6:d4:ec:88:6e:41:77:28:b0:d2:87:68:4c:c5:0a:
                    61:7f:ff:e7:14:42:eb:08:70:04:03:8d:47:22:aa:
                    95:0d:ef:1b:19:4b:7f:54:9e:04:3a:ee:cf:e8:6d:
                    06:6e:75:a7:c2:28:6c:c5:fd:15:ad:65:d9:c2:12:
                    05:36:cb:bc:dc:e9:c3:e8:5a:f7:1c:1e:80:13:f1:
                    d0:be:d5:64:f3:22:af:3a:ea:41:b3:59:73:9f:60:
                    d3:06:f2:62:33:7e:04:6a:f8:a8:c8:42:c8:1a:07:
                    f8:84:f1:12:62:91:b9:da:0a:c8:78:9a:29:fd:18:
                    58:b4:f1:9f:73:45:c3:dc:3b:4a:9e:6a:9a:20:b1:
                    ac:13:1f:2f:e0:d3:30:32:53:fb:d5:64:a0:2d:a5:
                    d6:c4:a1:8d:b5:16:aa:2e:6f:1d:6e:dd:a8:e5:ff:
                    1a:d0:3f:2e:3d:4a:51:5f:7a:fa:e5:77:cd:97:e6:
                    8d:dc:17:95:c0:af:6e:4a:4b:3d:08:36:3f:19:51:
                    ba:85:0b:44:f1:0a:44:e9:12:74:e1:0d:7b:70:12:
                    71:df:02:70:af:7f:e4:d0:da:69:eb:a0:9a:fc:73:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:5A:31:4A:04:50:01:99:44:FD:4C:7A:B1:92:B8:54:A5:A6:A0
            X509v3 Authority Key Identifier:
                keyid:80:F0:7B:F6:DA:BF:C6:92:98:F3:C5:2A:47:F3:9C:92:BD:26:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/80F07BF6DABFC69298F3C52A47F39C92BD26D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F07BF6DABFC69298F3C52A47F39C92BD26D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/3136382e3139362e3137322e302f32322d3234203d3e20323632343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:59:ce:1c:b6:42:c2:21:7c:17:2a:02:c1:86:77:6c:fd:
         45:dc:ad:3d:df:ca:14:e6:db:b6:7f:58:9f:31:04:50:5a:d3:
         6f:97:ad:05:2f:e2:a6:be:93:cd:4e:ed:6e:c6:6d:ee:5a:47:
         e8:f9:31:02:f5:d4:4c:56:6c:10:c2:39:81:ba:cd:c5:82:be:
         b5:6c:b0:7b:01:27:b8:34:81:d9:dc:31:86:73:c4:37:5a:e8:
         85:65:3d:bb:97:67:47:33:e6:4d:63:07:37:7c:d7:8b:31:f6:
         7d:83:06:c6:54:b2:ea:6e:28:95:58:b2:f0:3c:0b:01:83:06:
         2c:39:82:f9:26:6f:af:10:ff:55:73:58:02:21:42:54:88:70:
         16:d9:85:ae:d7:9e:b6:75:e4:1a:4e:3d:70:8d:02:81:e8:eb:
         a6:94:a7:82:c4:0d:a6:2b:5f:38:77:a2:24:9c:93:d5:20:20:
         1c:7b:7e:f3:75:64:b4:00:0c:1f:91:e5:8a:90:58:16:d5:c9:
         c0:ff:1e:42:4b:a6:27:e6:67:a8:43:f5:09:57:d3:f3:b2:e9:
         52:21:67:0c:43:95:06:6a:85:fb:2e:93:ed:04:29:33:73:e1:
         45:86:c1:5b:5a:09:0d:c0:e1:1a:00:c0:8d:cd:ac:b8:52:43:
         aa:ea:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org