Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          mPUo3v61HWK+fPo8RqkFAnwmlDcXgk1MwFgACcmARIw=
Subject key identifier:   B9:6D:11:EC:B7:84:8E:C5:9C:96:00:2B:3A:99:71:3A:5D:F4:71:6B
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       127775F0500E02BAC7E3DC3A76240D422BB9FF52
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 05 Apr 2024 03:32:21 +0000
ROA not before:           Fri 05 Apr 2024 03:27:21 +0000
ROA not after:            Fri 04 Apr 2025 03:32:21 +0000
asID:                     265485
IP address blocks:        168.197.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:75:f0:50:0e:02:ba:c7:e3:dc:3a:76:24:0d:42:2b:b9:ff:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Apr  5 03:27:21 2024 GMT
            Not After : Apr  4 03:32:21 2025 GMT
        Subject: CN=B96D11ECB7848EC59C96002B3A99713A5DF4716B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:bf:c9:77:27:8c:a2:bc:c3:18:05:5e:e6:
                    ce:65:ff:5d:8a:16:2d:12:6c:d8:f0:d3:a8:2c:f1:
                    ba:f0:6b:25:64:c1:b9:75:f8:58:45:fa:c2:4d:88:
                    b5:f3:ac:9f:b3:29:07:62:04:df:4a:7b:0c:ac:1c:
                    38:6a:71:ef:2a:b5:c6:fc:99:5b:8e:4d:57:f4:7f:
                    86:85:8f:5b:c5:45:4b:c4:2b:11:c6:12:12:f0:70:
                    49:c0:89:78:d8:92:28:2d:89:8c:b5:a5:00:b4:d3:
                    6f:c9:9b:8f:92:fc:09:87:26:79:df:af:00:90:a3:
                    ab:19:ba:9f:e8:92:f9:b1:75:30:f4:1a:6a:73:bd:
                    fc:f5:63:63:b5:81:b5:75:21:29:ba:e7:be:60:34:
                    3f:f9:4d:15:1d:67:6e:c7:37:c3:eb:58:56:f8:b3:
                    dc:81:06:81:22:5d:07:e1:ff:97:ea:82:af:7d:c1:
                    4c:00:6b:6a:09:53:76:3c:2e:98:71:3a:da:d0:d2:
                    aa:a3:78:89:9d:98:36:92:85:c2:4c:f3:5e:fe:08:
                    7f:b2:78:b5:3e:a3:35:0b:42:de:7b:f3:17:c3:17:
                    b9:50:59:63:43:e0:1d:73:bf:01:c1:c3:c7:24:5b:
                    c6:26:96:43:7b:a7:34:d8:22:dc:dc:7f:75:7b:60:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6D:11:EC:B7:84:8E:C5:9C:96:00:2B:3A:99:71:3A:5D:F4:71:6B
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:6c:bf:00:ae:9d:af:6c:8e:5a:a3:07:18:4a:46:c4:13:46:
         96:97:a4:18:38:04:5c:ae:38:32:34:c9:03:31:94:e0:20:16:
         a7:56:55:33:1c:31:6f:8c:c5:50:a0:c6:0b:91:f0:f8:f1:5d:
         76:de:aa:d1:4a:33:22:9b:b7:bc:5c:6b:e6:98:42:9a:d3:53:
         da:1e:48:66:7e:3f:18:0a:b8:5d:a7:0f:e6:25:29:77:84:cb:
         97:37:9a:5f:0f:58:2b:77:e4:f7:db:35:a7:2d:75:88:fe:ba:
         27:c5:f5:54:dc:45:51:e7:ed:6d:d5:b6:7f:41:c4:e4:ea:bd:
         b2:91:71:e9:14:59:88:90:55:3f:64:62:40:d3:dc:cb:d7:38:
         2f:68:ec:43:0b:e0:3d:d3:a4:f8:ca:50:4d:ad:c3:b4:a9:89:
         fa:7e:3c:fd:e7:fe:07:32:f8:73:66:f5:73:cc:f0:d7:72:ce:
         ee:41:06:db:39:4d:6a:92:b0:3f:72:e7:85:54:9f:3f:78:67:
         71:4f:cd:80:66:5e:d8:e2:ef:80:10:ed:51:22:1a:1f:f7:73:
         fe:bc:f1:7a:b1:a0:94:62:80:2c:2e:c4:94:b3:77:3e:3d:95:
         fd:7f:4a:c0:1b:48:4d:92:65:55:47:25:c8:1c:d3:e9:72:a7:
         53:e6:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:29 2024 by rpki-client on console-ams.rpki-client.org