Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20323730383832.roa
File:                     3138362e3139342e342e302f32322d3234203d3e20323730383832.roa (raw, json)
Hash identifier:          25s6N1KpBbLtRNO9NkvIePdiu6t1K8NdGMTGruNx9T0=
Subject key identifier:   5A:DA:B9:56:04:5A:E7:9E:24:87:D5:C6:82:64:85:90:1C:DC:A2:C5
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       2FE1417EFBA8ABAA3B40E4FA088163B684B3634C
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20323730383832.roa
Signing time:             Wed 05 Jun 2024 18:57:11 +0000
ROA not before:           Wed 05 Jun 2024 18:52:11 +0000
ROA not after:            Wed 04 Jun 2025 18:57:11 +0000
asID:                     270882
IP address blocks:        186.194.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl
                          rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e1:41:7e:fb:a8:ab:aa:3b:40:e4:fa:08:81:63:b6:84:b3:63:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Jun  5 18:52:11 2024 GMT
            Not After : Jun  4 18:57:11 2025 GMT
        Subject: CN=5ADAB956045AE79E2487D5C6826485901CDCA2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:d5:24:2d:6c:1c:cd:12:15:96:eb:a4:4a:
                    40:54:03:5c:3f:11:a0:f5:03:3c:37:18:19:89:b3:
                    85:71:3d:4c:14:e8:79:47:4e:a4:80:b3:dc:f2:bc:
                    13:13:4e:76:8f:20:ca:ff:32:00:94:10:40:84:7f:
                    69:8e:fe:78:9f:7f:52:73:c5:2f:4e:b3:0d:80:e0:
                    6b:9e:a1:bc:2a:da:57:54:10:ed:eb:17:9b:07:87:
                    30:ff:13:bc:35:75:ab:f3:b1:20:22:2f:cf:e9:4a:
                    77:5f:3b:e8:a2:93:1b:06:ec:d1:38:fe:ae:02:65:
                    fe:95:b7:d5:e0:5e:d2:d7:f6:a5:cc:81:ac:ad:87:
                    49:4e:99:89:db:ed:bc:e1:34:16:7f:24:c9:89:35:
                    25:c0:e2:77:01:6c:2a:ff:5e:f7:b7:fe:41:4f:a8:
                    5b:21:44:78:21:c0:01:be:3a:be:07:09:98:50:55:
                    15:86:7e:f3:9d:44:be:8e:31:4f:05:f7:35:fd:5f:
                    96:65:0d:c3:86:a5:5c:0c:7b:f7:fd:58:7f:a0:b6:
                    b1:e4:93:d9:d9:82:19:24:aa:a0:83:55:86:07:b8:
                    f2:b4:72:a5:9b:4e:9b:b7:6b:51:ea:82:e5:4e:0a:
                    a9:51:85:96:44:36:13:89:a3:e5:74:3b:bd:ca:50:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DA:B9:56:04:5A:E7:9E:24:87:D5:C6:82:64:85:90:1C:DC:A2:C5
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e342e302f32322d3234203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:6f:10:12:b6:a9:47:95:ea:40:59:cc:16:ea:60:5c:ff:
         c5:ba:2e:1d:20:8d:39:67:e5:90:34:26:0b:f5:4c:3e:25:93:
         a3:16:b8:69:35:dc:de:3c:a9:9a:b1:72:62:b1:f0:eb:0a:bc:
         0f:64:f0:83:a8:4c:5b:84:60:97:54:70:b9:50:54:47:c7:be:
         3d:9a:82:48:6f:a2:6c:43:05:5c:c3:ab:dd:b0:96:48:3a:82:
         e8:95:e5:ed:f3:b1:d0:7c:b7:9c:cb:e4:82:5c:a1:ed:95:94:
         bd:94:49:f7:1d:6c:78:8c:20:1d:1e:ca:8a:26:a7:c6:79:fa:
         ac:a2:56:ee:20:05:26:33:8d:80:46:30:14:e0:ac:09:d8:33:
         37:83:2c:3d:ee:46:dc:62:62:f9:16:d1:33:7d:1f:ba:09:5e:
         8b:65:3e:8b:de:d9:47:88:ed:d8:a1:b7:c1:57:ec:69:a6:73:
         14:b8:3f:48:ee:98:17:ba:3e:d8:49:06:8f:07:b5:2b:91:5c:
         fc:8a:57:04:15:e7:fe:cd:55:92:ed:34:61:f5:d0:af:cf:9a:
         67:a4:a6:61:cf:b5:b9:7d:fe:34:b9:ae:10:ba:d2:4c:2e:9b:
         3d:f0:97:0f:61:da:c8:a5:03:87:93:5b:62:b9:4e:d8:ae:a2:
         24:f4:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:14 2024 by rpki-client on console-ams.rpki-client.org