Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa
File:                     3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          CoH9UklD8Zi5gz7Zb+xu7f98ujkHPx2QBlDPgCd01o4=
Subject key identifier:   D1:A2:3B:09:C1:3A:4C:88:AD:A7:BE:E8:50:F5:45:03:51:D0:27:56
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       0E965D22FC4836E0DB2801660B86EE8FC7AD56E8
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:53 +0000
ROA not before:           Thu 04 Apr 2024 11:01:53 +0000
ROA not after:            Thu 03 Apr 2025 11:06:53 +0000
asID:                     262868
IP address blocks:        168.227.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:96:5d:22:fc:48:36:e0:db:28:01:66:0b:86:ee:8f:c7:ad:56:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:53 2024 GMT
            Not After : Apr  3 11:06:53 2025 GMT
        Subject: CN=D1A23B09C13A4C88ADA7BEE850F5450351D02756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:66:b7:da:6b:1f:36:02:55:45:da:33:a7:
                    d1:e5:76:db:4f:1c:af:9f:32:5a:09:65:15:34:45:
                    e6:a8:f9:d7:30:1e:70:66:21:35:12:4b:63:db:61:
                    0a:a2:48:c8:dc:c8:5f:bc:da:38:5f:ab:7e:e8:a1:
                    7f:03:de:d5:f5:83:b6:09:00:ca:d0:2d:ae:c2:8f:
                    2d:8e:d0:2c:3b:31:e9:10:bd:fc:16:c1:d1:41:aa:
                    54:21:d8:d4:cf:55:b7:a0:6c:22:6e:e6:9b:93:6b:
                    02:2f:a8:2f:a9:32:52:af:5c:ed:fe:23:3f:c4:1b:
                    19:80:65:48:ad:c1:cd:48:49:df:41:ff:c0:b1:86:
                    34:64:07:64:2f:64:a6:56:cd:c2:e3:08:03:bb:67:
                    01:e2:27:23:37:0b:38:e7:53:4a:e9:65:7e:4a:c8:
                    83:6e:d6:77:95:9f:6c:99:52:1a:e5:1a:88:1c:3f:
                    04:c3:16:02:d0:37:19:0f:72:5a:22:36:78:60:05:
                    44:4e:ea:3c:cf:a3:1d:13:ca:60:98:da:a4:10:96:
                    bd:ee:36:9d:c1:3d:b2:a9:33:8e:27:aa:63:1a:44:
                    e4:a8:fe:99:a5:51:dc:75:3d:10:5f:a2:76:07:79:
                    20:c0:35:20:9d:5b:7e:32:63:a3:75:ab:a8:fa:65:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A2:3B:09:C1:3A:4C:88:AD:A7:BE:E8:50:F5:45:03:51:D0:27:56
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:40:98:5e:67:82:77:89:e4:1e:45:27:f1:8a:92:be:d2:7d:
         36:3a:11:c8:7e:38:29:8b:aa:0f:20:b7:0a:1d:cd:cf:1c:07:
         5d:f3:bf:fa:87:d9:a1:3e:19:98:88:20:b2:75:3e:1c:2d:24:
         96:69:94:7b:78:bc:08:28:20:fb:4f:90:75:74:37:b5:22:23:
         3f:6b:f6:88:8d:98:25:a3:82:b1:92:a6:5c:ae:57:fd:62:25:
         4b:68:37:ec:4c:0e:3e:bb:a4:25:2a:f9:14:ce:96:4c:8d:4d:
         6c:87:c8:bd:0e:0a:95:95:db:4c:93:65:76:6a:7c:c4:d7:cd:
         2a:b5:61:ad:56:19:1f:47:2a:04:e1:5a:a2:da:07:70:8c:4a:
         f6:e3:80:7a:55:9c:04:b5:0e:32:6f:d2:39:ec:52:a4:bb:c6:
         49:bf:fd:8f:72:67:94:bf:6e:08:7e:cd:80:12:9f:2f:30:f8:
         54:89:19:f3:04:55:68:b4:bc:26:09:1d:f5:17:19:38:f2:ab:
         11:16:3f:90:b2:40:0a:91:7d:e2:82:a0:9b:7b:41:7c:71:4f:
         b0:96:35:f6:70:e8:d2:e7:da:48:7c:e5:43:c6:ac:00:06:f3:
         9a:e1:26:6d:60:90:d2:ef:6a:00:b7:0e:f6:f7:87:de:70:49:
         df:74:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org