Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa
File:                     3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa (raw, json)
Hash identifier:          teSFBeB3ycQPLRtXjXRVAjw80T6DjojMpPd/6OSxteE=
Subject key identifier:   00:BD:49:0E:38:4C:F8:C9:F7:3D:9A:F4:AD:03:8C:2A:80:9D:03:74
Certificate issuer:       /CN=5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4
Certificate serial:       544ED319FAD7D4CA9D2841108DF5CC11A25B74E1
Authority key identifier: 5A:8D:1D:D7:0C:8B:1F:A2:91:3B:A4:0F:66:76:F7:6F:59:AF:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa
Signing time:             Tue 09 Apr 2024 13:48:24 +0000
ROA not before:           Tue 09 Apr 2024 13:43:24 +0000
ROA not after:            Tue 08 Apr 2025 13:48:24 +0000
asID:                     263388
IP address blocks:        177.222.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.crl
                          rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4e:d3:19:fa:d7:d4:ca:9d:28:41:10:8d:f5:cc:11:a2:5b:74:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4
        Validity
            Not Before: Apr  9 13:43:24 2024 GMT
            Not After : Apr  8 13:48:24 2025 GMT
        Subject: CN=00BD490E384CF8C9F73D9AF4AD038C2A809D0374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:82:b3:04:e2:10:19:9f:68:78:09:06:80:
                    4d:03:d7:9c:17:fc:7e:34:53:74:d9:77:d3:b2:3d:
                    12:31:9a:ef:ed:1e:25:ff:4b:98:f7:00:87:cd:20:
                    3e:2c:2e:9d:22:48:10:0d:be:74:b7:34:7a:6c:04:
                    2c:1f:24:37:4b:c3:94:d4:16:0f:89:8e:90:35:de:
                    eb:ff:e2:56:c2:0e:5a:d5:c1:01:2a:56:af:d7:32:
                    76:18:03:d5:35:78:6b:38:9f:d1:76:dd:d1:83:74:
                    fe:af:fa:aa:ff:81:6a:bf:b5:76:cd:80:ab:d7:00:
                    31:5c:86:e7:66:05:8d:35:92:84:cf:c4:13:a0:79:
                    9d:c5:32:35:23:1f:ee:fc:92:83:b2:29:e6:b7:2b:
                    c9:a8:c6:f2:df:31:bc:58:49:f7:fa:dd:d0:d2:5f:
                    bb:38:f1:7d:0a:ec:c1:8c:3a:62:8b:58:89:33:69:
                    6b:65:70:31:4a:65:b8:f9:8d:df:df:7d:2a:23:df:
                    f9:6f:f9:95:7d:5e:e6:b5:32:29:ec:9a:68:44:42:
                    1c:9b:39:5c:4b:7b:2f:b6:18:d6:b1:91:8d:62:3f:
                    37:b0:5c:a9:cb:2f:91:42:c5:7c:b3:40:8e:53:3c:
                    cb:b6:30:f7:30:fa:91:34:f3:eb:66:c9:02:24:3c:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BD:49:0E:38:4C:F8:C9:F7:3D:9A:F4:AD:03:8C:2A:80:9D:03:74
            X509v3 Authority Key Identifier:
                keyid:5A:8D:1D:D7:0C:8B:1F:A2:91:3B:A4:0F:66:76:F7:6F:59:AF:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A8D1DD70C8B1FA2913BA40F6676F76F59AF7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BoNsV1PbeVFA2Z685XmHu2dJECNBDZeAzw7GqpkHN8j/0/3137372e3232322e3136302e302f32312d3234203d3e20323633333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:e0:09:9f:af:fe:0e:42:10:d0:95:cf:77:bd:ce:0e:67:
         92:21:c0:00:03:0b:82:e5:f2:87:f1:ea:4c:d2:d2:e6:60:b3:
         ec:44:18:1d:c8:46:4a:74:50:8e:51:1a:d7:2e:74:e1:79:9b:
         3b:17:07:94:f5:92:2b:80:c1:7a:17:37:9d:59:27:b4:44:44:
         02:43:fd:83:a6:7a:0a:ec:be:34:c9:37:34:90:74:e9:17:96:
         d5:88:fc:85:2c:59:1e:43:4f:6f:9f:c1:ec:13:83:52:71:b2:
         5c:19:a5:f7:9a:57:d3:46:16:fd:87:a0:f8:70:ba:ca:2f:6e:
         ac:df:18:55:73:9d:c4:a5:08:8c:97:80:3a:7e:a1:57:89:52:
         9f:b7:1e:9c:21:bc:2f:53:44:7d:f7:bb:10:86:12:08:0b:47:
         fd:66:f2:ab:49:3a:ab:51:fe:da:1c:97:12:9d:63:16:25:5e:
         fa:84:1f:1c:90:13:63:7d:45:63:05:ab:b3:70:11:de:77:b3:
         e5:3b:25:f6:89:e7:8f:2d:8c:ce:81:e7:61:e1:6c:6d:80:6e:
         e3:06:d7:ff:ae:b6:ed:15:5b:f3:ae:2a:8e:2c:6f:15:41:d1:
         24:8b:5a:68:46:c5:7e:1d:12:35:d5:74:7b:24:fa:a5:62:a9:
         6c:ea:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:14 2024 by rpki-client on console-ams.rpki-client.org