Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa
File:                     3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa (raw, json)
Hash identifier:          MQCczYegQYaOsGrqLeKtLWlrkOJG/pjSal6QQ4oSFt4=
Subject key identifier:   79:77:DC:0C:46:B0:E0:CC:D9:FB:62:62:AF:12:E8:66:7C:AB:9B:26
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       547A0ECEF4582C72FC18D8BE856C46E7300A8DDF
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        187.108.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7a:0e:ce:f4:58:2c:72:fc:18:d8:be:85:6c:46:e7:30:0a:8d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=7977DC0C46B0E0CCD9FB6262AF12E8667CAB9B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:9a:a8:e6:4b:b2:eb:cd:b8:58:ec:35:5d:
                    0f:d6:81:40:f5:79:e4:df:6a:0b:8c:b8:ae:99:8e:
                    06:68:c3:bf:14:d2:87:57:18:70:9a:3d:7f:9c:51:
                    87:d8:fd:df:a1:e5:cc:19:f3:07:9c:67:69:9c:4b:
                    42:7a:1b:58:b8:11:1d:76:69:aa:6e:ea:eb:18:51:
                    7c:4e:18:69:6b:b8:82:cc:8c:2c:73:a7:63:c3:d9:
                    2d:e2:df:9d:bb:a0:6f:c3:99:94:4b:ee:74:a9:8e:
                    9f:68:1b:9b:c2:82:d2:cb:18:34:90:c0:6a:49:a7:
                    54:fd:ff:c1:d6:30:05:c5:29:89:83:9c:a5:ed:19:
                    87:c3:6e:8b:9c:39:43:47:5c:82:a0:de:76:d7:c7:
                    fe:4e:78:31:86:01:2c:49:13:ab:bb:00:02:eb:b8:
                    b5:56:56:8d:b3:ba:d0:6e:e4:63:c0:65:23:4e:90:
                    55:3b:4d:21:2e:bf:27:5d:79:0a:b4:3d:82:77:d1:
                    5d:49:ab:a9:4b:be:ab:3b:02:5f:ff:63:64:2f:14:
                    de:f6:2f:33:94:5f:ec:f1:98:28:24:bc:2a:a1:ba:
                    9c:39:8a:32:f7:8e:7a:7d:54:ec:bd:9c:1c:a6:19:
                    16:5a:2b:45:45:dd:38:c6:7d:d9:71:95:ae:b0:d9:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:DC:0C:46:B0:E0:CC:D9:FB:62:62:AF:12:E8:66:7C:AB:9B:26
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/3138372e3130382e3132302e302f32322d3232203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:3c:31:12:a6:6a:1a:77:00:de:b8:39:89:b8:41:4c:41:
         0a:89:a8:9e:ff:e4:ab:c7:b5:3e:fa:05:ef:65:93:d5:e8:7d:
         09:1d:00:4f:31:1a:e0:41:93:44:d1:32:6d:f0:b3:48:63:89:
         ab:32:05:28:67:fc:45:26:f7:82:91:9d:ec:2f:c3:b0:90:95:
         fc:84:4b:1e:8a:bb:2c:90:ba:be:2c:f9:52:cb:e1:96:42:9e:
         10:71:33:6a:56:5f:5b:da:05:31:24:06:50:1a:b2:ed:43:96:
         71:b9:05:c8:51:0c:c6:80:36:7a:69:ed:f9:cd:a7:90:7c:5d:
         07:93:a1:b6:e7:7b:bf:a8:3c:2b:07:3c:21:f6:56:3c:74:b0:
         97:84:7a:1f:41:ef:a2:1e:09:22:58:72:16:68:61:78:89:ef:
         ce:51:b8:56:5b:27:4b:c7:d5:e6:ef:e7:e6:d0:57:e1:ca:7c:
         27:4b:88:66:da:31:5d:04:6f:2d:35:ac:ec:00:b8:a8:44:52:
         1d:c4:eb:b2:59:4b:73:6c:26:91:53:01:f0:61:ef:d0:d5:0d:
         35:08:a6:17:a4:13:18:f5:38:c4:6c:98:de:69:1c:e2:14:6e:
         55:6c:86:bf:c8:d4:68:dc:aa:25:f1:c4:61:02:be:51:ae:88:
         36:e1:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:23 2024 by rpki-client on console-fra.rpki-client.org