Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa
File:                     3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa (raw, json)
Hash identifier:          EjmE2pAN4ZOceCOUVLqDjIPJ5NZGBSfVTBSSrTakR+Y=
Subject key identifier:   22:BF:19:F1:CA:10:84:BC:B0:D0:B2:53:E7:12:30:34:0A:25:41:39
Certificate issuer:       /CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
Certificate serial:       689F7FA0130C17BB5695AE3857C694A58D3F8BAD
Authority key identifier: C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa
Signing time:             Thu 18 Apr 2024 11:39:12 +0000
ROA not before:           Thu 18 Apr 2024 11:34:12 +0000
ROA not after:            Thu 17 Apr 2025 11:39:12 +0000
asID:                     265983
IP address blocks:        164.163.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl
                          rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9f:7f:a0:13:0c:17:bb:56:95:ae:38:57:c6:94:a5:8d:3f:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
        Validity
            Not Before: Apr 18 11:34:12 2024 GMT
            Not After : Apr 17 11:39:12 2025 GMT
        Subject: CN=22BF19F1CA1084BCB0D0B253E71230340A254139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:12:9a:49:4e:b0:c6:e0:96:fa:b2:4e:9c:
                    37:74:ea:48:35:39:61:b7:85:5f:9e:3b:f4:c3:9b:
                    a4:ca:e7:4a:01:d6:b1:fb:75:ef:c0:55:6e:28:41:
                    ec:e0:9b:b2:5c:fc:4e:94:7e:f4:b1:ff:ef:70:af:
                    c2:0e:27:bb:01:c6:54:53:fe:b8:e4:62:5b:33:5e:
                    79:fa:a5:c1:a6:d7:78:54:a1:1d:72:a6:86:7c:6b:
                    8d:a6:6c:ff:8f:89:0a:53:1c:1a:08:25:63:83:2b:
                    fa:43:74:e8:a1:ec:6e:37:d3:5c:03:c3:50:8d:60:
                    d7:43:09:7b:05:80:76:81:64:af:ff:0d:64:c1:3e:
                    c0:97:ba:14:d3:73:f9:a1:66:d5:76:9a:a9:c5:bc:
                    6d:3e:d4:3f:b6:76:ef:a4:28:7f:44:40:45:db:ba:
                    84:32:30:ab:6f:d8:75:83:b9:3e:79:ed:9f:42:4c:
                    24:1f:5c:75:69:72:e7:5f:7d:33:5e:13:ad:05:bc:
                    a3:b8:f4:51:fe:96:1e:bc:4d:8f:26:8a:19:83:3f:
                    20:d1:1a:42:ac:f4:9d:ad:37:9d:ba:e4:f2:9d:db:
                    d2:67:10:b5:05:44:57:f4:ab:48:4d:6b:3f:04:c4:
                    c1:07:6d:53:3e:c2:a4:6d:da:e2:f9:e8:ae:38:73:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:19:F1:CA:10:84:BC:B0:D0:B2:53:E7:12:30:34:0A:25:41:39
            X509v3 Authority Key Identifier:
                keyid:C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233332e302f32342d3234203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:65:35:0e:26:41:54:cf:b3:1c:e6:03:e3:ee:62:2e:17:c1:
         46:29:f8:16:ed:f9:9c:1f:ff:80:59:8c:b5:c1:aa:45:da:8b:
         46:f0:27:99:bd:27:b4:bb:36:59:8d:05:61:2b:29:d9:fa:25:
         38:97:8f:81:89:dc:23:0a:8c:c6:53:9f:88:b6:0e:7b:5d:5d:
         c0:f9:d8:4c:f6:f6:ba:d6:36:49:7d:bb:ff:5f:8b:37:8e:a1:
         7f:e1:a6:41:4f:5b:8b:6b:95:bb:b9:93:04:0f:55:4b:a9:4e:
         5b:46:72:d3:03:f1:20:ca:42:df:45:0a:ae:8d:bd:a3:d3:11:
         7d:0f:78:fb:9b:63:71:f7:42:e9:df:1e:2a:ce:03:37:b3:c2:
         f9:bf:29:8c:9a:84:76:1e:82:56:a9:a2:c5:20:e0:69:bd:76:
         08:56:d2:c7:4b:d5:e2:61:7e:10:98:cc:a7:b3:15:f4:45:50:
         5a:f7:eb:ca:0b:8f:72:c0:d5:50:c8:2d:1d:8d:7e:93:11:cc:
         0a:e8:f4:93:b3:c1:80:9c:74:6c:64:f8:12:09:a9:7e:ce:3d:
         f4:d3:8c:f0:c3:34:e7:d9:75:5c:cb:94:7d:92:7e:68:8f:1a:
         de:58:98:81:c0:ec:96:89:ae:e7:5c:86:e0:a1:39:9d:38:87:
         e1:ef:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:57 2024 by rpki-client on console-ams.rpki-client.org