Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa (raw, json)
Hash identifier:          B7SxNm5JJEVIhUbE+W7RwMGWia0auTwA01Ble/cpt9g=
Subject key identifier:   E3:C7:CD:6B:F2:56:F3:FA:D1:E1:F0:47:F3:DE:E8:2E:B0:90:BC:D4
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       75FD8BE53458EDCAB46A51BD9E768D21D5EFEEF5
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
Signing time:             Thu 04 Apr 2024 11:23:20 +0000
ROA not before:           Thu 04 Apr 2024 11:18:20 +0000
ROA not after:            Thu 03 Apr 2025 11:23:20 +0000
asID:                     264879
IP address blocks:        168.227.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fd:8b:e5:34:58:ed:ca:b4:6a:51:bd:9e:76:8d:21:d5:ef:ee:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Apr  4 11:18:20 2024 GMT
            Not After : Apr  3 11:23:20 2025 GMT
        Subject: CN=E3C7CD6BF256F3FAD1E1F047F3DEE82EB090BCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:f3:d5:ce:32:e6:8a:33:41:11:da:18:d5:
                    c6:b6:36:ea:51:34:7b:11:33:67:18:c9:50:54:0d:
                    27:d2:76:5b:b5:27:49:47:a3:2d:57:46:27:d2:6b:
                    8b:8b:7c:6b:ef:b7:da:98:68:20:c1:40:83:e0:73:
                    9d:b0:fb:e8:8d:9d:00:f5:f1:aa:d1:89:e3:a7:f1:
                    48:bc:b6:0c:9f:fd:cb:c9:d1:c3:82:98:e3:82:e5:
                    ca:27:8b:c3:3e:a1:65:08:36:1e:04:7b:32:c7:da:
                    18:3a:37:a4:c4:f7:a7:4a:58:32:0e:fb:61:94:75:
                    a4:74:7e:48:69:c8:24:79:4b:bc:e3:fc:d0:23:7b:
                    af:cc:a4:1d:40:0f:3d:2d:34:c8:dc:0f:4d:18:20:
                    0a:5a:c9:58:c7:5e:8a:d3:a6:ba:ae:6a:ca:f1:68:
                    e2:bd:5c:76:84:73:0d:05:19:d0:a9:70:d6:a7:b1:
                    49:aa:65:ad:8d:d3:7d:7c:a0:be:61:9b:a5:15:67:
                    bd:8f:83:14:76:f7:ed:fe:e1:b3:e6:46:6b:0c:77:
                    a0:c3:bf:fb:15:43:a6:48:05:9e:f3:db:af:61:1f:
                    2a:db:f7:d4:24:b2:11:c6:05:68:60:c6:b8:23:9f:
                    ee:56:8c:53:6d:a9:f8:b5:22:68:5a:ed:b0:e4:03:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:CD:6B:F2:56:F3:FA:D1:E1:F0:47:F3:DE:E8:2E:B0:90:BC:D4
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:95:58:84:08:68:73:d0:2a:e4:36:a8:33:f8:87:7a:90:
         21:c7:52:43:34:ef:bd:21:06:5d:47:bc:75:b1:4c:02:9d:86:
         73:c5:ef:64:6d:94:cf:ef:39:3a:c2:76:96:49:e7:06:7f:6a:
         f7:e9:b2:17:e9:d9:d7:2e:11:03:ea:44:76:87:12:c0:14:93:
         3e:3f:5a:4a:45:55:23:80:18:5c:43:f6:7b:b4:75:32:0f:a3:
         f8:25:3a:1e:8c:26:28:bf:e0:1d:c0:b7:e8:a5:89:14:c1:7c:
         24:18:43:ec:03:e2:16:38:75:1e:20:15:b9:cb:62:58:ff:45:
         46:02:e6:f8:d2:76:02:86:de:47:58:5c:be:9d:7b:36:88:3d:
         a9:8f:60:5e:83:79:50:48:fd:65:6a:f9:f9:29:ff:d0:e4:85:
         ba:53:c1:7b:99:5d:87:20:09:df:93:b9:73:cf:97:c5:8a:ad:
         b9:1a:0f:9b:1f:3d:e7:f4:57:f8:c3:2c:b1:c1:ea:f9:30:73:
         95:a9:07:d9:a4:54:bf:79:ba:b1:2a:bf:86:0c:10:c6:1d:59:
         5a:80:5a:a4:2c:7a:46:5a:3c:70:32:4f:84:30:30:2a:54:f9:
         de:ce:32:2c:78:32:58:f6:fe:d6:a1:61:9e:dd:bc:2a:54:1d:
         0a:01:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org