Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa
File:                     3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa (raw, json)
Hash identifier:          +d3NA5G1iqegobcLNRw+Pxpn9jIh326cw1JnM2zko2g=
Subject key identifier:   DC:2F:B1:F8:3B:F4:21:CE:BF:8A:BE:EC:82:BB:8B:5D:60:41:C0:E8
Certificate issuer:       /CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
Certificate serial:       6C26B99DD2CF435331914C2B8C48857473B5FFC1
Authority key identifier: D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa
Signing time:             Thu 04 Apr 2024 11:23:20 +0000
ROA not before:           Thu 04 Apr 2024 11:18:20 +0000
ROA not after:            Thu 03 Apr 2025 11:23:20 +0000
asID:                     264879
IP address blocks:        168.227.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:b9:9d:d2:cf:43:53:31:91:4c:2b:8c:48:85:74:73:b5:ff:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Validity
            Not Before: Apr  4 11:18:20 2024 GMT
            Not After : Apr  3 11:23:20 2025 GMT
        Subject: CN=DC2FB1F83BF421CEBF8ABEEC82BB8B5D6041C0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:11:5d:65:40:03:bf:13:19:e4:8d:f2:77:
                    38:5f:da:5d:84:95:2a:5f:81:39:0d:b2:26:3d:2d:
                    21:a1:42:d9:bb:09:15:52:69:6a:51:9e:98:54:31:
                    eb:7e:4f:bd:5c:2e:25:1f:4e:a8:fd:a6:31:bc:68:
                    73:6e:b3:4c:25:e8:9a:4b:06:f5:a7:8a:86:fb:e4:
                    09:1a:e3:3a:85:be:d1:bc:84:82:2b:66:2d:f3:54:
                    07:39:ab:d8:db:0e:d8:17:ff:a9:59:27:5f:7d:47:
                    7d:82:a2:ae:7c:97:63:0a:2e:f5:81:b2:a6:e7:33:
                    e7:36:03:4c:39:b2:6a:e2:11:21:11:84:cb:8b:74:
                    8a:96:a9:e2:63:e9:57:58:7b:8a:0b:ed:b8:0c:3c:
                    44:73:22:a7:14:fa:f7:11:49:fa:f1:12:c9:9b:31:
                    7a:1d:de:7f:c4:0c:7b:e6:00:74:ef:53:fa:71:fa:
                    4e:48:6b:af:84:eb:9b:59:fe:46:92:ea:b7:41:0a:
                    80:c7:b1:3b:22:8c:3c:4b:a0:bd:c9:91:34:7e:f8:
                    22:b4:12:53:d1:cb:2f:82:0f:73:41:cd:02:43:05:
                    72:7b:8f:f1:e9:a1:5b:68:e6:ea:60:c2:51:ad:90:
                    1e:c7:9f:1d:65:66:76:2b:c7:27:30:7c:86:12:bc:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:B1:F8:3B:F4:21:CE:BF:8A:BE:EC:82:BB:8B:5D:60:41:C0:E8
            X509v3 Authority Key Identifier:
                keyid:D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/3136382e3232372e3132352e302f32342d3234203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:59:4b:e5:df:52:34:0d:ef:29:e2:46:24:c3:dc:e7:47:c7:
         af:15:30:b5:1d:4b:86:04:6a:bd:89:f4:d8:47:26:0d:0c:a9:
         bf:fc:fc:b0:72:72:47:3e:87:0e:68:3a:5f:d5:68:23:1b:09:
         a1:4e:2f:e3:e6:5b:1a:ac:4a:68:0e:92:da:4f:67:1b:b6:62:
         d9:84:fd:b3:bf:09:ae:f1:78:b1:19:db:9a:e1:f4:dd:89:1b:
         18:89:e8:ad:3c:fa:18:78:f0:1a:92:41:fd:6a:f9:65:aa:9b:
         05:17:9f:13:53:a7:32:b1:c6:cb:9e:47:06:52:9a:76:af:ab:
         b4:29:f9:10:b6:2d:10:88:47:b9:cf:e0:df:d4:e7:a9:b3:d6:
         9f:c2:78:d9:57:9a:48:07:6f:e1:d1:ff:b0:9a:5e:69:c3:56:
         16:f8:92:4d:8c:91:f4:b7:6f:78:4d:5d:7d:f1:74:35:ee:a6:
         68:36:de:4c:3f:f1:88:cf:17:15:07:a8:d9:f2:ed:ad:3c:61:
         7f:e2:bd:83:54:47:42:65:e0:dc:e0:f2:67:f7:8e:11:83:43:
         0b:8f:fd:c3:08:70:62:03:7c:f4:e1:d7:be:dc:bd:86:30:88:
         0f:ec:76:c6:2d:2f:00:0c:32:43:26:b7:92:fb:5e:41:6e:1e:
         8a:ec:04:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:52 2024 by rpki-client on console-fra.rpki-client.org