Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa
File:                     3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier:          rFABydY/GdEDhP31byHwqGFu64JnkXNwpSOFFSbVpP8=
Subject key identifier:   65:0B:BA:BC:46:29:17:52:64:F0:43:E2:BD:57:DC:84:97:04:1D:82
Certificate issuer:       /CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
Certificate serial:       76B030DFDE0297B2F8CAC80A01007B2DD7D93974
Authority key identifier: 4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa
Signing time:             Thu 04 Apr 2024 18:15:47 +0000
ROA not before:           Thu 04 Apr 2024 18:10:47 +0000
ROA not after:            Thu 03 Apr 2025 18:15:47 +0000
asID:                     263047
IP address blocks:        186.237.24.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl
                          rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:30:df:de:02:97:b2:f8:ca:c8:0a:01:00:7b:2d:d7:d9:39:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
        Validity
            Not Before: Apr  4 18:10:47 2024 GMT
            Not After : Apr  3 18:15:47 2025 GMT
        Subject: CN=650BBABC4629175264F043E2BD57DC8497041D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:ed:33:dc:db:2a:2e:46:35:a7:b4:85:5f:
                    40:f4:06:1c:de:e0:bb:5d:a5:eb:cd:75:9e:68:e6:
                    54:96:e8:df:95:79:bb:0b:d0:c0:36:be:06:2a:0e:
                    8e:0d:c9:77:11:a3:67:7d:e9:b4:2c:18:26:87:88:
                    db:70:22:3a:ca:3d:d9:36:69:31:1a:04:d2:54:28:
                    0f:98:74:0a:7c:76:c9:fe:66:48:fe:a6:d0:cd:36:
                    04:f9:5f:28:52:8c:0c:df:4e:6a:dc:2e:63:d1:ef:
                    da:86:ca:79:82:38:a1:53:5a:8a:e9:10:a3:f6:80:
                    e6:05:be:c1:bd:a0:63:c9:28:0c:de:f7:66:dd:fb:
                    1f:22:69:93:af:fc:d0:43:54:ae:5d:9c:95:62:ce:
                    62:1f:16:94:ce:f9:08:e4:3e:05:33:50:f1:d7:9e:
                    f9:fd:58:78:03:6b:0e:28:8e:8d:27:c3:7b:bf:2a:
                    44:b3:fc:fb:fd:b9:07:b1:fd:d7:29:c3:e2:95:c9:
                    6c:f5:30:9e:bd:47:df:9e:85:74:31:8a:a6:1e:5b:
                    4e:6c:e5:fe:38:9e:71:5f:9f:d6:34:90:99:d9:31:
                    7e:59:75:62:06:f5:ed:37:d3:93:82:7f:ad:a9:0f:
                    11:79:7a:fe:3e:f6:d4:cf:bc:a7:18:20:08:60:3a:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:BA:BC:46:29:17:52:64:F0:43:E2:BD:57:DC:84:97:04:1D:82
            X509v3 Authority Key Identifier:
                keyid:4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/3138362e3233372e32342e302f32322d3332203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:11:d6:60:43:69:ff:d3:77:ba:2a:5a:90:75:67:f1:c8:8f:
         71:eb:d5:73:b7:4e:6c:57:19:84:0d:db:fd:25:bf:6d:a7:f7:
         98:77:a7:2d:12:bb:60:2d:c0:83:be:25:a8:37:bc:97:2b:39:
         7e:5f:80:b0:6e:bf:f0:b1:b6:a8:05:5b:bc:0b:41:ca:12:70:
         98:f4:33:f1:ba:de:ee:28:59:71:36:2f:b4:b6:19:c1:9f:42:
         a8:45:2d:2e:7e:f7:1b:53:0e:98:c4:d4:fb:83:1c:32:fd:e4:
         8a:a8:26:7c:fe:ee:67:6c:74:4d:ef:a3:d6:de:39:7f:a9:f0:
         8d:2e:af:6b:e4:9c:78:12:83:fb:60:f7:8b:37:c0:f3:35:d6:
         03:cc:65:39:6f:ca:63:1f:f4:2c:d4:c3:22:57:7d:be:ac:46:
         57:8d:5d:02:73:40:38:0b:dd:06:03:f2:58:e0:cc:d1:f3:f4:
         79:7a:d4:71:33:29:e4:0c:a2:55:bd:b3:ef:2c:32:27:58:55:
         8c:22:ca:ce:b5:ec:5f:ab:69:70:9d:65:68:e2:f4:7f:61:00:
         a7:ce:34:c8:e7:d6:a0:42:9f:12:11:4a:c7:64:9c:a1:b2:67:
         86:31:a1:1b:c8:5d:37:25:ae:9a:d4:17:d0:ef:c5:05:92:d6:
         8b:ae:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org