Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa
File:                     3136382e3139362e382e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          b9bRBc6T9auJf4xmLJqM7g5jzvl9qy63chh9q8c0POE=
Subject key identifier:   A9:B7:F1:B7:8A:55:32:93:A1:CA:02:C6:4F:5C:AB:16:4C:31:2C:C9
Certificate issuer:       /CN=56640C9EF0849E2AEBA73F54AE67BFC1539CEA42
Certificate serial:       2EB78D90D6FCDC06061561B9DC73C672EE0207DA
Authority key identifier: 56:64:0C:9E:F0:84:9E:2A:EB:A7:3F:54:AE:67:BF:C1:53:9C:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa
Signing time:             Thu 04 Apr 2024 02:32:48 +0000
ROA not before:           Thu 04 Apr 2024 02:27:48 +0000
ROA not after:            Thu 03 Apr 2025 02:32:48 +0000
asID:                     264241
IP address blocks:        168.196.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.crl
                          rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 21:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b7:8d:90:d6:fc:dc:06:06:15:61:b9:dc:73:c6:72:ee:02:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56640C9EF0849E2AEBA73F54AE67BFC1539CEA42
        Validity
            Not Before: Apr  4 02:27:48 2024 GMT
            Not After : Apr  3 02:32:48 2025 GMT
        Subject: CN=A9B7F1B78A553293A1CA02C64F5CAB164C312CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:d5:8a:b1:91:b4:54:50:26:2a:46:16:11:
                    c9:6b:4d:af:6f:7a:fa:50:39:c4:f5:da:3d:b7:d9:
                    34:26:94:95:45:a2:ac:72:45:51:2b:7a:45:b7:35:
                    62:a3:e4:7f:08:e8:90:3f:9a:cd:8a:dd:6b:a2:a2:
                    80:d0:fc:db:f6:66:ea:b0:f1:23:d8:51:49:be:75:
                    c6:0d:90:3f:58:54:b2:00:3a:c7:5e:5b:97:30:fa:
                    20:e0:a7:41:a6:c3:65:c9:31:2b:e6:b6:a7:28:ff:
                    70:1e:c3:09:cc:9d:9c:04:43:c1:d0:c5:38:5e:49:
                    0f:8f:5e:a6:13:17:8f:75:88:0c:c6:de:c9:07:5e:
                    7b:d0:46:74:2a:9b:b4:3a:37:1d:0f:97:42:58:c6:
                    f9:a2:85:86:05:ce:aa:ac:1e:0b:d5:58:dd:f9:12:
                    8d:74:36:7c:4a:3d:f4:93:1c:76:99:bb:19:80:5d:
                    6d:bc:a6:a0:29:1d:5f:b2:90:c4:f9:d3:3a:ba:5f:
                    01:59:14:48:29:35:a1:66:ab:53:b4:2c:b4:2a:12:
                    29:51:65:06:c6:b3:35:e8:dd:1c:38:12:f4:fa:84:
                    cc:b7:74:d8:25:9b:43:c6:e3:89:b6:d2:18:cd:33:
                    a1:04:8c:9a:7a:24:dd:e5:77:8a:b5:61:01:ac:ad:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B7:F1:B7:8A:55:32:93:A1:CA:02:C6:4F:5C:AB:16:4C:31:2C:C9
            X509v3 Authority Key Identifier:
                keyid:56:64:0C:9E:F0:84:9E:2A:EB:A7:3F:54:AE:67:BF:C1:53:9C:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/3136382e3139362e382e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:d6:69:8c:f1:d9:a8:23:2e:18:4e:63:18:fc:31:9a:04:
         8f:27:cb:3a:e0:2f:40:b4:1e:64:95:14:99:be:b4:88:33:b6:
         49:5a:29:79:9a:79:2b:98:a2:4f:3a:0d:2f:3f:a0:f1:14:99:
         6d:5e:fb:0f:e8:b6:33:75:22:b5:61:ab:6c:f2:97:20:40:c1:
         0a:02:23:9f:33:69:6e:9c:49:44:e8:e2:f1:9f:74:e7:04:43:
         d7:c5:86:c4:e7:4b:e6:a0:98:23:8a:73:a3:38:f2:d7:e6:00:
         80:12:16:d1:44:59:dd:f9:0d:34:4b:17:94:2f:64:39:ca:c8:
         84:22:df:90:a0:07:24:87:c7:fa:8d:de:5c:b4:8d:cd:a9:15:
         e1:36:d6:a7:81:e8:8a:2d:2e:e2:b3:f3:74:6f:fe:5a:04:5e:
         ed:d5:d9:67:31:3d:fe:df:b1:02:b2:fb:82:bf:6e:0a:1f:3d:
         d4:a3:bb:d1:e5:dc:c9:1b:24:73:f7:d7:f7:2b:03:38:2f:24:
         1e:d9:e2:e5:68:b5:ca:3c:02:8a:f2:e6:24:ae:bc:3c:24:87:
         7a:17:25:16:e4:6e:76:76:14:0c:42:f9:8e:4a:d3:31:89:de:
         8a:43:b0:f7:0b:eb:64:7c:92:a2:2f:79:87:70:c5:c8:64:43:
         b0:ee:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:15 2024 by rpki-client on console-ams.rpki-client.org