Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32322d3232203d3e20323633313436.roa
File:                     3138372e38362e3230342e302f32322d3232203d3e20323633313436.roa (raw, json)
Hash identifier:          9LQUy+jXC4srkGRPSqfZ3j9G6wUCXB/UJjJ80b9shIk=
Subject key identifier:   D1:3F:4E:2B:7B:75:17:20:69:E2:CF:F6:6E:14:3B:15:93:3B:F4:A4
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       534EA801BFBDCD75805CB627A3F3F814692DD693
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32322d3232203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:52 +0000
ROA not before:           Thu 04 Apr 2024 07:23:52 +0000
ROA not after:            Thu 03 Apr 2025 07:28:52 +0000
asID:                     263146
IP address blocks:        187.86.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4e:a8:01:bf:bd:cd:75:80:5c:b6:27:a3:f3:f8:14:69:2d:d6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:52 2024 GMT
            Not After : Apr  3 07:28:52 2025 GMT
        Subject: CN=D13F4E2B7B75172069E2CFF66E143B15933BF4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:df:74:64:b2:e9:89:dd:63:4c:49:2b:34:
                    c1:c0:58:c4:ea:0c:8c:4e:b9:c6:47:b8:2c:0c:ea:
                    73:fc:77:f3:f5:9d:bd:fa:d8:96:0f:97:e3:75:a0:
                    ee:8b:3f:3f:64:59:d6:cc:20:06:82:4d:b0:9d:f3:
                    64:83:d4:9e:a1:96:c2:44:c6:ac:4f:be:20:d9:2a:
                    46:27:fb:2d:ad:a4:30:18:57:42:ad:b0:07:36:9c:
                    3f:ed:09:68:1b:e2:79:b0:fd:a1:57:2c:1a:9c:99:
                    ec:e9:74:ff:d3:1f:7d:67:d1:44:ba:e6:be:de:d5:
                    7e:01:a0:84:7e:a7:74:91:cc:0d:74:09:c8:25:dd:
                    ab:ff:d8:bd:fe:86:f9:5b:40:f9:52:99:43:ea:73:
                    0d:d1:86:15:59:57:eb:82:df:ec:33:68:b0:31:85:
                    72:5d:21:12:e7:f8:f0:42:3c:cd:ff:a5:b5:76:51:
                    40:8c:b7:bd:c2:94:36:35:8c:8a:c3:bb:f0:21:ec:
                    d7:ad:ec:c5:41:4f:fd:b4:8a:6f:5c:66:5d:26:66:
                    e6:79:71:5c:53:bf:b4:67:00:7b:76:82:0e:aa:04:
                    da:84:39:ac:8c:40:4c:4b:e8:d2:cb:f2:94:a6:56:
                    9d:21:7b:81:be:c0:e8:bf:6f:8b:76:2e:b4:6a:64:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3F:4E:2B:7B:75:17:20:69:E2:CF:F6:6E:14:3B:15:93:3B:F4:A4
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230342e302f32322d3232203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:55:bd:f7:df:18:24:ed:28:71:01:45:7a:32:ce:47:95:
         b9:97:a8:52:0a:cf:c7:4a:12:eb:00:64:f1:9a:31:6a:ff:f6:
         89:86:31:fe:e0:aa:62:f8:b9:02:0c:39:e1:f8:fd:78:03:4a:
         a5:f3:90:f5:b8:a8:38:ce:0f:7f:74:35:32:70:4d:be:c5:c4:
         96:95:ba:ae:08:19:de:54:fd:8a:27:a4:3d:e8:68:ed:23:ce:
         3f:6d:9f:c7:4a:6a:c8:1c:34:a1:58:c1:ba:70:47:11:f5:c7:
         d3:7b:de:4c:13:4d:87:15:73:ef:37:73:be:35:61:9a:30:44:
         e8:19:8d:3b:aa:6a:a3:72:7b:91:16:32:22:1b:1f:c5:4a:c4:
         8a:7d:80:46:43:6f:27:7c:d3:31:44:8c:4a:3f:f9:e9:92:55:
         4f:a4:df:c0:61:14:85:03:5e:6c:6f:cf:2d:ca:a8:fe:5c:71:
         dd:82:12:c9:ee:05:b5:7a:9e:e6:ae:92:38:9f:8a:13:67:8d:
         15:5b:09:e4:e6:53:cd:c8:cd:20:b3:ed:86:c8:d5:e4:e5:76:
         af:27:ae:d0:66:34:a0:0c:c3:cf:b8:84:01:84:3b:f6:8e:b9:
         40:2a:60:c7:1f:d1:cc:e7:6a:b4:f8:0e:27:60:66:c6:4c:21:
         4b:95:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org