Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa
File:                     3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa (raw, json)
Hash identifier:          ZI1pERRUAMiP7Gxbk3LMfB2VXGVEX5Ze56TMJNBa/uk=
Subject key identifier:   50:16:73:1B:5B:20:E6:96:EA:E1:64:D2:25:0B:07:BE:C2:3D:4F:22
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       71680D8DDE4A387FCB0468891DE0CBEACD7A2019
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:58 +0000
ROA not before:           Thu 15 Aug 2024 17:06:58 +0000
ROA not after:            Thu 14 Aug 2025 17:11:58 +0000
asID:                     266551
IP address blocks:        160.238.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:0d:8d:de:4a:38:7f:cb:04:68:89:1d:e0:cb:ea:cd:7a:20:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:58 2024 GMT
            Not After : Aug 14 17:11:58 2025 GMT
        Subject: CN=5016731B5B20E696EAE164D2250B07BEC23D4F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:cf:79:0f:a9:dd:c0:f8:9d:7a:20:9e:c1:
                    be:ac:2f:69:ea:a7:b9:73:5b:88:96:b0:ea:60:b0:
                    8f:0a:c6:f5:20:4f:2d:ba:50:c1:11:86:61:5c:fc:
                    22:12:ff:5a:26:8b:a5:26:30:e6:4a:b2:01:18:e5:
                    4e:26:4f:83:52:09:60:93:89:ca:15:13:ab:a1:e9:
                    bb:ab:8b:b9:71:07:95:94:d5:27:82:0e:2f:7c:ab:
                    46:15:1f:61:67:ad:e9:fa:99:bb:7f:95:6e:77:d9:
                    de:ee:1d:f9:b1:ce:96:92:98:34:0f:f1:3b:45:9e:
                    98:63:3f:13:ca:53:14:7e:79:4c:b1:08:32:26:74:
                    70:59:7f:fb:71:9e:b9:76:b3:d4:e5:d5:5f:eb:9d:
                    70:e9:15:e9:fd:17:a3:10:5a:a0:a9:f6:90:f9:cb:
                    14:77:a5:7f:05:c8:31:1a:33:44:4b:85:cf:fa:90:
                    81:76:e5:34:f1:53:c7:fd:69:ea:45:05:7e:1f:26:
                    47:3a:0a:1b:b8:71:ac:52:b9:19:79:3d:15:3e:cc:
                    37:86:f8:4d:c2:6f:24:87:6b:45:14:e3:31:f0:fb:
                    a2:8c:af:96:e7:7d:f8:25:fa:78:86:9b:38:51:4e:
                    a6:f8:c0:33:94:3b:75:66:94:16:14:e2:1a:08:25:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:16:73:1B:5B:20:E6:96:EA:E1:64:D2:25:0B:07:BE:C2:3D:4F:22
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:23:72:64:c9:2e:86:37:bc:ee:27:f9:ad:3c:0d:45:3e:
         26:33:3f:ab:4f:5b:23:fa:fb:65:08:4a:e0:85:99:18:09:b3:
         ad:f3:cb:9d:39:fd:9a:28:67:92:62:0d:53:8a:69:b1:84:61:
         8a:9c:30:ab:7d:b2:21:7d:75:19:3d:dc:00:ff:b0:92:bd:73:
         f7:08:0d:ed:a5:7d:cd:f1:70:a8:17:d8:ca:fc:c3:46:61:02:
         3a:05:7b:1e:e5:27:12:c8:fc:92:2e:d8:ae:91:7e:f5:c8:8e:
         35:86:5d:76:2b:9e:c5:e0:d3:08:f0:c5:a8:65:03:e6:d1:e6:
         eb:23:c7:a9:df:97:5a:3b:6d:83:28:91:e7:7b:15:d8:1e:97:
         e2:9c:b6:32:0b:39:8f:79:63:09:09:06:59:cd:b8:75:9a:f8:
         bb:9b:6b:5b:f4:1b:21:8a:60:35:9b:47:b4:76:7a:31:ea:94:
         55:24:9f:e0:d2:ef:f2:89:b5:33:df:2f:f7:7e:48:4c:85:4f:
         0f:4c:32:7c:df:45:56:2d:e9:13:b2:61:0b:21:d8:77:e2:16:
         e4:73:4f:4e:10:fe:12:7e:cf:08:7a:39:ab:4e:cb:90:f2:a6:
         cd:43:77:36:9f:8b:bc:0a:8e:ab:1c:4c:00:60:f4:41:62:5f:
         11:92:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org