Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          AqHhDTYQUSdzR052AjqUugKCPAQ/FtfFLDUmWFAN80Q=
Subject key identifier:   C4:98:32:92:4C:BA:3B:AD:3A:4F:8A:F4:64:DD:94:42:95:C2:E9:69
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       5DE828DB5FD7FD87009A51CD64C17F64A9D45BE1
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 04 Apr 2024 00:50:32 +0000
ROA not before:           Thu 04 Apr 2024 00:45:32 +0000
ROA not after:            Thu 03 Apr 2025 00:50:32 +0000
asID:                     265462
IP address blocks:        168.196.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e8:28:db:5f:d7:fd:87:00:9a:51:cd:64:c1:7f:64:a9:d4:5b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Apr  4 00:45:32 2024 GMT
            Not After : Apr  3 00:50:32 2025 GMT
        Subject: CN=C49832924CBA3BAD3A4F8AF464DD944295C2E969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:67:4e:c2:ec:92:a4:7a:36:ad:d9:d8:7b:
                    d8:94:25:62:08:55:42:93:78:b4:1c:d2:0e:3b:17:
                    d6:90:18:47:84:17:fd:f6:6e:69:f5:0f:3e:ea:c0:
                    1a:b1:63:b3:74:48:96:f4:fe:27:04:67:c4:25:8a:
                    25:88:44:75:a7:86:c9:f8:7f:99:01:db:96:5b:62:
                    4b:4e:09:99:50:35:9a:0b:24:e6:ad:2c:25:1d:d5:
                    af:76:44:f4:c0:94:3b:16:97:67:15:8f:04:fe:5d:
                    f8:0c:fd:4a:0a:ad:33:e7:fb:2f:83:07:df:05:42:
                    36:63:e7:b7:0c:a1:00:28:3c:aa:ed:4d:23:4e:a1:
                    51:de:9a:95:38:55:03:4a:7b:7a:4f:d5:0a:fe:70:
                    a0:4b:cb:4d:ff:1a:49:96:45:40:62:d7:0c:38:57:
                    44:57:41:5f:92:d6:7c:ab:1b:72:37:a7:fd:7f:bf:
                    49:63:44:dd:70:3a:4a:38:46:4e:75:5b:4d:e1:ab:
                    40:21:81:d0:eb:12:c4:2e:9a:aa:a7:6f:fe:44:6d:
                    5e:a8:7f:62:21:08:38:3a:15:f1:4e:e5:fa:50:95:
                    02:de:5e:0f:3a:72:71:6f:dc:32:2e:7d:cd:2f:c0:
                    73:a3:19:3c:18:25:96:6e:85:87:89:73:c1:32:b0:
                    14:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:98:32:92:4C:BA:3B:AD:3A:4F:8A:F4:64:DD:94:42:95:C2:E9:69
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232332e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:85:9e:fe:3d:6f:23:60:88:c5:52:e5:a8:b9:9c:0a:78:71:
         39:35:7f:11:d5:56:cc:cf:6e:f2:0a:a2:3b:7c:5f:38:da:c9:
         58:2d:ae:9b:ab:a9:39:fc:0b:d7:0e:7b:88:f7:87:1d:b3:e1:
         6b:34:99:f7:a5:7b:5c:28:4e:03:38:76:3d:d4:52:28:dc:38:
         98:3f:63:ba:56:09:4b:26:06:37:4d:47:aa:1a:99:c4:ed:d0:
         e3:5b:97:2d:b9:10:09:f5:73:c2:47:25:98:03:3f:11:81:63:
         e9:92:7b:76:11:ff:c5:03:bd:f3:fd:94:88:72:5d:97:f3:21:
         2e:2c:13:b3:c4:8f:8d:c9:48:81:75:a7:f6:0d:a2:d0:b1:0b:
         84:e3:d9:88:01:bb:c4:3a:0b:85:15:e7:5a:4b:73:f2:db:95:
         64:74:e8:07:db:22:15:e5:29:8f:b7:3a:ed:70:49:4a:f5:5f:
         6c:9f:37:67:4f:e7:09:5e:5f:20:9f:d6:73:44:1e:31:e3:5d:
         d1:7c:d3:35:11:34:dd:23:a7:54:bd:9c:82:e0:61:ad:a2:84:
         32:b3:8c:6b:0a:b2:59:82:5f:6e:83:bc:89:88:04:07:8b:2b:
         bc:da:c2:e4:de:b4:4c:be:2b:30:0b:81:db:35:f8:0f:f4:f1:
         99:1d:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:35 2024 by rpki-client on console-ams.rpki-client.org