Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa
File:                     3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa (raw, json)
Hash identifier:          ZUyfzjioWyCcCEvp3Cei0aUAu12nPmMvjhg+oynvapk=
Subject key identifier:   88:36:4A:2D:C0:32:80:48:8D:84:17:7F:26:A0:9D:22:07:6A:E7:91
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       7FA29018EBE8C7C732C3463D51B560AFA46D558A
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa
Signing time:             Wed 03 Apr 2024 18:31:58 +0000
ROA not before:           Wed 03 Apr 2024 18:26:58 +0000
ROA not after:            Wed 02 Apr 2025 18:31:58 +0000
asID:                     267489
IP address blocks:        192.141.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl
                          rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a2:90:18:eb:e8:c7:c7:32:c3:46:3d:51:b5:60:af:a4:6d:55:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Apr  3 18:26:58 2024 GMT
            Not After : Apr  2 18:31:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:3f:00:83:83:40:b7:91:fd:42:df:98:ae:
                    95:85:22:b9:a3:84:57:36:92:6c:ab:9d:2c:b9:2c:
                    87:8e:2d:6a:30:be:ca:d2:76:de:56:07:f0:0f:f2:
                    f3:17:dd:18:9e:80:bf:40:3f:2d:94:41:ee:e9:5f:
                    8d:44:d5:14:1f:fa:23:d9:b1:87:e9:64:83:0b:64:
                    83:ee:12:e2:40:ea:f7:8f:8d:4d:09:0d:95:4b:5d:
                    93:b8:7e:f8:3d:3c:10:68:23:80:c8:d7:3c:b8:7e:
                    3b:4c:72:68:c0:b6:b3:da:d6:27:3c:1d:91:1f:45:
                    99:8d:78:82:da:f4:89:ba:88:54:55:e8:09:77:1c:
                    bb:c8:0a:35:03:e8:40:04:91:cf:34:24:4b:8b:61:
                    44:df:3e:28:eb:b7:3e:61:76:c3:a9:0b:23:1c:b0:
                    3b:3e:8f:2c:8a:3c:f8:f5:cc:1e:1e:df:64:e7:00:
                    6d:37:ba:b8:d8:d2:84:0d:b8:4c:6f:c4:fd:70:35:
                    9d:ea:eb:a7:a9:4e:f4:4d:d8:60:ce:12:7a:a1:da:
                    d5:a9:35:a4:be:76:c6:8d:49:1b:16:d8:40:b6:f2:
                    44:af:92:82:22:d5:bf:d9:2a:ed:37:e5:c8:4f:ff:
                    37:30:15:43:ea:8a:cc:eb:ac:c3:37:b2:4f:b3:05:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:36:4A:2D:C0:32:80:48:8D:84:17:7F:26:A0:9D:22:07:6A:E7:91
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/3139322e3134312e3136302e302f32322d3234203d3e20323637343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:fc:f1:c2:fc:fc:5a:65:49:f2:6b:70:92:72:25:d6:65:
         75:a7:d4:60:9a:a0:d0:ef:93:03:e7:13:74:c3:35:17:51:a5:
         1c:83:5a:fc:0b:66:c8:84:17:c0:3e:a3:64:25:87:71:a9:65:
         d6:e4:fe:20:e0:1c:ea:8f:ae:78:9a:f9:1a:10:d1:b7:ce:08:
         43:b3:08:b2:dc:17:80:82:f4:da:17:8f:bc:c5:90:89:db:a5:
         73:c2:9e:14:47:05:20:07:0e:25:8f:e0:d2:23:f0:df:62:51:
         b1:4f:50:3a:b7:1f:67:15:c5:a4:40:e2:46:ff:1d:ff:6c:cf:
         1f:2d:a6:b2:c4:b6:ca:4c:39:7a:c4:0a:23:af:39:2e:da:c5:
         41:d3:48:71:5c:62:5b:72:59:b9:d0:ba:bd:e0:ef:61:7d:4f:
         78:f8:ac:7c:87:e6:70:12:af:b3:29:0c:b1:f6:f6:d6:65:63:
         df:81:e1:89:84:21:33:95:f7:85:c2:ab:d5:0d:44:18:df:81:
         ef:20:c7:70:b7:01:42:9a:d4:83:99:25:e4:42:23:9a:47:e7:
         f8:44:70:0a:f9:b1:7f:c6:7e:05:4d:4a:f0:57:ec:6b:28:4c:
         e0:82:f7:a5:fd:5d:d1:20:0a:ff:d7:ba:3c:3b:7c:13:77:1d:
         ba:74:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org