Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
File:                     3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa (raw, json)
Hash identifier:          KVJYKuyUNSLVkAyRereCIU+jZkIxhOwussZtbMwCyak=
Subject key identifier:   61:8A:F2:CE:3C:91:42:13:26:E3:D8:F7:A7:81:EE:4B:E7:41:52:FF
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       3A06AE9EDD8A314C90F4F9428FB04BE334C65087
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa
Signing time:             Wed 03 Apr 2024 18:30:31 +0000
ROA not before:           Wed 03 Apr 2024 18:25:31 +0000
ROA not after:            Wed 02 Apr 2025 18:30:31 +0000
asID:                     19200
IP address blocks:        168.232.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 02:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:06:ae:9e:dd:8a:31:4c:90:f4:f9:42:8f:b0:4b:e3:34:c6:50:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:31 2024 GMT
            Not After : Apr  2 18:30:31 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:44:fa:74:d0:69:7c:65:d7:35:c7:e8:89:
                    6f:5b:4b:cb:bd:57:1d:c1:51:41:35:26:73:53:7d:
                    5f:99:d9:9a:4f:65:7e:00:01:2c:a3:ec:3b:42:cd:
                    d6:bb:18:89:60:42:47:a7:65:e2:5e:f2:79:66:71:
                    bf:79:87:8a:dd:d7:d7:de:5f:5c:28:bf:59:ff:c2:
                    ce:3e:46:4d:62:9c:45:b0:27:2a:43:62:f0:3f:5d:
                    be:ad:58:43:30:66:cd:32:2f:84:b8:9f:c7:f6:06:
                    44:37:ae:41:01:00:c8:78:9f:6e:50:3d:a8:8c:47:
                    b4:58:82:c8:80:a3:64:82:8c:6d:dd:6a:af:c9:04:
                    8e:4e:f8:49:e2:4f:8d:28:c2:68:2d:2c:b4:19:74:
                    28:c8:e2:98:a6:9c:20:1f:10:50:ce:40:2a:85:63:
                    8a:e8:14:6c:eb:91:36:e6:48:04:a4:0d:1f:ed:eb:
                    b0:4f:47:52:c0:4d:69:56:96:fd:eb:7e:74:1c:d4:
                    1a:91:dd:0a:43:9b:4b:1c:1b:56:60:6b:9b:f0:84:
                    14:40:bc:3e:a7:46:cf:0c:50:fc:6b:b8:fa:24:a0:
                    e7:c4:99:98:6f:95:7d:41:24:03:b2:e7:c5:9b:f3:
                    af:1a:1f:f5:09:1e:c8:4e:4b:85:60:3a:77:3a:8e:
                    eb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8A:F2:CE:3C:91:42:13:26:E3:D8:F7:A7:81:EE:4B:E7:41:52:FF
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3136382e3233322e3233362e302f32322d3232203d3e203139323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:31:ae:96:6f:3a:d2:e4:83:67:92:e8:e9:ea:49:f5:18:
         9b:93:65:f9:3b:4e:ff:47:90:4c:61:e7:28:f7:c6:f0:a9:37:
         8d:7c:c0:72:85:d1:13:8d:86:ad:f8:36:fb:4d:93:7a:93:cb:
         da:bb:44:fe:ce:8f:d3:9d:98:a4:a4:15:36:b6:9b:d6:97:dd:
         cb:7b:94:13:9d:04:b2:af:20:ed:c5:40:f0:65:1c:68:c3:52:
         05:13:f6:6f:72:e0:ce:1f:4d:1e:97:db:93:a5:ab:6a:7e:17:
         e7:ec:36:59:05:a5:f0:88:cb:1c:5f:a3:eb:b9:a8:5f:74:59:
         dd:3b:c9:c0:3f:f5:94:02:2f:98:b8:e1:f5:23:47:b5:0f:df:
         31:b6:e7:f1:89:93:f6:b5:fa:23:48:68:f8:41:4a:a9:0a:79:
         7a:44:87:20:fe:d0:37:60:20:f7:be:3c:f2:57:fd:41:8f:24:
         66:50:47:3d:ab:69:14:79:17:87:d7:63:6d:c0:83:f1:e8:c6:
         b5:f3:ff:0b:a4:d6:f8:b0:f4:ea:96:12:6d:76:7e:37:18:8a:
         01:13:09:63:bd:cd:cf:8a:3f:8e:33:5d:a4:04:40:d5:23:30:
         78:80:e7:fa:50:d9:19:6c:c9:db:f4:02:97:75:11:68:2c:5a:
         51:12:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 03:35:13 2024 by rpki-client on console-ams.rpki-client.org