Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3136342e3136332e302e302f32322d3332203d3e20323635393333.roa
File:                     3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier:          p/c3dHOLgSCXkXsn37Blx6C5KBNo4jxUm7NIXXK1Peg=
Subject key identifier:   6E:00:A6:07:A0:0B:7A:AE:2C:55:79:08:C3:94:A4:D0:3E:C8:D8:BC
Certificate issuer:       /CN=108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B
Certificate serial:       102C5395B4C8107D6C1EC0852FB171B6E40F4A74
Authority key identifier: 10:8C:C3:E7:A5:B6:3C:7A:E8:A3:B1:DF:F7:9B:8E:68:5A:96:82:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3136342e3136332e302e302f32322d3332203d3e20323635393333.roa
Signing time:             Thu 08 Aug 2024 13:45:47 +0000
ROA not before:           Thu 08 Aug 2024 13:40:47 +0000
ROA not after:            Thu 07 Aug 2025 13:45:47 +0000
asID:                     265933
IP address blocks:        164.163.0.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.crl
                          rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 04:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2c:53:95:b4:c8:10:7d:6c:1e:c0:85:2f:b1:71:b6:e4:0f:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B
        Validity
            Not Before: Aug  8 13:40:47 2024 GMT
            Not After : Aug  7 13:45:47 2025 GMT
        Subject: CN=6E00A607A00B7AAE2C557908C394A4D03EC8D8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:b4:de:7f:e1:8e:e0:73:b5:09:70:cb:bd:
                    2a:a9:33:e6:11:cd:dc:2d:9b:41:83:87:fd:a7:74:
                    8b:48:99:eb:8d:71:f4:b6:8f:95:66:35:cb:a5:3d:
                    09:9f:5b:bd:da:37:a1:8d:fe:f4:21:8c:1c:56:08:
                    92:3a:b2:75:fe:b4:80:c1:e3:a6:2d:55:f7:03:7b:
                    a6:aa:c0:12:12:2c:f5:d4:97:b1:ef:ae:84:84:7e:
                    6e:33:94:90:94:11:34:22:c7:0c:e8:48:f9:8c:8e:
                    29:33:a4:b6:6f:56:09:34:7a:59:97:83:a5:66:a9:
                    79:69:d4:c9:6f:ac:0a:b9:8a:cf:e7:af:57:15:43:
                    17:f5:3e:4c:6b:a8:44:ec:a8:af:13:63:16:b7:aa:
                    02:20:71:81:e6:1a:62:6b:71:f9:21:97:e3:a2:7b:
                    11:73:d4:e4:2f:49:6e:dd:5a:bf:ae:de:94:cf:6a:
                    17:15:0e:3e:d3:6e:1c:a9:09:48:f0:b2:f0:43:45:
                    1e:ea:62:ff:70:f4:15:19:23:b9:83:be:70:3f:42:
                    22:fe:c9:40:8e:5e:91:88:4d:ab:57:d3:8f:da:ce:
                    24:ae:4b:08:02:cb:2a:dd:8c:52:69:38:f5:21:37:
                    1c:e0:9e:95:03:20:be:76:f4:3d:21:51:bc:21:f5:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:00:A6:07:A0:0B:7A:AE:2C:55:79:08:C3:94:A4:D0:3E:C8:D8:BC
            X509v3 Authority Key Identifier:
                keyid:10:8C:C3:E7:A5:B6:3C:7A:E8:A3:B1:DF:F7:9B:8E:68:5A:96:82:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3136342e3136332e302e302f32322d3332203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:93:7c:a2:52:8a:f9:b1:99:7c:5c:b4:6d:ee:06:1e:9c:e3:
         ef:43:0d:c7:19:83:2f:45:fc:ce:2b:f6:cb:a1:af:57:ca:e9:
         67:3c:54:68:68:d3:bc:ab:89:57:0a:29:52:84:18:0f:f2:2d:
         83:c2:d0:83:31:05:6b:e1:ce:b7:c3:5e:81:54:18:79:4d:6b:
         84:45:cb:ba:c9:f3:86:6f:d1:10:1c:7f:06:fa:11:bf:fe:28:
         25:2f:5e:58:35:c7:26:63:69:a0:17:93:e3:f3:72:27:4b:24:
         88:d2:8c:37:85:78:3e:b3:b4:ca:f1:4b:cb:fb:5f:bd:8a:84:
         61:6c:55:e5:5a:0f:ba:9c:f9:42:64:01:ba:a9:35:21:02:71:
         36:3f:9b:92:f2:f6:8f:70:57:fd:b7:f0:ac:e0:af:59:5b:ad:
         29:56:f6:86:a3:3e:7b:8a:59:0f:43:23:9c:ee:ea:3a:76:c9:
         74:5a:46:d6:da:21:5c:fb:57:89:55:f4:89:b6:b4:44:e2:da:
         25:37:09:47:21:81:9e:9f:c3:77:e5:69:fd:43:27:ac:ee:63:
         7b:ac:ac:b8:da:f8:f2:96:38:99:36:e4:98:60:9d:c9:00:9c:
         86:65:fc:a6:70:c5:6a:40:cb:00:2e:e5:81:16:11:f9:4d:99:
         f6:67:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:39 2024 by rpki-client on console-fra.rpki-client.org