Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa
File:                     3134332e302e3138382e302f32322d3332203d3e20323634313836.roa (raw, json)
Hash identifier:          Dc2NQ/LQpdWPAwv3VBRFxpLspDsnXcrj6d0sUDVuikg=
Subject key identifier:   7B:48:43:C6:42:79:2A:93:2C:A9:9F:F9:A2:05:ED:CE:9B:41:C8:8D
Certificate issuer:       /CN=86160D26C9FFA6E6DC351A634D107BD6D498A694
Certificate serial:       2518C00848E62E7B0AE944E22C9F523C8C687D37
Authority key identifier: 86:16:0D:26:C9:FF:A6:E6:DC:35:1A:63:4D:10:7B:D6:D4:98:A6:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa
Signing time:             Thu 04 Apr 2024 05:14:20 +0000
ROA not before:           Thu 04 Apr 2024 05:09:20 +0000
ROA not after:            Thu 03 Apr 2025 05:14:20 +0000
asID:                     264186
IP address blocks:        143.0.188.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.crl
                          rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:18:c0:08:48:e6:2e:7b:0a:e9:44:e2:2c:9f:52:3c:8c:68:7d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86160D26C9FFA6E6DC351A634D107BD6D498A694
        Validity
            Not Before: Apr  4 05:09:20 2024 GMT
            Not After : Apr  3 05:14:20 2025 GMT
        Subject: CN=7B4843C642792A932CA99FF9A205EDCE9B41C88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:93:b0:4a:23:7b:f2:a9:8a:19:c2:d9:24:
                    94:68:7b:04:43:b0:f5:98:11:6b:18:5e:3c:49:b6:
                    f3:a8:4b:19:2f:3a:ad:7f:5c:6c:e6:57:40:2e:38:
                    aa:ba:f1:40:b1:91:d9:55:b7:c6:2e:5d:50:3f:ee:
                    b4:da:04:d2:f2:27:6c:0d:e7:26:c7:12:7c:cb:79:
                    75:a9:b2:50:8f:37:1f:94:5b:73:83:25:cc:64:5e:
                    3e:94:cd:ea:ba:d6:b3:74:9f:37:ae:d8:1d:6a:25:
                    c5:f5:4d:28:d9:80:c1:4d:c8:48:eb:0d:bd:80:bd:
                    57:eb:4e:6e:93:c6:8f:e3:d8:35:dc:f1:ec:ca:2b:
                    91:81:6d:06:0c:0e:e2:ce:31:b2:29:14:13:e1:ef:
                    54:18:0f:0e:80:80:7e:a8:ad:53:7c:63:b3:ea:1e:
                    be:55:6a:45:73:6a:55:24:57:35:bb:5b:6d:c0:61:
                    1e:f6:1c:a4:a0:53:11:7c:b3:34:e4:73:81:21:56:
                    ad:20:2d:0a:28:8a:32:ab:9d:7a:7f:c2:05:cc:30:
                    1e:10:a0:79:43:aa:ae:7b:4c:32:67:e5:0a:09:0f:
                    d3:0c:99:bf:f5:30:de:1a:4d:01:15:0b:4b:cf:97:
                    f5:50:89:32:96:26:ad:21:a3:60:0e:eb:38:a9:c8:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:43:C6:42:79:2A:93:2C:A9:9F:F9:A2:05:ED:CE:9B:41:C8:8D
            X509v3 Authority Key Identifier:
                keyid:86:16:0D:26:C9:FF:A6:E6:DC:35:1A:63:4D:10:7B:D6:D4:98:A6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86160D26C9FFA6E6DC351A634D107BD6D498A694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/1/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:00:b3:ff:b2:25:9e:89:fb:cd:4c:aa:33:5c:eb:67:ce:
         a0:af:73:71:89:aa:c5:8e:c3:d7:1f:7e:c4:5c:6e:e4:a6:b0:
         7c:1e:19:06:09:97:d2:29:5e:24:90:1b:90:64:1d:86:7f:24:
         f3:88:f2:2d:a7:4b:e3:25:75:94:43:c3:52:d0:17:23:4d:f5:
         5e:d9:c7:17:91:79:55:c0:56:e3:19:11:7c:63:9b:0c:45:73:
         b4:43:e4:18:bf:42:9d:cb:ce:ce:c6:c1:2f:44:2e:8d:08:5e:
         18:74:ec:bc:d4:d2:98:d4:81:fa:6d:fa:76:f1:c4:ca:da:e0:
         cb:38:42:13:6b:54:05:8c:6e:4e:65:32:04:83:16:35:16:4d:
         1d:13:2c:1a:d8:ed:b9:66:6d:78:b1:87:8b:d0:fe:5b:99:77:
         cb:71:3f:94:be:82:d5:9c:6d:bd:61:91:28:81:52:b0:1e:fa:
         50:73:87:e0:f3:0b:fe:86:7f:48:f7:e2:f7:1a:cd:23:00:9e:
         d5:25:12:a6:fd:26:29:25:a8:57:4b:ae:f9:c6:4a:92:ad:eb:
         0a:71:3c:d8:52:d6:84:bc:1e:f2:12:8d:1e:1d:81:e1:37:7a:
         ac:1f:a4:a9:ae:7f:5c:1b:21:14:c9:99:05:39:28:db:fe:5e:
         6d:e9:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:09 2024 by rpki-client on console-fra.rpki-client.org