Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa
File:                     3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa (raw, json)
Hash identifier:          2Lx2htAf9C/h5leUHs+BFVl8iFmSjPzEUEhzHwDa4W4=
Subject key identifier:   F0:CD:5D:87:21:F4:EA:C1:66:CA:4E:7F:7A:24:15:6E:33:0E:A7:81
Certificate issuer:       /CN=16F8F64C61FE260843FAE22C766336BB86DEC1F1
Certificate serial:       204A4840BDF0153817FE8D7D7B0653BEE5CF4640
Authority key identifier: 16:F8:F6:4C:61:FE:26:08:43:FA:E2:2C:76:63:36:BB:86:DE:C1:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F8F64C61FE260843FAE22C766336BB86DEC1F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa
Signing time:             Wed 03 Apr 2024 19:40:12 +0000
ROA not before:           Wed 03 Apr 2024 19:35:12 +0000
ROA not after:            Wed 02 Apr 2025 19:40:12 +0000
asID:                     263278
IP address blocks:        186.227.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/16F8F64C61FE260843FAE22C766336BB86DEC1F1.crl
                          rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/16F8F64C61FE260843FAE22C766336BB86DEC1F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F8F64C61FE260843FAE22C766336BB86DEC1F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4a:48:40:bd:f0:15:38:17:fe:8d:7d:7b:06:53:be:e5:cf:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F8F64C61FE260843FAE22C766336BB86DEC1F1
        Validity
            Not Before: Apr  3 19:35:12 2024 GMT
            Not After : Apr  2 19:40:12 2025 GMT
        Subject: CN=F0CD5D8721F4EAC166CA4E7F7A24156E330EA781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:c9:ed:3b:13:27:82:db:20:40:81:d0:c3:
                    c4:48:8b:44:3d:48:0e:1e:4a:f9:91:a1:35:a1:46:
                    5f:d2:a8:69:7d:47:8b:6a:bc:6b:41:3e:bf:04:1f:
                    f8:ab:5a:78:51:25:83:97:7e:fa:5b:44:6b:03:ff:
                    c7:9f:20:f4:89:32:93:1a:6a:9d:bc:db:2c:7b:ee:
                    7f:fb:a0:c8:67:61:26:35:b3:b3:46:d6:aa:e9:73:
                    ef:fa:ab:c2:0f:a9:9c:45:27:f7:08:5f:8d:db:2c:
                    31:e0:d4:5d:d1:5b:f6:d5:c5:c1:bd:1a:c6:2b:2b:
                    d9:66:bd:f4:65:83:af:8e:f7:46:69:70:e2:50:e0:
                    20:93:89:61:4b:fa:bf:7e:e5:44:7a:c7:ae:65:41:
                    64:ad:c9:05:a9:af:c6:53:9a:36:36:69:2d:59:17:
                    63:2a:13:ca:57:f3:2e:0d:c4:5e:12:56:ba:10:ab:
                    16:97:46:07:95:a0:1d:5c:c7:23:c8:87:1d:6e:28:
                    36:ed:e2:7b:cf:53:95:c4:d6:8f:07:59:a1:bb:41:
                    d6:e9:94:f4:0c:61:dd:6f:d9:18:7d:92:a5:09:07:
                    7e:58:12:1e:82:8a:15:15:b5:86:46:74:e1:a6:b2:
                    58:37:95:ad:da:ea:46:af:f1:1b:69:02:a3:d9:76:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:5D:87:21:F4:EA:C1:66:CA:4E:7F:7A:24:15:6E:33:0E:A7:81
            X509v3 Authority Key Identifier:
                keyid:16:F8:F6:4C:61:FE:26:08:43:FA:E2:2C:76:63:36:BB:86:DE:C1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/16F8F64C61FE260843FAE22C766336BB86DEC1F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F8F64C61FE260843FAE22C766336BB86DEC1F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sV7DTz7dqmbJyqEgQ7BsT9PCwBew26NyGvYDi97pL3s/0/3138362e3232372e3132342e302f32322d3332203d3e20323633323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:a7:61:a8:dd:fa:e0:92:5f:53:ff:ab:41:3a:02:bc:12:
         ce:cf:49:3e:7a:77:a2:90:c9:80:13:43:aa:3d:79:29:f0:25:
         b0:7d:e4:59:e2:5a:bc:02:ed:44:24:e4:8d:f8:2c:38:62:79:
         d9:b0:d0:05:93:5b:0e:7a:0c:62:34:de:27:23:12:0e:c1:b8:
         01:a8:b9:5c:ee:22:15:90:fb:37:db:e1:7f:ba:67:a0:65:dc:
         81:4f:68:57:71:3c:12:f7:d1:27:3c:fe:28:3d:38:0b:54:19:
         f4:84:3a:18:e8:1f:ae:28:f0:72:b4:e8:f3:b0:e0:49:14:fa:
         35:8a:1d:df:af:10:7e:cc:27:32:43:03:01:cb:9b:da:eb:7d:
         12:5a:cf:34:68:b9:f2:ff:39:40:63:e2:ba:c4:39:26:0a:03:
         9d:06:14:ba:8b:97:a0:3a:d4:62:7b:b6:e0:bf:72:79:ff:4a:
         38:a0:98:c3:e5:c4:ae:e2:7d:28:a8:e4:41:32:4b:4f:e6:5c:
         4a:12:a9:ae:bb:5f:3c:d5:6d:9e:dd:dc:9e:a4:39:66:0f:12:
         52:5b:e5:ef:6a:1f:ba:9d:78:d5:71:9f:fe:77:3f:4e:c5:17:
         91:fc:6b:4a:de:ff:c1:eb:b0:34:82:0e:70:ea:5a:77:75:ca:
         f9:49:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:36 2024 by rpki-client on console-ams.rpki-client.org