Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa
File:                     3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa (raw, json)
Hash identifier:          9STPKZYrcWg0LHwN7GO9IBjZGBQKoFGfOg/6AiycX+0=
Subject key identifier:   A2:3A:DA:49:6E:D5:DD:AA:1E:AB:FB:54:CE:9C:EB:65:9B:43:13:E5
Certificate issuer:       /CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
Certificate serial:       3A8A5D24E87C8E38861944ECB1AEA0528CD747F8
Authority key identifier: 5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa
Signing time:             Tue 23 Jul 2024 19:03:03 +0000
ROA not before:           Tue 23 Jul 2024 18:58:03 +0000
ROA not after:            Tue 22 Jul 2025 19:03:03 +0000
asID:                     265432
IP address blocks:        168.195.211.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.crl
                          rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8a:5d:24:e8:7c:8e:38:86:19:44:ec:b1:ae:a0:52:8c:d7:47:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
        Validity
            Not Before: Jul 23 18:58:03 2024 GMT
            Not After : Jul 22 19:03:03 2025 GMT
        Subject: CN=A23ADA496ED5DDAA1EABFB54CE9CEB659B4313E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:3a:b2:63:87:52:09:b0:bd:d8:62:8e:af:
                    70:15:c4:ee:22:5c:d7:03:6d:76:d6:64:47:c5:9b:
                    fc:cb:13:23:e1:b7:f9:e5:e6:74:73:d6:76:80:1e:
                    5f:eb:c1:9e:d0:72:7e:9c:5a:19:8f:f1:ee:dc:96:
                    b8:29:2b:bd:89:76:a5:ec:56:f4:fa:6b:12:01:c1:
                    20:d1:91:9e:eb:b5:52:e2:4a:f2:fd:63:11:f8:ac:
                    43:69:62:51:24:a8:ab:ef:45:83:c2:67:2d:c0:47:
                    02:6d:49:b3:36:f4:db:5b:a1:5c:87:d2:56:02:dc:
                    a2:64:2b:dc:99:2f:fb:fa:6d:1c:67:f2:b6:7d:4f:
                    2a:3b:0a:86:f2:62:06:13:d1:47:bc:e8:9f:7d:90:
                    b5:17:01:f0:7f:1a:72:7b:ac:b5:98:2a:a0:a2:99:
                    ef:62:8b:10:03:ff:1d:0e:19:bd:05:c3:3e:1c:f3:
                    e0:3e:3d:af:7d:53:72:c1:ad:7e:c5:46:e8:dc:bc:
                    60:a9:fe:99:0d:b4:1c:d6:a8:f9:7c:f6:6f:20:59:
                    26:cb:8b:1e:16:de:65:ee:3d:d5:0c:7f:6e:3e:a6:
                    80:78:d0:6e:a1:59:03:d4:b3:27:eb:7b:78:c7:50:
                    ff:05:3b:79:20:0a:9e:98:b5:5f:0c:ee:2a:fb:fc:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:DA:49:6E:D5:DD:AA:1E:AB:FB:54:CE:9C:EB:65:9B:43:13:E5
            X509v3 Authority Key Identifier:
                keyid:5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:33:58:6f:3a:00:c3:b2:c3:4b:a2:a8:02:67:bf:e3:24:9f:
         d1:0f:38:f9:f5:15:e3:40:d7:de:d7:91:08:9e:a0:ac:e7:93:
         28:79:12:46:99:b9:c5:42:a0:07:4d:c0:32:7b:b1:80:ec:f9:
         d0:3c:ac:c2:fb:64:0f:23:c6:9b:15:35:3c:39:2d:66:97:b3:
         c1:a8:a7:9a:f7:1c:57:58:09:7f:89:8e:98:12:74:58:ea:17:
         d7:d3:6b:d2:8a:66:8e:69:ee:9b:3b:87:2c:bd:40:43:fc:df:
         24:ac:00:13:9c:b7:c7:21:3c:72:07:40:39:9c:6b:16:e6:e8:
         72:fe:38:9e:5a:2f:8b:44:ce:7d:37:b1:db:d4:e7:89:62:9a:
         ee:e6:ff:52:13:97:69:2c:14:2c:ff:8a:b4:05:b1:2f:20:56:
         11:e0:84:74:21:37:d0:46:e2:5a:f6:dd:9c:aa:20:14:2f:e8:
         66:79:c3:e0:09:8e:35:52:8a:42:ea:86:26:4b:7d:78:d6:e6:
         8d:fa:60:93:f2:fd:58:01:a7:0b:73:30:fd:20:2a:32:45:32:
         c1:0d:cd:b4:62:93:59:0f:fc:e3:93:6a:a1:54:ec:3f:d7:cb:
         fd:6c:59:d9:dc:f4:26:01:00:63:b2:af:29:55:8e:6b:e6:ed:
         09:82:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:48 2024 by rpki-client on console-ams.rpki-client.org