Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa
File:                     3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          0MzoL23lmkuJNJ8R01QN4lCHQCuD2w0xz8KKkmBv+HA=
Subject key identifier:   D7:A4:F8:75:DE:80:95:5D:52:E2:C2:83:9A:65:67:69:FF:31:5D:07
Certificate issuer:       /CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
Certificate serial:       3DA89952FEF19D4ED7C379AAF371A43F4D3882D5
Authority key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 09 Sep 2024 15:04:37 +0000
ROA not before:           Mon 09 Sep 2024 14:59:37 +0000
ROA not after:            Mon 08 Sep 2025 15:04:37 +0000
asID:                     263665
IP address blocks:        168.196.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a8:99:52:fe:f1:9d:4e:d7:c3:79:aa:f3:71:a4:3f:4d:38:82:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
        Validity
            Not Before: Sep  9 14:59:37 2024 GMT
            Not After : Sep  8 15:04:37 2025 GMT
        Subject: CN=D7A4F875DE80955D52E2C2839A656769FF315D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:ef:67:6b:34:55:24:40:a1:92:84:73:f3:
                    e4:0f:d8:c7:08:4a:0a:96:58:a1:0c:13:e1:c1:f8:
                    72:c1:03:d5:c2:f8:0f:45:40:c6:d1:19:2b:fa:6b:
                    ae:5e:a6:4c:03:77:b3:c7:ee:0e:95:7d:72:e4:61:
                    23:a3:a1:57:51:53:2a:fb:3d:31:f8:59:c8:1c:43:
                    88:de:30:50:ee:54:26:e8:d1:bc:af:5f:c0:21:b4:
                    e4:56:ad:5c:d9:a4:26:47:d0:1c:0e:8e:5a:f7:cc:
                    b2:7c:d1:ce:a1:b1:ec:2d:cc:6b:d5:41:a1:b5:e0:
                    4b:01:60:e3:9c:a6:9d:0d:5a:2b:cc:db:dc:bf:73:
                    e9:46:bf:c0:d8:3a:6e:be:e8:4b:56:a9:cc:ca:07:
                    6e:2e:13:64:fd:6f:a0:85:3b:5f:f3:07:22:53:b7:
                    57:eb:40:dc:78:6f:6b:b7:6e:83:f2:a7:fc:95:50:
                    85:7e:af:d3:28:c3:0b:8c:d4:93:89:bd:89:c6:19:
                    79:27:fc:34:94:d0:9c:49:e3:42:1f:92:e3:fe:ff:
                    39:26:05:50:00:4c:48:9b:a5:e1:a8:e1:8c:70:b6:
                    c6:af:f0:16:37:6f:44:8e:78:28:19:e6:86:68:42:
                    19:6e:31:e7:89:df:5d:e2:5b:51:f7:6a:be:99:92:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:F8:75:DE:80:95:5D:52:E2:C2:83:9A:65:67:69:FF:31:5D:07
            X509v3 Authority Key Identifier:
                keyid:8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:b5:52:8d:7c:13:5e:68:11:68:f6:12:23:39:8b:34:37:
         d2:40:cc:35:0b:76:94:a1:ef:29:be:14:cf:62:42:43:74:49:
         71:00:2a:25:7c:1b:69:44:69:ec:f2:b8:3f:a7:16:72:38:14:
         3c:b4:35:12:bc:53:a0:d4:48:36:98:d4:5a:2e:c5:71:a4:42:
         92:cf:ac:5c:13:d0:04:f0:63:db:fd:9f:9f:38:c3:b8:be:b1:
         99:9d:44:f2:d0:ad:1a:fc:15:b4:71:84:8c:f2:51:d6:ba:a5:
         61:c9:1c:08:3c:5b:15:08:51:2e:55:e5:71:3a:20:57:c9:30:
         39:c7:76:e5:07:e8:1e:24:81:0d:a2:8f:ef:d0:e1:3b:de:be:
         5e:a1:65:e6:3c:80:de:87:97:54:ce:a7:e0:b8:74:2b:cd:7b:
         1e:75:2e:9b:34:d6:49:1b:79:23:81:43:9d:47:62:47:7c:93:
         cf:1e:dc:d0:8d:a8:61:7d:89:30:d3:89:62:df:1e:85:50:bd:
         fd:82:5e:bd:a7:e2:e9:f8:94:95:d6:ab:8c:05:43:e5:1a:18:
         e8:fc:d5:a9:e4:b6:1f:a7:f6:3e:15:48:58:a6:5a:c3:62:62:
         68:48:0d:2e:67:c5:72:6a:c0:d5:d6:87:9b:dc:4e:9d:f9:85:
         8f:c5:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:32 2024 by rpki-client on console-fra.rpki-client.org