Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa
File:                     3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa (raw, json)
Hash identifier:          Nwsw+aJKEoLFTES/66VZFBufn5J3ZsPAZmWkB5ipIBA=
Subject key identifier:   AA:06:28:71:C0:39:2C:A9:75:67:BA:F5:ED:4B:B0:94:FB:F2:8F:A8
Certificate issuer:       /CN=0B07367A81B15A220D69956D612B34AE5A9E594E
Certificate serial:       3A18211B8566FBF18B9626B48764E0ED6495B13A
Authority key identifier: 0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa
Signing time:             Thu 04 Apr 2024 13:14:12 +0000
ROA not before:           Thu 04 Apr 2024 13:09:12 +0000
ROA not after:            Thu 03 Apr 2025 13:14:12 +0000
asID:                     264906
IP address blocks:        168.228.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl
                          rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:18:21:1b:85:66:fb:f1:8b:96:26:b4:87:64:e0:ed:64:95:b1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B07367A81B15A220D69956D612B34AE5A9E594E
        Validity
            Not Before: Apr  4 13:09:12 2024 GMT
            Not After : Apr  3 13:14:12 2025 GMT
        Subject: CN=AA062871C0392CA97567BAF5ED4BB094FBF28FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:1e:79:1a:32:ec:a3:d6:e9:1a:ec:45:4c:
                    d1:b0:9f:db:51:86:2b:5e:f1:8e:de:f1:0d:be:60:
                    50:24:bb:12:ee:51:89:f6:a0:df:b3:82:29:4c:b8:
                    42:f3:f9:22:3f:e8:8f:33:a0:be:1b:e9:b0:7d:ce:
                    c8:ce:bb:16:ce:92:f5:96:a0:cc:06:2d:0a:3a:fd:
                    2d:d4:1c:36:a4:b7:6d:ca:4a:2e:96:28:9a:72:8a:
                    67:83:bd:84:3a:3c:f2:a2:61:05:52:80:5f:e7:e1:
                    a2:6e:67:77:cb:93:88:c4:ab:be:9d:74:a6:85:0c:
                    ec:ba:d9:28:1f:bc:bb:f3:0a:bb:61:00:ba:1c:85:
                    91:fe:cf:58:79:55:c7:4d:64:32:2b:cb:4d:0d:c6:
                    30:0c:22:ec:33:da:66:d2:8a:7b:e2:66:55:21:cb:
                    2f:8e:6e:90:e5:4c:6e:6f:ce:16:ab:07:cf:e2:a4:
                    0c:f1:2c:d3:59:f4:b1:9f:c8:ca:f3:89:f1:04:8a:
                    53:be:e2:09:04:d8:12:26:26:9a:5b:02:3b:c3:e5:
                    04:98:9d:da:34:db:35:4c:00:e9:26:39:6a:b1:4b:
                    03:4f:e8:15:c8:81:5f:25:a0:dd:62:60:0a:6b:dd:
                    50:bb:d4:fb:9e:44:15:74:5a:41:1e:02:84:12:7f:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:06:28:71:C0:39:2C:A9:75:67:BA:F5:ED:4B:B0:94:FB:F2:8F:A8
            X509v3 Authority Key Identifier:
                keyid:0B:07:36:7A:81:B1:5A:22:0D:69:95:6D:61:2B:34:AE:5A:9E:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/0B07367A81B15A220D69956D612B34AE5A9E594E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B07367A81B15A220D69956D612B34AE5A9E594E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bZ4nh4DhATEfKMrvwMfUBEQZtWhB42FxZDsVNMFp5bV/1/3136382e3232382e38342e302f32322d3234203d3e20323634393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:fc:e5:55:53:f4:7d:82:0a:25:23:cb:a4:81:82:82:4c:
         08:42:9b:f6:39:f5:c3:69:a9:a3:8d:3a:34:99:9a:73:9d:bc:
         4f:a0:ce:9e:f7:94:cc:fd:2f:55:ae:8d:55:5c:4e:0d:3a:e0:
         c6:95:b0:0b:ba:e9:3a:38:d8:7c:52:66:4a:bc:82:12:1c:6b:
         e8:48:05:d3:30:2f:1b:1a:02:fd:0e:b7:44:ff:ae:69:4f:72:
         6a:68:ac:ca:2f:ab:f3:47:21:43:b6:37:b9:c1:ee:1c:58:87:
         9f:88:a4:51:81:f5:c4:da:ae:96:e4:5e:7d:eb:c3:0d:08:21:
         8a:f7:f0:06:bc:14:3b:5d:2d:bf:da:54:99:b0:1d:16:2c:88:
         a5:d6:f0:17:c4:08:be:e2:f2:57:f1:93:1f:a2:1a:f2:85:09:
         6f:da:e6:10:ae:4a:be:bc:77:af:51:c3:44:62:25:de:a8:54:
         4b:8b:23:90:81:ed:3e:d3:0b:83:49:ff:fa:66:12:3e:b6:c9:
         ff:69:f3:09:0b:5c:5a:cd:6b:7d:eb:49:70:2e:42:be:c6:a0:
         e3:bd:71:68:d5:7b:43:f6:fe:15:26:c0:57:39:84:fe:f2:18:
         84:c3:35:94:c3:8d:13:d0:3b:7d:90:19:30:bc:b6:53:18:ea:
         8e:64:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org