Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          MY1pGttXxvswk2O8iNL8wvHyQwUMPfriCMuEpknvgKU=
Subject key identifier:   26:F9:8A:82:B4:17:DE:E0:E0:63:BE:E4:13:4D:F9:E2:0D:A4:93:EB
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       3C392EAB2B668B5D5335FDBFD8E99F498DABEFED
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa
Signing time:             Thu 04 Apr 2024 23:59:32 +0000
ROA not before:           Thu 04 Apr 2024 23:54:32 +0000
ROA not after:            Thu 03 Apr 2025 23:59:32 +0000
asID:                     265364
IP address blocks:        168.205.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:2e:ab:2b:66:8b:5d:53:35:fd:bf:d8:e9:9f:49:8d:ab:ef:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Apr  4 23:54:32 2024 GMT
            Not After : Apr  3 23:59:32 2025 GMT
        Subject: CN=26F98A82B417DEE0E063BEE4134DF9E20DA493EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:44:d3:1b:ef:36:92:04:7c:d7:88:42:04:
                    80:cc:e5:04:c9:28:03:0c:cf:08:84:81:51:11:2d:
                    86:c7:d7:f8:ae:c5:49:de:c1:ef:f2:e0:51:07:76:
                    8e:a1:d7:f6:03:7c:8b:e2:af:4a:6c:65:cd:83:61:
                    d6:25:f0:00:a0:e1:12:94:d7:0d:b4:10:89:f8:ff:
                    aa:8a:ec:5b:c9:38:ce:9e:27:56:aa:b7:25:3b:41:
                    e8:58:b8:59:51:1a:4d:c2:b0:80:6e:1c:49:09:6b:
                    53:57:8c:df:57:47:a5:d5:f0:8a:6a:c3:c4:9b:7c:
                    f8:fa:26:29:cf:37:3d:ad:c4:9b:6a:6a:61:17:d5:
                    a9:be:a1:b7:d7:fe:0b:be:5d:99:96:bd:da:1c:ac:
                    52:85:bc:0e:60:a8:b7:9b:d9:0f:5f:14:9a:d0:fc:
                    db:f7:b0:7b:50:ec:65:8b:d0:14:c0:3d:0d:9a:80:
                    5f:2d:d8:90:26:58:19:4d:82:09:d3:fe:f3:31:e4:
                    98:5e:a1:75:81:7e:c4:c4:92:41:5c:c3:a3:f8:2c:
                    55:d2:14:11:38:a1:56:d4:d9:da:3e:b6:80:78:e8:
                    95:02:e1:09:12:23:a2:49:00:d1:33:2f:c8:cd:8b:
                    9c:3c:ce:e9:8c:b9:e6:70:a1:12:c1:01:c3:9c:a2:
                    1b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:8A:82:B4:17:DE:E0:E0:63:BE:E4:13:4D:F9:E2:0D:A4:93:EB
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:30:29:8f:0b:0e:75:e4:26:88:cf:da:cf:9e:1c:b0:bf:
         6f:66:1d:b8:82:b9:a7:28:52:0a:89:28:f6:4a:5d:15:fe:3c:
         54:d2:a1:01:cd:14:d1:3b:74:a0:08:58:16:c8:d7:27:79:8a:
         e5:37:45:0a:5d:ff:e6:d1:03:11:26:1f:98:63:89:d3:6e:d7:
         7e:d4:32:07:31:54:61:9b:d0:08:aa:e9:64:46:26:d3:d2:e2:
         6b:38:32:33:6f:b6:14:cc:f2:24:2f:36:63:13:46:e5:98:1b:
         1a:70:33:bd:27:ba:b5:a8:a5:6d:37:bd:bc:e5:8d:94:3c:c6:
         1c:f6:75:fc:bc:8b:17:8f:72:b3:5c:2a:34:04:31:c4:3b:1f:
         b9:45:ab:45:4b:f3:ea:04:e3:bd:04:e8:66:4a:51:32:88:ba:
         c5:c6:e0:09:b9:cf:c6:9d:15:33:33:0b:26:66:99:60:b5:de:
         b3:c5:f0:24:d6:bf:a3:58:71:dd:6c:4d:a9:42:63:33:81:1a:
         12:2b:82:ad:14:4b:5c:45:2e:38:7f:c6:7d:3f:8c:73:e9:f6:
         0e:b1:44:35:58:4e:cd:82:98:04:91:ac:42:6e:bb:1f:ae:b5:
         51:9e:52:e6:08:8f:f4:44:83:43:78:33:e6:67:8d:5c:2b:fa:
         c9:14:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:40 2024 by rpki-client on console-ams.rpki-client.org