Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa (raw, json)
Hash identifier:          1aIqcUuA+JWfnrEnW7Uy31J31FUNPAj7mMjK+DpRV5s=
Subject key identifier:   69:68:C8:51:BA:B5:40:B0:4F:92:93:42:62:CC:86:0E:12:B7:0A:78
Certificate issuer:       /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial:       2FCE075222E61B22AA497EFE2935BFABC124E89C
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa
Signing time:             Wed 15 Jan 2025 20:05:54 +0000
ROA not before:           Wed 15 Jan 2025 20:00:54 +0000
ROA not after:            Wed 14 Jan 2026 20:05:54 +0000
asID:                     264948
IP address blocks:        168.232.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 07:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ce:07:52:22:e6:1b:22:aa:49:7e:fe:29:35:bf:ab:c1:24:e8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
        Validity
            Not Before: Jan 15 20:00:54 2025 GMT
            Not After : Jan 14 20:05:54 2026 GMT
        Subject: CN=6968C851BAB540B04F92934262CC860E12B70A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:85:53:e9:b3:62:9c:b2:68:95:33:ad:84:
                    f0:35:a9:d3:e1:0a:c1:28:ab:e6:b8:d4:96:09:14:
                    af:d0:51:8b:51:5c:d3:9c:42:fe:b9:62:ca:d6:80:
                    25:f6:20:ac:cb:3f:0a:b6:11:f2:30:f4:4a:1a:02:
                    e4:4c:68:ca:28:7d:eb:54:2f:39:ba:50:7b:5c:99:
                    0f:90:2e:18:fa:df:61:5d:1f:66:db:ee:61:89:16:
                    52:d9:9c:b6:a4:4a:d8:94:78:66:f3:bd:33:9c:73:
                    5f:84:41:63:d3:1c:d1:b4:6c:a8:5d:e5:59:08:77:
                    83:a9:71:55:30:4f:0c:4d:5b:b0:01:9e:3c:89:da:
                    e5:24:45:99:45:0f:90:7a:64:16:da:65:eb:22:d3:
                    82:d8:a0:91:79:5d:74:03:32:d7:a6:8a:ae:2d:19:
                    6d:1a:00:a3:03:2b:de:ae:5f:1f:aa:f3:68:0d:0a:
                    a2:82:4c:53:e5:29:0c:70:0e:5d:97:6a:ac:a3:59:
                    49:76:30:4c:de:74:a0:5b:3b:07:6d:19:16:91:14:
                    61:2e:73:e0:05:64:d7:ed:b9:fa:6f:6c:ef:96:4a:
                    83:5f:24:b7:c9:89:d1:9e:f7:11:54:00:78:fd:c5:
                    e9:05:a4:f1:a4:d0:34:c4:2f:4d:cd:1e:ba:f6:df:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:68:C8:51:BA:B5:40:B0:4F:92:93:42:62:CC:86:0E:12:B7:0A:78
            X509v3 Authority Key Identifier:
                keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3232203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:88:b2:34:64:5f:44:3d:bc:62:64:7a:6e:6f:bd:f6:cf:
         fd:27:fd:41:10:b1:77:12:0f:bf:ef:70:7b:62:c3:c2:46:45:
         e4:d8:28:7e:eb:ae:6d:bc:da:b2:4f:3b:68:b6:79:e9:67:d2:
         ae:0e:cb:7a:06:68:0f:74:b1:37:c9:32:46:19:6e:6f:16:78:
         ab:2c:82:f6:63:57:fd:7d:c4:28:23:ca:9c:ed:29:72:88:97:
         52:81:be:69:38:b8:b2:8f:18:40:b1:77:75:3c:92:26:46:b9:
         26:7d:94:8a:ab:f0:ca:f5:74:10:ce:f6:5c:d2:91:0c:ba:1e:
         18:f5:07:1b:52:ea:84:19:2c:f6:37:fc:bb:17:2c:62:3d:72:
         73:55:0b:b1:f0:4e:4a:de:73:46:5a:45:15:0c:52:c5:71:6c:
         f3:a2:0f:8b:3e:c4:4b:a0:26:eb:df:98:4c:bf:e6:b0:7d:ec:
         ed:e8:77:08:74:fa:76:25:01:6b:94:43:46:f1:72:68:a2:da:
         50:a4:8e:6e:bd:17:09:f5:5a:b3:24:22:50:9d:75:fa:0a:94:
         8a:d3:54:79:a8:ff:88:dd:2f:e4:8d:8f:b8:18:05:91:81:b7:
         c2:a9:88:20:1a:cc:78:ec:93:16:4a:5c:e1:1b:67:66:35:6e:
         57:aa:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:50 2025 by rpki-client