Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
File:                     3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa (raw, json)
Hash identifier:          vcOaP7K66jAyrQJWnG9SpPD4bVL72RWrP8dfclFq97Y=
Subject key identifier:   F6:61:26:9E:A0:4D:DB:D6:71:C1:15:4B:9C:89:DB:E4:F3:95:B4:CC
Certificate issuer:       /CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
Certificate serial:       51B8F9B99B120D09E8AD783CDFB06D1ABE8DA7CC
Authority key identifier: DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa
Signing time:             Tue 15 Oct 2024 14:54:12 +0000
ROA not before:           Tue 15 Oct 2024 14:49:12 +0000
ROA not after:            Tue 14 Oct 2025 14:54:12 +0000
asID:                     264878
IP address blocks:        168.227.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl
                          rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b8:f9:b9:9b:12:0d:09:e8:ad:78:3c:df:b0:6d:1a:be:8d:a7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAC0A6260B90EE6F2F66BFB998F6D6370B219C76
        Validity
            Not Before: Oct 15 14:49:12 2024 GMT
            Not After : Oct 14 14:54:12 2025 GMT
        Subject: CN=F661269EA04DDBD671C1154B9C89DBE4F395B4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:ba:f1:a5:0d:82:ff:62:04:3e:f3:f2:e3:
                    0c:1c:6f:03:5b:c2:e4:bb:74:c4:ed:23:70:36:45:
                    56:f5:38:1c:04:2e:c5:b1:36:bd:da:06:ef:da:b1:
                    61:81:d2:f6:b0:9b:43:08:83:bb:3d:e3:2c:e0:68:
                    64:e0:d8:8c:be:b0:28:44:bf:7f:16:45:3f:94:2c:
                    fe:2f:87:6d:a9:a1:77:93:94:2e:1f:3f:1a:b0:6a:
                    62:c3:3c:51:22:74:2b:be:bd:4a:2a:43:b5:bb:04:
                    a8:72:19:7a:b0:84:a0:68:6e:e1:cc:01:29:d0:0c:
                    e2:d5:c5:7a:ae:16:bc:bc:1e:83:f1:d9:3b:61:58:
                    6b:d5:69:41:94:74:ec:51:4f:4f:b0:ce:41:80:63:
                    a1:ef:99:0a:3f:39:6d:0c:97:b8:b9:94:9c:37:cb:
                    27:9a:06:70:da:e2:0e:b9:1b:58:39:6f:02:4b:d4:
                    88:7e:85:f9:9e:f8:c6:05:76:d6:c0:f3:9f:17:da:
                    60:c2:e6:7e:85:cf:14:29:c0:a8:5f:99:c0:03:13:
                    09:3e:74:e1:b9:43:2d:92:e3:cb:34:21:e8:55:41:
                    07:9e:59:06:e5:c9:d2:1f:10:38:ce:da:c0:84:50:
                    37:7f:42:5f:47:7e:c5:1f:08:3c:68:8b:fb:d9:e2:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:61:26:9E:A0:4D:DB:D6:71:C1:15:4B:9C:89:DB:E4:F3:95:B4:CC
            X509v3 Authority Key Identifier:
                keyid:DA:C0:A6:26:0B:90:EE:6F:2F:66:BF:B9:98:F6:D6:37:0B:21:9C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAC0A6260B90EE6F2F66BFB998F6D6370B219C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ae4NTmLrAjgxBZKctYUzAmQBTE2jzjVEjoGm8x5rxWjD/0/3136382e3232372e3132302e302f32322d3234203d3e20323634383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:db:41:f6:83:71:00:f2:70:65:19:12:eb:08:ed:8e:eb:
         0b:6a:60:be:0e:91:bc:b6:95:ae:33:f0:b1:6f:aa:88:4d:c6:
         04:1b:d3:8f:41:e2:35:c6:74:72:21:39:66:d3:20:6f:22:ac:
         bb:3e:b4:b2:ce:37:43:59:39:b8:78:46:af:aa:ae:68:d7:26:
         58:a2:22:52:65:67:57:cd:9f:36:a7:1c:5a:17:76:f3:98:7d:
         2d:8e:e8:f9:b5:2d:0b:69:4a:23:5f:3f:b7:4c:60:71:de:33:
         b8:42:fe:5c:df:03:24:80:1b:55:2b:a5:8a:9f:f6:b3:0e:8b:
         d0:cf:1f:41:cf:dc:8e:38:b5:a0:10:28:21:54:c4:8e:6e:c8:
         5b:4b:24:dc:fd:b2:e8:4f:99:e1:63:e9:4e:75:cf:bd:64:31:
         50:9b:86:86:b6:09:af:69:f9:61:5e:b2:cc:ff:51:d1:2b:c5:
         c5:b4:da:13:0c:c2:cf:6d:d3:aa:d2:eb:c7:16:15:3b:77:0a:
         0b:73:b0:35:0c:87:bc:45:db:6e:92:bc:84:17:ab:1e:3e:94:
         73:8f:0e:c6:51:f8:a4:53:f9:ce:d4:17:a7:47:0a:4d:ff:e9:
         9a:e1:5e:8f:fb:49:17:f3:07:4e:04:b4:88:d6:1e:ab:a0:d5:
         db:83:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org