Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
File:                     3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier:          w7mVVPAUSucxtVJ6KsCVGYlsxgYbOABJ3zfE+fHlAiA=
Subject key identifier:   F1:77:80:0D:7A:AC:0E:BF:2E:E8:77:CC:88:1D:46:08:24:0F:D4:E8
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       555BE07B4953BEA73B5C1D977C313B3773AC9BBD
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
Signing time:             Mon 08 Jul 2024 19:43:07 +0000
ROA not before:           Mon 08 Jul 2024 19:38:07 +0000
ROA not after:            Mon 07 Jul 2025 19:43:07 +0000
asID:                     53143
IP address blocks:        168.195.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:e0:7b:49:53:be:a7:3b:5c:1d:97:7c:31:3b:37:73:ac:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:07 2024 GMT
            Not After : Jul  7 19:43:07 2025 GMT
        Subject: CN=F177800D7AAC0EBF2EE877CC881D4608240FD4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:20:a5:7c:8b:14:d0:cd:81:da:f3:3e:3a:
                    bf:fe:d0:12:66:4f:39:d1:47:04:16:f8:1b:52:bc:
                    25:07:2e:c5:3c:6c:01:71:62:26:45:f7:e4:55:53:
                    10:75:48:db:47:aa:27:64:91:bd:85:09:45:19:c3:
                    c5:5c:1d:b9:b5:a7:27:d4:29:72:c1:69:d7:2b:06:
                    16:d1:63:77:3c:b6:4d:a2:3a:63:32:8e:f7:87:49:
                    68:8e:b4:7a:a1:c9:4a:ff:e8:8a:07:ef:b6:2b:85:
                    f8:7f:ce:76:20:a3:7e:7f:2a:26:d4:87:da:1d:8c:
                    98:1b:74:47:4a:84:17:45:ac:a9:7f:1e:ac:5e:7a:
                    81:79:44:f0:a9:7c:89:f1:66:2e:c0:1f:6d:d1:ff:
                    2d:9f:36:f5:ec:4b:d0:3e:4d:88:47:43:7d:25:d3:
                    cc:d1:ae:1e:c2:5e:7a:ed:e8:8e:ab:1a:23:9e:0f:
                    4a:f4:fc:9a:59:94:7c:75:8a:68:9b:2b:b4:77:b9:
                    61:68:0d:99:52:c8:e4:c6:07:b8:7f:83:e4:bd:cc:
                    0a:b3:c4:08:73:3b:42:1a:02:25:a5:be:27:74:7b:
                    97:53:6b:21:cb:41:ae:ae:cc:d0:e9:3c:d7:dc:a8:
                    97:af:f8:24:49:34:75:52:aa:f4:27:3a:9f:99:ce:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:80:0D:7A:AC:0E:BF:2E:E8:77:CC:88:1D:46:08:24:0F:D4:E8
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:ba:00:5c:9a:2a:63:c7:95:0b:84:a9:ed:7e:92:73:06:c5:
         a7:d0:36:a6:d1:95:81:c4:7a:ca:6c:20:a6:a7:e9:a9:2c:51:
         1a:9a:b9:88:13:51:35:a2:ba:4c:26:a5:91:4f:db:2d:f7:67:
         d5:21:9e:60:e3:63:de:1e:8a:bf:cc:4c:b3:2d:86:4d:49:a6:
         04:3f:d2:d7:0d:48:76:ae:2f:36:df:a7:e2:f0:31:76:b6:94:
         95:39:91:db:ce:33:9c:ee:13:af:f2:6e:30:d3:35:3f:8e:d1:
         3d:cc:35:60:11:3c:1d:9b:51:f3:84:d1:96:33:da:e6:24:24:
         d3:a4:34:17:1e:a6:ad:f1:88:9a:38:88:d4:a0:d6:9e:e8:d1:
         75:96:b3:be:82:4d:91:63:56:94:a8:6a:0a:c2:f8:db:a3:68:
         f3:ee:b2:a8:00:3d:4c:64:01:29:c6:3d:d5:48:ba:6f:81:3c:
         99:5d:17:ed:e7:15:2a:82:8e:a4:d8:b5:a7:79:e3:d0:8c:d8:
         e7:3c:7a:7c:7c:a7:23:ce:e5:0e:57:20:d5:57:f5:7e:20:c1:
         53:43:e5:61:9d:82:81:fb:97:6a:d9:97:c2:bb:dd:83:61:91:
         c0:77:ba:12:73:41:85:71:35:ee:30:84:5b:a3:48:c7:72:1d:
         6f:b3:e6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:58 2024 by rpki-client on console-ams.rpki-client.org