Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa
File:                     3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          tkbauZl6Dwnyzf/xVX+3Gj1p6m28c6MiSVyfsMX7Guk=
Subject key identifier:   13:B0:BA:C3:8F:49:66:CA:73:ED:9E:02:43:CC:08:19:E3:27:39:88
Certificate issuer:       /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial:       4328C360651C9257021028E8F0678067EC4923CD
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa
Signing time:             Thu 19 Dec 2024 18:17:51 +0000
ROA not before:           Thu 19 Dec 2024 18:12:51 +0000
ROA not after:            Thu 18 Dec 2025 18:17:51 +0000
asID:                     262530
IP address blocks:        168.196.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:28:c3:60:65:1c:92:57:02:10:28:e8:f0:67:80:67:ec:49:23:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
        Validity
            Not Before: Dec 19 18:12:51 2024 GMT
            Not After : Dec 18 18:17:51 2025 GMT
        Subject: CN=13B0BAC38F4966CA73ED9E0243CC0819E3273988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:50:e1:7e:82:be:35:08:53:4d:a5:d2:cf:
                    29:20:8a:b5:ae:64:bb:39:b7:f5:36:79:cb:d0:5d:
                    d1:31:8b:90:04:27:ff:e4:33:c6:43:aa:84:d9:a4:
                    29:87:3f:62:0f:c1:a0:20:8b:59:13:69:04:12:c9:
                    b1:59:68:da:f7:5e:36:a4:8a:e8:a5:da:bb:9d:22:
                    a7:a0:01:41:d8:d7:eb:16:83:20:34:6f:30:08:0c:
                    be:d2:df:33:18:34:d6:7a:e4:22:91:e6:ad:a6:7d:
                    46:10:86:35:9b:88:63:dc:86:fe:f8:44:f1:8a:d7:
                    f3:1b:01:a7:d2:0f:3b:42:20:d3:3b:9e:be:18:66:
                    73:dd:e1:52:0c:dd:65:32:3d:f2:b3:59:62:52:11:
                    f4:62:6c:a5:68:5f:eb:fc:2b:d8:c3:32:20:fe:db:
                    16:95:e6:53:e9:0e:e3:c7:6a:83:31:68:24:cb:86:
                    48:73:d6:de:52:92:89:94:49:ed:da:0e:32:a9:b2:
                    40:2b:d2:ed:ae:b0:21:fc:d4:0e:e8:11:5b:ec:ad:
                    1b:18:a7:f2:8b:11:d4:fe:5e:ca:4c:7a:01:5c:5e:
                    61:93:d1:09:3b:1a:69:e4:62:4b:c9:50:41:54:81:
                    ee:16:32:98:18:c2:eb:7b:ec:20:eb:27:77:70:95:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B0:BA:C3:8F:49:66:CA:73:ED:9E:02:43:CC:08:19:E3:27:39:88
            X509v3 Authority Key Identifier:
                keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3136382e3139362e3134382e302f32322d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:75:7c:df:5b:df:ba:9c:1f:3e:d8:63:c0:f8:cf:99:5e:d9:
         04:1b:ee:45:90:ec:b5:a6:9d:9c:f2:c3:c9:02:15:5e:41:f1:
         a7:63:f2:39:33:90:ed:82:e6:29:d8:2e:0e:00:b4:76:be:93:
         ac:f7:15:20:6b:32:8a:15:08:05:71:c2:86:d6:fe:8b:59:6a:
         d9:8a:57:dd:b0:79:80:cf:00:53:a9:dc:3a:e2:35:69:77:68:
         3e:f2:2e:11:60:b8:e2:db:2d:55:ae:de:0e:f9:21:80:12:5a:
         a3:9f:80:42:b5:ae:a7:87:97:66:bc:37:32:d1:5f:4d:33:a4:
         3c:bd:f2:65:c3:57:9f:1e:76:fd:81:f7:38:65:d9:a1:a3:5e:
         92:0e:eb:88:ab:5f:ad:33:f4:85:ab:08:f9:ce:7d:ec:5c:76:
         91:f9:e1:fc:76:cc:4d:06:30:ef:9e:84:c7:f9:22:09:e5:88:
         fa:02:f4:3b:d5:e7:69:13:10:9c:da:3c:11:5a:b9:62:55:ed:
         e9:84:b0:7c:b0:d9:16:aa:22:22:6f:95:3b:e2:bb:e6:d9:1c:
         91:3d:3f:1a:72:62:44:c8:54:6d:fd:d2:a3:00:d4:6b:42:2f:
         ed:b9:3c:b2:c5:a5:c7:d7:26:80:84:82:ce:d4:a3:fa:0c:6f:
         dd:24:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:34 2025 by rpki-client