Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa
File:                     3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa (raw, json)
Hash identifier:          UR2zd5L+f8ebzeC68X4M0h1AwtDLAW+2/s4rSqZ5J4s=
Subject key identifier:   AE:06:EE:1F:96:7A:A9:E3:8C:C4:B4:5C:02:31:BF:8B:0D:18:B2:F2
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       1E1E68AC8AEEA119BACCC07503E06089A5835AB7
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa
Signing time:             Fri 31 May 2024 22:40:38 +0000
ROA not before:           Fri 31 May 2024 22:35:38 +0000
ROA not after:            Fri 30 May 2025 22:40:38 +0000
asID:                     270764
IP address blocks:        189.127.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1e:68:ac:8a:ee:a1:19:ba:cc:c0:75:03:e0:60:89:a5:83:5a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May 31 22:35:38 2024 GMT
            Not After : May 30 22:40:38 2025 GMT
        Subject: CN=AE06EE1F967AA9E38CC4B45C0231BF8B0D18B2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:1c:3c:06:07:4e:28:0d:be:f9:e3:a3:4c:
                    c9:0e:58:86:22:c0:c8:ea:e7:a0:ce:7e:d5:be:58:
                    f6:9e:ec:3e:99:97:37:49:4f:35:1b:c6:6b:2f:d6:
                    1f:aa:87:bd:44:9e:e3:7c:08:ad:6f:4b:5d:6e:e4:
                    c5:d2:dc:4e:df:96:10:89:34:4b:4a:79:b3:da:8d:
                    41:26:27:81:5b:6c:6d:c1:e2:ec:ec:ea:59:61:2f:
                    85:5a:52:2b:74:02:fd:b0:fc:4f:cb:e3:ca:ef:51:
                    1a:a6:c6:92:df:48:21:e4:db:82:cb:e0:67:26:6b:
                    66:a9:c3:ca:68:20:7e:00:b9:83:a8:9a:8a:68:a2:
                    a1:89:fd:02:f9:39:4c:6d:a4:7e:d3:99:6e:e1:c1:
                    3c:b1:ff:16:06:a0:fe:cc:d9:74:19:51:57:e0:10:
                    be:2a:83:d7:1d:10:0f:d7:5b:99:2a:36:e4:ab:68:
                    86:5e:a6:af:fa:3a:bd:35:0c:e6:ee:9d:d2:ff:9a:
                    85:43:08:9e:26:c4:a2:63:14:6d:67:f4:01:05:34:
                    e9:d2:08:e0:5f:26:65:71:79:e5:b1:99:9b:3a:b3:
                    2f:c2:eb:84:b6:27:88:e5:e9:aa:50:86:bb:f9:a9:
                    aa:90:b7:c9:de:99:6e:ce:69:fd:f4:a6:a1:2e:bd:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:06:EE:1F:96:7A:A9:E3:8C:C4:B4:5C:02:31:BF:8B:0D:18:B2:F2
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/3138392e3132372e3136352e302f32342d3234203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:be:de:a9:0f:ab:7c:81:3b:b3:38:16:e5:6e:b7:4d:dc:
         bd:54:31:a2:5e:17:e7:eb:de:1a:67:a3:4a:5b:55:22:dc:b7:
         0f:ce:30:90:d6:a6:58:14:f0:06:51:d9:9d:07:ed:10:d3:a0:
         0e:67:e1:e1:02:75:c6:0b:7a:a2:9a:57:0f:94:b8:9e:91:47:
         70:30:59:4a:e6:30:13:07:fc:69:65:24:86:62:f1:65:34:32:
         45:72:3d:7f:87:6f:aa:8d:c6:94:30:3c:17:e6:18:65:15:ff:
         c8:47:a4:50:fa:a3:7e:66:83:29:3a:c1:cc:86:0f:6d:e8:13:
         9d:b3:48:4d:bb:32:16:54:17:1f:5a:7f:55:0b:54:6b:88:de:
         a2:8f:7d:39:d2:d5:87:fd:c1:5d:47:bf:0f:d8:dd:e2:bf:df:
         1f:8a:29:39:d6:84:b7:19:7d:e6:09:8a:12:b4:e8:c1:2e:d2:
         ea:4c:10:20:5e:35:1c:5f:5c:f0:e1:e6:61:ce:63:cb:11:7e:
         09:7f:b1:01:3c:44:45:b1:10:1a:22:de:a4:3d:cb:e7:07:9d:
         3b:1b:3d:2e:15:65:a5:51:71:0d:97:e7:ac:6f:ca:99:58:4c:
         84:ec:f7:a8:39:e0:4b:d3:d6:cc:d0:1d:2d:55:30:cd:2c:43:
         27:fe:44:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:10 2024 by rpki-client on console-ams.rpki-client.org