Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa
File:                     3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa (raw, json)
Hash identifier:          dT1caPmJRgoMpkooLCh+7k0Av70jbc8ranNz6ZYDdik=
Subject key identifier:   CC:46:E3:61:E9:D8:2E:20:1D:D4:1E:FA:D8:67:A2:60:B4:C5:25:5E
Certificate issuer:       /CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
Certificate serial:       5F604CB2315598717D3B6CB15B7BC1DF444CBAD6
Authority key identifier: E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa
Signing time:             Thu 04 Apr 2024 00:22:49 +0000
ROA not before:           Thu 04 Apr 2024 00:17:49 +0000
ROA not after:            Thu 03 Apr 2025 00:22:49 +0000
asID:                     265169
IP address blocks:        167.249.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl
                          rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:4c:b2:31:55:98:71:7d:3b:6c:b1:5b:7b:c1:df:44:4c:ba:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63A041BE4EC9A73C342C10EECB20754B5BD248D
        Validity
            Not Before: Apr  4 00:17:49 2024 GMT
            Not After : Apr  3 00:22:49 2025 GMT
        Subject: CN=CC46E361E9D82E201DD41EFAD867A260B4C5255E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3e:24:52:de:c1:74:2e:00:10:2b:d3:83:4d:
                    d5:63:d5:ee:d3:e1:7d:c6:b8:9e:69:a0:51:eb:c7:
                    c5:d4:11:ee:e3:36:dd:04:33:be:af:e8:df:c4:f1:
                    aa:54:d5:6e:3e:8f:c2:02:a7:2e:3e:44:45:a1:18:
                    e4:4c:a7:84:bd:f7:bf:fe:89:87:24:4f:6f:a7:f0:
                    41:d6:b3:bb:fe:fb:ec:e3:4b:d5:94:10:0e:0c:45:
                    2a:c6:18:48:67:96:89:e1:59:11:07:1f:8a:9f:49:
                    a9:1a:5d:df:fe:58:e0:db:89:ed:56:a0:e2:86:92:
                    fc:c7:8b:2f:29:4a:43:01:93:94:87:17:32:7b:59:
                    49:5b:53:bd:ef:ad:bb:36:a3:75:38:6d:dd:6a:91:
                    a9:13:50:21:27:36:b6:1d:09:61:db:61:5a:8e:e7:
                    63:da:5a:b3:05:81:d7:32:03:7f:e3:df:47:c8:c1:
                    7e:a6:da:53:5f:c1:39:b6:c2:09:93:55:02:a2:ed:
                    52:5c:bb:ca:4d:1d:9d:90:73:55:06:d5:16:15:88:
                    72:0f:c6:c0:8a:9f:a3:e5:4a:08:fa:ef:18:2b:80:
                    00:ad:18:8c:e0:55:71:9b:90:a5:04:8d:06:cb:1a:
                    dd:05:96:ef:c0:be:d8:80:68:48:55:ab:99:00:c9:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:E3:61:E9:D8:2E:20:1D:D4:1E:FA:D8:67:A2:60:B4:C5:25:5E
            X509v3 Authority Key Identifier:
                keyid:E6:3A:04:1B:E4:EC:9A:73:C3:42:C1:0E:EC:B2:07:54:B5:BD:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63A041BE4EC9A73C342C10EECB20754B5BD248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXvcwTmHYXAcGGmn4ZPXUVJm6x9VPAmbpbUARgjvHJRH/1/3136372e3234392e38302e302f32332d3233203d3e20323635313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:fc:b2:23:09:43:50:0b:fd:8f:17:04:fd:22:61:8a:9d:
         3c:31:9d:34:17:a6:af:8a:75:52:39:12:ed:d5:ab:96:cf:cb:
         83:b0:55:14:25:4b:17:d8:f2:13:70:a6:4c:3c:9b:c8:e2:97:
         f6:00:3f:ba:08:df:89:bb:61:73:81:02:76:fa:95:07:11:0c:
         c4:9e:8a:ad:04:8f:ba:dc:fb:34:11:da:35:ee:8c:a4:9a:e2:
         27:63:b2:f4:91:1e:df:a0:90:4c:fc:2f:b1:a7:65:73:19:9a:
         87:0f:f8:36:2c:3d:f0:d2:4e:2a:02:ab:03:1d:74:a5:c0:2a:
         f7:b8:96:5a:f8:41:d8:10:fc:ff:01:9e:2c:a7:ff:51:53:34:
         d7:50:66:8f:7d:4e:ae:a0:87:26:de:18:60:68:2a:df:61:a9:
         fb:4e:3a:10:8b:7d:68:25:3f:fc:de:17:e2:9c:c8:69:84:42:
         a0:35:1f:e2:40:a7:b0:0b:30:5b:a8:68:6a:41:57:5c:6a:bd:
         1f:32:3e:ef:6e:20:c0:b8:45:03:7e:95:c0:93:40:29:23:7f:
         4a:19:3b:e7:3b:75:70:e3:3b:af:1f:fe:b8:31:a4:63:d7:1c:
         86:0b:38:8c:ee:9d:0e:ee:53:de:be:3c:7a:c0:8e:ab:f3:c2:
         47:da:c4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org