Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa
File:                     3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa (raw, json)
Hash identifier:          lpSIBOgp3txBlloLDwSKAQ2fukLP1xB4vTSuzmzITTk=
Subject key identifier:   C1:B2:78:FD:9D:D7:5C:E7:73:79:0D:CC:22:AB:0A:3F:F7:74:F8:16
Certificate issuer:       /CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
Certificate serial:       06C49017F4E08AF6D75DF296EF8F61F5B34DB0C3
Authority key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa
Signing time:             Wed 03 Apr 2024 18:32:19 +0000
ROA not before:           Wed 03 Apr 2024 18:27:19 +0000
ROA not after:            Wed 02 Apr 2025 18:32:19 +0000
asID:                     270820
IP address blocks:        186.194.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl
                          rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c4:90:17:f4:e0:8a:f6:d7:5d:f2:96:ef:8f:61:f5:b3:4d:b0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D
        Validity
            Not Before: Apr  3 18:27:19 2024 GMT
            Not After : Apr  2 18:32:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:02:26:85:26:02:27:1f:ad:11:c1:73:ca:
                    72:b3:11:1a:3a:90:39:99:a9:50:8b:0e:3d:34:ef:
                    a8:ae:7e:5d:ff:a9:72:63:b5:d4:5c:c8:2d:01:56:
                    2f:06:55:b1:da:35:e6:a5:95:1c:e1:35:c1:fe:83:
                    6e:e5:b9:98:9a:6d:ef:f3:ee:ab:c5:78:21:48:14:
                    e9:b6:2b:de:4c:68:10:a1:d4:bd:60:39:93:84:9c:
                    85:8b:91:ac:07:e0:d5:70:88:ca:d5:c6:33:cf:e8:
                    67:8c:ca:26:f1:ea:f5:8d:83:60:fd:bb:20:ec:88:
                    46:e7:a4:94:40:22:5a:21:ad:f1:0a:7d:1e:22:8e:
                    71:85:09:75:4f:b8:67:10:b7:42:95:82:c2:8f:84:
                    e4:a7:0f:6d:8e:bf:a7:2d:50:b6:a3:c6:e6:41:8b:
                    88:1a:55:14:fc:d4:49:76:7f:ba:a6:58:a2:7b:c1:
                    e2:03:3f:63:62:78:0f:15:e8:e6:15:99:3a:47:d2:
                    15:cf:7b:ac:a6:c5:2e:7a:e5:0c:2f:e2:44:ad:e8:
                    84:c1:a6:17:f1:55:66:8f:5a:bb:e6:5d:de:44:d7:
                    7b:41:fc:2c:15:08:8c:e4:52:f2:a1:6a:69:40:7d:
                    55:5c:d0:42:16:60:79:80:8c:08:9b:45:d8:30:32:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B2:78:FD:9D:D7:5C:E7:73:79:0D:CC:22:AB:0A:3F:F7:74:F8:16
            X509v3 Authority Key Identifier:
                keyid:44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/3138362e3139342e3136382e302f32322d3234203d3e20323730383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:1b:94:f5:5a:24:8f:a0:c1:e3:c6:24:b5:03:60:71:de:39:
         50:25:af:b2:a3:f8:5a:fc:ec:b4:ab:f7:2c:36:a5:0b:0d:5f:
         a5:64:9c:a8:71:a1:a6:46:4b:ed:25:86:de:7a:84:41:e0:e7:
         ab:1f:ea:3c:42:8e:52:db:f4:17:2b:20:68:7e:5c:3f:f4:cd:
         31:c9:a8:2d:0f:b1:23:4b:1d:4e:0c:b8:d3:8a:c1:3a:ed:92:
         30:ed:24:25:1f:af:53:84:bd:be:f9:9a:c7:b7:01:db:57:07:
         06:6e:da:08:bc:f7:8e:a8:7c:0f:53:64:c7:ca:ef:4c:ee:29:
         e9:ca:47:4b:e9:ca:0d:df:57:8f:f3:64:87:f7:cc:0c:6b:f7:
         17:c1:61:a5:38:60:e6:89:a6:ea:ba:22:4c:b3:ea:bc:3c:b5:
         f7:73:19:58:61:8f:22:da:ce:60:ea:1c:ad:0a:18:df:2d:4e:
         67:4a:2c:bb:b4:c7:a0:4d:87:60:1a:87:ce:36:ec:67:7e:3f:
         93:42:32:0e:aa:1b:0a:aa:c4:42:58:9a:5b:ba:56:ed:d6:57:
         d8:91:81:aa:b6:3a:be:f9:6b:d4:23:48:75:ca:6f:d4:e6:8a:
         f8:28:5d:3a:14:be:4a:41:b3:be:88:2b:51:f4:4a:72:68:dd:
         b5:59:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:42 2024 by rpki-client on console-fra.rpki-client.org