Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa
File:                     3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa (raw, json)
Hash identifier:          VMW2ZaFpP6kXHphSgS8oOoQCaWk2f7pWijvkTcmeKso=
Subject key identifier:   2F:1E:B8:0E:AE:DE:C6:0F:5A:6E:E3:B8:CE:09:55:D5:FD:5B:7F:12
Certificate issuer:       /CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
Certificate serial:       7C99882A987237360D26B8559762E513AA8357CA
Authority key identifier: 08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa
Signing time:             Thu 04 Apr 2024 16:07:41 +0000
ROA not before:           Thu 04 Apr 2024 16:02:41 +0000
ROA not after:            Thu 03 Apr 2025 16:07:41 +0000
asID:                     265483
IP address blocks:        168.197.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl
                          rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:99:88:2a:98:72:37:36:0d:26:b8:55:97:62:e5:13:aa:83:57:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0848CF0033EBDC84F70FE97CEF07FDEA40979FF9
        Validity
            Not Before: Apr  4 16:02:41 2024 GMT
            Not After : Apr  3 16:07:41 2025 GMT
        Subject: CN=2F1EB80EAEDEC60F5A6EE3B8CE0955D5FD5B7F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:32:06:c7:0b:02:ee:d1:c7:df:1e:5b:a4:
                    81:dc:49:38:01:66:79:1f:e5:a6:3c:34:bd:29:6e:
                    9b:a4:25:4b:54:aa:38:31:06:7c:72:cc:1f:71:f2:
                    c6:ff:10:84:3c:f4:9a:17:b0:a1:5d:7c:2f:78:3b:
                    db:a9:ab:5b:73:43:ac:40:f6:0a:7c:da:29:95:0c:
                    73:14:3e:31:84:8b:b7:2a:7f:d3:60:e5:80:a4:46:
                    08:a9:34:03:55:40:1a:2d:42:9f:04:91:90:0f:3d:
                    c6:7d:c6:8e:78:42:4c:61:71:b6:18:e0:13:3b:71:
                    5e:61:97:48:cc:40:9d:ab:d1:cf:0b:0a:1b:f3:af:
                    1d:6e:c9:13:96:28:2a:dc:c0:dd:1b:91:78:f6:2a:
                    f0:b2:40:4c:c1:5c:06:1b:d4:e0:5d:d8:f2:cd:62:
                    d3:90:31:c0:c4:2b:17:2f:5f:ca:4f:e5:88:7c:ce:
                    41:c7:48:ef:db:ce:29:4b:cd:9e:c8:3b:b3:9e:50:
                    27:15:bc:bf:f8:73:ff:90:da:46:8b:9c:ed:f0:e4:
                    60:3c:86:20:e1:c8:97:90:b7:c6:6a:07:d0:6b:0c:
                    cb:10:38:e0:47:68:1b:36:e4:b6:c1:0f:f8:b3:d2:
                    ad:6f:b0:1f:72:ca:18:1a:1b:a0:4f:7e:2b:0e:ec:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:B8:0E:AE:DE:C6:0F:5A:6E:E3:B8:CE:09:55:D5:FD:5B:7F:12
            X509v3 Authority Key Identifier:
                keyid:08:48:CF:00:33:EB:DC:84:F7:0F:E9:7C:EF:07:FD:EA:40:97:9F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0848CF0033EBDC84F70FE97CEF07FDEA40979FF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/1/3136382e3139372e3134382e302f32322d3234203d3e20323635343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:fc:85:7f:f3:da:8f:d3:1b:10:a4:82:ee:69:34:d2:ca:
         f5:29:48:36:9c:1d:98:5c:ed:d3:48:95:9d:b1:df:fa:0f:54:
         ce:2d:8f:fc:02:65:6a:1c:4c:a4:27:24:8e:e1:e4:73:cd:b1:
         42:b1:ae:e2:16:72:97:23:8c:30:0a:73:8a:78:db:c8:2f:3a:
         82:37:99:f0:71:fd:b5:0a:ed:9f:d6:9e:f2:ec:c6:f2:c2:83:
         c6:20:47:49:7d:9c:71:90:5b:2f:39:fa:ea:59:c6:e2:84:12:
         21:8f:a3:43:14:ab:8b:c3:9a:da:51:0c:71:a8:5e:96:a3:01:
         1c:5f:be:71:5a:72:17:b4:eb:14:ff:d7:52:1b:59:5b:ba:b4:
         d4:d7:98:97:d0:ff:46:d2:4f:fb:b6:84:ee:fa:49:ba:1e:7a:
         92:f9:c4:34:12:5e:92:36:9f:e7:3e:8c:ba:fa:02:e0:78:21:
         6e:05:19:45:01:6e:63:29:d9:c5:0e:bf:d9:20:2b:6a:3c:d1:
         c0:14:3a:8c:78:f4:68:2c:db:23:1a:8f:66:6e:26:5c:df:4c:
         aa:56:4c:e5:86:48:60:49:7f:9a:e6:02:0d:27:9c:51:18:9e:
         e2:b1:72:c6:a4:5c:44:81:af:fc:12:f4:3e:10:ff:4f:da:de:
         71:dd:b9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org