Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          K/Fp0rdlNdIYP2eJS8Aiw7G8P8HSyCkn3E+5tmicOnE=
Subject key identifier:   61:A6:99:AD:34:28:99:CD:AA:2A:ED:57:BF:05:41:E2:44:3E:73:34
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       2042F6139CFED056524F37A13B9B730733FD7A40
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     270836
IP address blocks:        189.14.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:42:f6:13:9c:fe:d0:56:52:4f:37:a1:3b:9b:73:07:33:fd:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=61A699AD342899CDAA2AED57BF0541E2443E7334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:92:e9:72:73:35:42:11:7f:79:25:4f:ac:
                    6f:e1:3f:6f:b3:34:b0:a4:04:e3:cd:18:d7:9b:6a:
                    a8:f7:49:39:43:23:9b:f6:25:ac:9f:a3:8c:c3:6b:
                    19:61:fa:a9:78:dc:be:83:5c:e9:d7:88:27:05:d9:
                    80:59:aa:e8:9f:11:e0:e5:85:c0:90:27:cc:9e:2b:
                    f9:85:9f:04:4a:d9:6c:38:33:26:3d:38:ce:b0:bf:
                    71:5c:5b:b9:d1:d0:ae:3d:74:8f:63:d1:0b:34:fe:
                    a2:22:e9:4c:42:9d:5e:b2:bf:cf:2d:4c:58:e2:f1:
                    31:ae:f8:ca:c2:9d:28:57:48:7a:57:9a:96:3b:6d:
                    bd:ae:2a:7a:3b:66:00:0f:cc:04:0d:a2:47:18:5f:
                    53:93:90:55:c7:3d:61:b2:73:26:bd:b9:7c:4e:50:
                    53:07:b3:8a:e3:50:9e:3d:a0:80:05:44:39:fb:0e:
                    31:da:a9:fe:37:15:13:f9:e1:f1:39:07:ae:61:10:
                    22:70:46:0b:25:24:96:17:6a:12:28:e2:bb:4e:be:
                    c4:f2:e5:db:3f:4e:51:ac:9f:e6:b7:0e:ca:44:b4:
                    4f:0a:cb:7a:66:70:80:37:aa:6a:58:85:ae:95:cf:
                    26:64:a3:35:0c:48:d7:14:e2:8f:4e:91:58:e8:9a:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A6:99:AD:34:28:99:CD:AA:2A:ED:57:BF:05:41:E2:44:3E:73:34
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b7:7a:c8:31:37:05:1a:3c:df:ed:a5:25:a7:c7:da:52:9c:
         d3:0c:c4:c3:ed:3c:c4:51:e8:f2:ff:e9:a4:3b:73:80:73:eb:
         d0:63:58:e8:9d:56:5a:43:e2:8a:d3:3e:a6:d3:60:90:73:4c:
         ff:99:b7:e8:60:82:0b:ad:b1:6c:53:96:4d:1b:8d:fb:03:e6:
         33:e5:4e:af:4c:2c:f8:b0:0e:e2:3e:cc:c5:4f:a6:f4:9b:a3:
         53:03:5a:a6:48:6c:39:18:83:8a:91:06:2a:ee:5e:7e:40:9a:
         ab:6d:b6:e6:66:e7:ab:e7:aa:ac:fa:bb:49:00:fe:cf:cd:11:
         48:e9:7b:c0:6f:94:51:b5:c1:19:5a:19:cd:52:cc:44:1b:42:
         19:5e:70:fd:33:02:74:ae:93:43:b4:e7:20:f2:4a:be:a0:b2:
         7d:cf:cb:c0:7d:03:1e:01:49:01:56:94:4f:2c:5b:09:bb:e2:
         b7:b8:7c:5d:3c:82:83:ae:71:6c:cd:33:03:40:7d:c5:8f:44:
         9c:c6:e5:50:6f:70:70:03:68:1d:4f:6d:3f:be:74:b4:d2:db:
         80:37:b3:2e:cd:91:b2:73:ee:32:02:a2:36:06:44:3a:0e:14:
         2d:5e:0e:72:b7:69:cb:46:ef:88:f0:df:56:59:2e:0d:71:61:
         a8:c5:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org