Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          IX/xnODBZEpp/OMNAzeMD3+e02BMkkHo82k018VPDn8=
Subject key identifier:   DC:E9:51:A4:F0:E9:41:A4:3E:25:CA:F8:7F:F7:FB:FA:9E:BA:DC:D5
Certificate issuer:       /CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
Certificate serial:       590C7F4244B37A136A9441A0FFE602CFBC90B213
Authority key identifier: 6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa
Signing time:             Mon 25 Nov 2024 17:34:55 +0000
ROA not before:           Mon 25 Nov 2024 17:29:55 +0000
ROA not after:            Mon 24 Nov 2025 17:34:55 +0000
asID:                     265300
IP address blocks:        168.121.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0c:7f:42:44:b3:7a:13:6a:94:41:a0:ff:e6:02:cf:bc:90:b2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
        Validity
            Not Before: Nov 25 17:29:55 2024 GMT
            Not After : Nov 24 17:34:55 2025 GMT
        Subject: CN=DCE951A4F0E941A43E25CAF87FF7FBFA9EBADCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:bc:4a:75:6e:d0:65:cb:55:87:5c:7e:eb:
                    32:9a:63:c5:f8:dc:30:46:cb:57:4e:70:76:94:2d:
                    ef:d3:17:f4:02:d2:04:5d:49:9e:39:53:fb:70:bf:
                    4f:d7:b3:70:47:ea:a6:ae:39:93:c5:27:96:68:a3:
                    9c:64:a4:37:48:ed:8a:f2:8f:ea:b9:c6:f8:85:91:
                    4f:01:b8:09:6b:f5:f1:ac:47:68:49:87:8a:86:6a:
                    4d:93:b0:05:1b:10:62:e1:21:69:26:9d:0d:55:4f:
                    91:09:d3:dd:e3:02:59:d4:d5:bb:16:6c:b3:35:6b:
                    58:99:b4:86:f1:6b:69:e9:26:9c:64:a3:d0:31:e0:
                    0b:64:dd:b3:15:2a:1f:a6:d1:0d:51:85:f6:8f:5d:
                    6a:c6:b4:c8:52:2f:87:28:24:d7:44:36:5f:ef:89:
                    c3:53:63:37:14:ef:7e:27:8f:8c:d5:2c:29:c1:b4:
                    a0:e0:4c:d8:5a:e6:95:0f:34:d6:f9:af:87:77:37:
                    16:37:30:bf:bf:39:9d:81:f2:e8:ab:37:3b:cd:b6:
                    92:83:9f:e2:df:8b:ad:df:31:e4:f3:6c:6f:ec:ab:
                    f5:ec:b2:c4:8b:48:72:f1:88:d0:8d:16:17:3a:72:
                    3d:8c:98:45:e7:53:2c:6f:5d:af:bf:4c:2c:f2:59:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E9:51:A4:F0:E9:41:A4:3E:25:CA:F8:7F:F7:FB:FA:9E:BA:DC:D5
            X509v3 Authority Key Identifier:
                keyid:6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:4f:05:f8:8e:a5:d3:51:e3:df:01:84:a8:8f:de:c5:6e:67:
         51:cc:01:d6:a2:fd:ef:99:b8:8e:fc:3c:c0:fa:88:08:ec:0c:
         5a:0c:c3:89:4d:f1:19:08:69:9b:6f:a4:87:4d:d8:c2:94:2e:
         9f:21:49:23:7f:01:ae:73:11:a9:cf:1b:cc:56:f0:fe:b0:97:
         dd:01:43:07:49:ca:68:fa:4e:fc:4d:41:37:77:c6:08:12:38:
         4c:52:12:9e:3a:85:42:a7:ec:71:cd:de:d1:78:88:d4:8b:cb:
         1b:28:42:42:d5:f7:f3:08:42:3e:b9:7b:ec:09:e8:88:46:59:
         7b:05:b9:10:44:03:e4:6e:3b:99:ec:42:23:5e:d3:6f:b8:d8:
         d7:21:b2:a6:92:fa:c6:48:15:a0:bf:07:f6:ec:da:98:78:54:
         32:1c:41:9f:31:e4:b7:8c:32:36:ea:07:40:4e:1d:e2:81:1d:
         02:31:53:42:9f:83:de:79:80:e1:c8:30:79:bb:82:6b:44:2f:
         25:57:fa:b8:3f:83:20:11:25:5d:a2:57:ad:40:94:68:94:b3:
         f6:39:c5:02:06:8f:c9:5a:24:03:10:6f:a5:0e:56:f3:51:d4:
         15:1c:b9:c7:9a:f5:00:0e:78:12:c8:de:18:29:71:aa:7a:ba:
         15:7e:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:21 2024 by rpki-client on console-ams.rpki-client.org