Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa
File:                     3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa (raw, json)
Hash identifier:          hHmFM4Q51QPcx8+rRRlDaMX2o4mcH+sjaa7u8rCrYG0=
Subject key identifier:   47:16:89:6D:0A:91:00:75:C9:97:A6:3D:BB:F5:58:A7:4B:4D:6C:58
Certificate issuer:       /CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
Certificate serial:       323357141DD569D2155B83AFE62554173C5F8E07
Authority key identifier: 56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa
Signing time:             Wed 03 Apr 2024 22:04:48 +0000
ROA not before:           Wed 03 Apr 2024 21:59:48 +0000
ROA not after:            Wed 02 Apr 2025 22:04:48 +0000
asID:                     263860
IP address blocks:        168.227.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl
                          rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:33:57:14:1d:d5:69:d2:15:5b:83:af:e6:25:54:17:3c:5f:8e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78
        Validity
            Not Before: Apr  3 21:59:48 2024 GMT
            Not After : Apr  2 22:04:48 2025 GMT
        Subject: CN=4716896D0A910075C997A63DBBF558A74B4D6C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:4a:8c:51:43:1c:de:e7:11:c2:e7:76:13:
                    4d:0e:0c:23:d6:a6:8f:ad:f4:69:ea:c8:b6:b7:7f:
                    71:05:91:e1:73:f4:fb:18:0a:69:d5:23:06:99:83:
                    5f:23:a7:6b:3e:1a:7a:8d:81:54:d0:f3:f7:69:3d:
                    11:de:7b:70:8b:95:49:8a:d9:78:61:a9:22:26:df:
                    5e:d7:b6:b8:ed:8a:fb:a3:b2:f2:98:34:d9:3b:b1:
                    a6:0a:b7:65:90:df:39:45:ce:23:31:79:f3:89:c6:
                    1f:32:04:06:5c:5d:7b:b7:1d:66:6f:78:7c:b3:8f:
                    24:81:e2:8f:5c:d2:d5:42:82:16:03:55:c6:bc:e2:
                    0c:35:b0:49:4a:45:09:ad:37:5c:b4:73:46:88:f4:
                    f8:b2:a7:1b:c1:db:1b:2d:f9:7c:64:69:0c:8e:f8:
                    25:41:a6:c2:24:35:06:c6:5a:c8:71:fa:47:95:71:
                    18:e6:6a:a5:b3:83:3e:7a:ea:01:b7:3d:bb:51:c5:
                    1f:6c:2b:fd:b8:64:47:78:d7:d6:37:c1:d6:e0:eb:
                    84:f4:29:c5:e9:e5:0b:10:c8:d9:0f:10:8e:b2:7d:
                    60:f4:1c:a0:af:6f:15:a9:8d:b7:9d:6f:96:fb:e4:
                    dc:f7:64:bd:2e:4f:f9:33:6b:31:9e:58:26:9f:c0:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:89:6D:0A:91:00:75:C9:97:A6:3D:BB:F5:58:A7:4B:4D:6C:58
            X509v3 Authority Key Identifier:
                keyid:56:95:ED:60:EF:09:AD:01:48:A9:E0:A7:0A:AF:AC:61:A6:A2:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5695ED60EF09AD0148A9E0A70AAFAC61A6A21D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9r2AJGyzoqtWsqEF3HQbzR5qZaauCe1VgPLZfjVLddj/1/3136382e3232372e3136322e302f32332d3233203d3e20323633383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:46:a7:13:26:a9:11:2c:68:54:88:cc:e1:c8:2d:fe:4d:a7:
         99:64:1a:86:78:97:5d:17:b3:45:8b:4a:99:0a:9b:63:11:68:
         1e:f9:06:4f:b1:53:9d:bd:5b:3e:0b:0f:90:31:62:6e:8d:10:
         a8:83:2c:b2:64:8a:03:82:bd:8d:a1:7f:60:9f:e8:28:03:8d:
         36:ea:b0:63:ea:58:eb:a1:4a:59:e2:26:71:d8:81:ef:2f:fe:
         47:35:12:fe:c6:c5:00:06:07:d7:a7:7f:17:e2:68:fc:b7:b2:
         12:76:5d:be:e7:a3:b2:87:a9:95:7e:cd:c0:ad:7d:4a:60:3c:
         a1:c1:92:cf:f8:7d:b4:33:75:63:ef:8e:3b:20:98:34:8a:af:
         b3:dc:6f:b1:9c:58:fb:de:a6:3c:a6:b8:7f:ee:cf:e9:0a:f2:
         51:e4:83:ca:2d:82:78:a7:1b:11:f2:96:fa:26:c4:da:cd:76:
         cc:c5:49:c3:eb:a2:ca:b2:ba:01:0d:22:a2:bd:ee:fa:70:87:
         0c:c1:83:20:20:d8:db:b6:64:82:f7:34:cd:b6:6b:c1:90:52:
         bc:c7:cc:38:8d:29:a0:82:e7:a2:12:74:36:fa:d8:13:8e:cd:
         44:22:ec:d6:92:32:fb:13:47:0b:b8:4e:28:5f:54:73:db:25:
         e0:96:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:35 2024 by rpki-client on console-fra.rpki-client.org