Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
File:                     3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          29h69UjK5xr3RxQ9KdKJnG2HObsFjsmJTv6DyTmFXR0=
Subject key identifier:   36:B7:C3:F3:42:61:89:E0:B7:8F:C5:FE:9C:FD:9F:15:EB:99:B5:C2
Certificate issuer:       /CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Certificate serial:       2A38CDB524EC95D224391B94A974D9B9166D1390
Authority key identifier: E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 31 Jul 2024 13:46:48 +0000
ROA not before:           Wed 31 Jul 2024 13:41:48 +0000
ROA not after:            Wed 30 Jul 2025 13:46:48 +0000
asID:                     265447
IP address blocks:        168.196.84.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:38:cd:b5:24:ec:95:d2:24:39:1b:94:a9:74:d9:b9:16:6d:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25F3D52DD8C272CC64492A7621AE551E084A019
        Validity
            Not Before: Jul 31 13:41:48 2024 GMT
            Not After : Jul 30 13:46:48 2025 GMT
        Subject: CN=36B7C3F3426189E0B78FC5FE9CFD9F15EB99B5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:b4:cc:c1:fd:59:72:c9:3c:d9:1c:eb:f6:
                    86:18:39:9a:ee:a1:3c:3c:93:ed:0d:61:fb:4c:9d:
                    e4:48:08:36:10:73:c3:ed:6c:52:2a:10:9c:e5:09:
                    bb:b8:d4:70:63:50:6e:c2:f6:6d:ec:52:93:16:6d:
                    00:ef:9f:9f:2c:6c:81:dc:8f:0e:97:30:bf:63:ae:
                    59:00:ed:bb:3e:74:d8:cf:32:e2:7a:b0:06:a1:19:
                    23:43:51:be:39:3b:c7:bd:18:fc:1e:f7:da:29:02:
                    cb:fd:08:92:92:5f:8b:00:d0:5b:4e:c6:be:21:87:
                    59:e3:6c:f9:fa:80:46:18:61:56:5b:75:3f:1f:8f:
                    42:7a:9c:bb:52:5a:38:69:06:93:39:fc:aa:5c:33:
                    12:5d:0b:e8:a9:8b:0f:1a:87:df:db:aa:2b:fa:99:
                    94:69:83:54:25:73:58:3a:bc:66:37:13:0e:b8:a1:
                    4f:da:2b:58:53:27:9d:f0:aa:d3:4f:6c:0d:42:35:
                    d3:a8:5b:ce:b8:7a:90:3d:7a:4c:b2:38:cc:d7:3d:
                    82:dc:f1:6e:f9:4e:c3:5a:bb:5b:38:17:de:a7:cc:
                    c3:7b:86:cc:1c:40:88:12:1d:30:f0:10:53:a9:4d:
                    5e:bd:52:d9:b0:d8:7d:0c:8d:6b:30:b1:b5:df:5b:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:C3:F3:42:61:89:E0:B7:8F:C5:FE:9C:FD:9F:15:EB:99:B5:C2
            X509v3 Authority Key Identifier:
                keyid:E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:26:e9:0d:8d:71:36:8e:aa:6b:7d:7f:90:7f:ec:ca:7c:c0:
         89:48:4b:81:6e:e7:5d:64:41:1c:f2:2c:f9:a5:a6:3a:1a:0d:
         d6:d4:e9:5a:0c:67:83:37:45:71:73:82:33:50:d9:0f:5e:bb:
         10:8c:23:d2:93:b1:b7:cf:a8:8b:96:e8:b2:d7:42:95:74:7f:
         ec:bc:8f:a9:cb:40:e5:77:56:52:98:62:90:3f:2f:06:1f:e4:
         11:8b:93:0a:fa:65:f3:0a:d9:30:62:f3:37:70:a5:19:26:40:
         51:ed:09:cd:3b:ae:ec:fe:44:ea:b2:c0:53:8b:c4:de:c9:3d:
         08:7a:ce:ee:f9:13:f8:3a:83:95:58:50:64:9f:be:9e:33:21:
         0a:c0:15:eb:bb:08:86:13:98:8f:e5:de:ba:f4:13:92:d4:94:
         c8:5f:0b:f9:53:c3:f9:14:d2:c8:e9:6c:2c:aa:d6:6a:be:7b:
         d1:0a:e1:f6:15:cd:2d:12:09:14:70:4f:e9:4d:1a:8c:bf:46:
         3c:5e:8d:e1:55:0b:57:8e:1f:62:7e:70:16:01:05:94:cf:8e:
         d3:15:7a:d1:ac:c5:c8:a8:67:68:9a:cd:34:c8:9d:a9:41:31:
         84:61:51:e3:15:a2:35:ab:ca:f7:fb:f8:60:8c:86:f8:9d:b5:
         6d:04:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-ams.rpki-client.org