Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa
File:                     3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa (raw, json)
Hash identifier:          qiqFJ7ufTFbRaNb0skjKkkalSaaxk5pHehWIVOnCcLs=
Subject key identifier:   7E:51:D9:AB:61:03:AB:94:61:71:84:0D:5B:64:B5:C7:4B:75:59:B4
Certificate issuer:       /CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
Certificate serial:       7CF2B0C2737998C5B251FD11CA475D6962CCCBA8
Authority key identifier: EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa
Signing time:             Mon 28 Oct 2024 19:43:12 +0000
ROA not before:           Mon 28 Oct 2024 19:38:12 +0000
ROA not after:            Mon 27 Oct 2025 19:43:12 +0000
asID:                     270980
IP address blocks:        168.196.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f2:b0:c2:73:79:98:c5:b2:51:fd:11:ca:47:5d:69:62:cc:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
        Validity
            Not Before: Oct 28 19:38:12 2024 GMT
            Not After : Oct 27 19:43:12 2025 GMT
        Subject: CN=7E51D9AB6103AB946171840D5B64B5C74B7559B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:78:36:b5:d8:64:f5:88:6d:bb:40:31:70:
                    f4:41:49:25:b1:d7:02:f5:67:c5:fc:4b:54:f1:26:
                    80:99:c4:d8:33:12:3e:0a:2d:ae:35:c0:8c:4c:a8:
                    2d:ce:fc:27:fe:9b:d9:51:9f:a4:16:ab:d3:f5:09:
                    65:57:5d:bd:c6:d6:c4:71:1e:4e:a2:82:3a:78:33:
                    8e:f1:ff:f9:98:58:d3:35:d8:51:6e:26:8d:a8:12:
                    16:4d:71:0b:fe:9e:49:45:fd:f3:06:1c:68:19:aa:
                    08:52:2e:65:73:a7:51:f1:5c:05:00:43:0f:59:77:
                    bf:6b:19:a1:ee:96:12:8b:96:ab:2e:7e:54:ec:31:
                    a5:2d:5e:bd:30:53:68:ae:5b:ee:de:d8:c5:1c:ef:
                    07:ef:cf:76:a9:cf:52:3f:02:10:c4:43:ca:f1:56:
                    1d:33:8f:d9:88:76:af:3d:37:dc:0e:f8:8c:45:af:
                    a6:7c:5d:b7:46:57:13:8d:c5:87:df:fa:93:10:01:
                    51:67:58:af:cb:a4:91:c8:7a:3b:f0:a3:a1:a5:0d:
                    0e:9b:0d:18:44:e0:cb:06:15:89:8f:14:12:59:95:
                    fd:08:e9:da:d4:d7:ee:24:bd:58:32:e8:d1:aa:ad:
                    9e:27:8e:c4:d2:81:9c:d7:da:d3:13:b0:6f:08:f4:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:D9:AB:61:03:AB:94:61:71:84:0D:5B:64:B5:C7:4B:75:59:B4
            X509v3 Authority Key Identifier:
                keyid:EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3232203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:f9:8f:ba:10:c2:32:ff:8f:e3:b5:2f:5f:1e:e8:f0:87:
         94:57:cc:99:20:b8:b3:d5:a3:dc:9c:6a:78:b1:46:b1:5a:3a:
         1e:c6:22:30:36:0c:99:22:d5:c1:6c:2b:88:ab:48:dc:9f:7f:
         37:cf:6a:5c:56:92:71:ef:d5:6d:1b:e4:42:fd:1d:c7:69:bc:
         72:c4:b2:14:8a:5c:85:53:b5:d8:cd:91:ba:12:31:bb:3c:79:
         7a:3d:3f:29:5a:0f:71:93:49:54:2a:d1:74:b6:87:f4:40:96:
         9a:19:62:b3:07:3f:50:5b:88:10:6c:92:9c:9f:a8:27:6c:b9:
         2c:68:4b:d7:f1:51:10:1d:cd:f1:f2:ca:57:48:18:c0:57:44:
         b4:79:04:5b:90:9f:a4:c9:2a:e0:eb:21:ab:90:59:7f:75:7a:
         fc:d8:e7:3c:84:65:cb:5d:11:17:e8:58:c5:c4:5a:30:f4:81:
         72:8c:7c:a9:2e:b3:1a:3f:1d:9d:72:3e:04:af:25:26:f8:02:
         88:70:ff:5a:0a:93:d9:6d:d3:3b:77:47:ef:38:3e:c6:f7:d1:
         79:9f:7e:12:f1:e6:b9:90:f3:ac:c4:e9:83:c8:df:c0:7a:2e:
         58:50:ff:b9:08:35:cd:0d:14:82:8f:ed:a2:f9:d3:62:49:b4:
         44:d4:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org