Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa
File:                     3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa (raw, json)
Hash identifier:          +eFSp1eDIcGaLYvtQ/d9/qgxgB0NcQNyxUUtiYBkLZQ=
Subject key identifier:   8D:8E:A1:F2:61:9F:EF:84:84:CB:9B:12:CF:92:9B:53:68:D6:B2:F1
Certificate issuer:       /CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
Certificate serial:       2B5A8B43E7985F5B7FD474DE6DD34559272EAF39
Authority key identifier: EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa
Signing time:             Mon 28 Oct 2024 19:43:12 +0000
ROA not before:           Mon 28 Oct 2024 19:38:12 +0000
ROA not after:            Mon 27 Oct 2025 19:43:12 +0000
asID:                     270980
IP address blocks:        168.196.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:8b:43:e7:98:5f:5b:7f:d4:74:de:6d:d3:45:59:27:2e:af:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
        Validity
            Not Before: Oct 28 19:38:12 2024 GMT
            Not After : Oct 27 19:43:12 2025 GMT
        Subject: CN=8D8EA1F2619FEF8484CB9B12CF929B5368D6B2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:63:70:8f:30:6c:7a:93:a2:1d:fb:e9:7f:
                    95:9a:46:56:6b:94:e8:17:23:a7:2b:79:c0:11:8f:
                    df:1d:3e:db:63:90:12:0a:53:bd:97:d3:4e:2b:20:
                    4e:e7:b8:65:c2:16:c4:f4:de:c1:70:7e:3f:6e:ed:
                    18:66:37:5e:6a:fa:d7:94:bf:a5:86:6b:a2:61:4b:
                    62:f5:5d:e4:27:f6:71:80:8b:0b:2f:8c:ef:4a:75:
                    5f:bf:a2:95:b6:38:d4:dd:19:9c:d5:29:ce:a1:56:
                    74:0e:b1:e3:04:dc:69:49:4a:aa:a8:0e:77:1f:a4:
                    7a:b2:8b:0a:87:c3:11:e7:ec:27:10:20:e6:45:19:
                    47:8c:e4:5f:af:b2:55:93:ee:93:f3:b8:75:01:b8:
                    91:5d:b4:34:7f:58:e5:1d:d8:d3:06:e7:a2:a5:69:
                    bf:97:2c:e2:6e:d0:fc:88:7a:18:7c:59:71:20:d9:
                    11:b5:6a:28:50:a7:b1:e0:45:fb:83:0c:80:6b:fd:
                    9c:e2:57:e4:ee:e1:3d:e9:1f:fb:cd:78:e8:ac:92:
                    ef:00:95:27:1a:05:27:91:e8:8d:31:96:23:9e:ab:
                    ed:f7:54:84:06:10:82:96:65:14:b9:9a:a7:ac:32:
                    d3:8c:3a:85:69:8c:e3:79:13:94:fd:11:1b:ea:4d:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8E:A1:F2:61:9F:EF:84:84:CB:9B:12:CF:92:9B:53:68:D6:B2:F1
            X509v3 Authority Key Identifier:
                keyid:EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32332d3233203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:8f:0b:61:d5:30:b4:5a:90:b3:11:32:2f:11:35:e3:b2:
         31:cc:af:1e:80:5d:a1:b3:e7:be:7c:fc:70:da:59:81:ea:47:
         9b:e4:ff:4a:6c:0e:fd:c5:6d:f7:f3:9f:7d:68:d5:f9:2f:fb:
         ad:c9:0c:62:4c:19:8f:ac:f1:21:ba:45:02:a0:8a:50:90:5b:
         d1:c4:01:5e:5d:bd:7f:61:77:fb:24:72:9f:28:50:73:c2:60:
         de:43:eb:51:f2:07:db:0d:b6:07:8b:dc:84:ec:68:f6:14:ed:
         c0:0e:2e:a7:db:40:8e:fa:ef:d2:77:4a:38:17:24:96:73:07:
         c0:96:4e:bf:c7:35:3b:a1:82:1c:c9:8a:ca:37:fd:01:04:ee:
         59:ab:0d:7e:6d:fd:df:7a:b3:c3:66:a3:f5:74:4c:f2:be:31:
         75:0e:17:2e:06:fb:9d:a0:2d:e5:44:f7:2a:4f:0b:b5:48:e7:
         a2:24:cc:21:1e:f3:bb:d2:07:b0:df:51:a9:e2:e0:1e:5c:61:
         e4:6b:9f:2e:0a:7a:d4:84:32:5d:fb:b9:fc:01:8e:11:7a:22:
         4f:4a:a6:19:9e:35:40:bb:89:02:12:44:ae:95:0c:28:44:1b:
         12:8a:1c:47:fc:d9:71:9b:3e:9e:c8:b2:9b:3a:dd:fd:a3:80:
         33:2a:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org