Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa
File:                     3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa (raw, json)
Hash identifier:          oskO5VCyOLKoHisBc3YId4EzCcXfPjiC+mg/xIRlxyc=
Subject key identifier:   14:BC:27:E8:81:DA:C7:8C:05:82:19:62:C5:A2:78:A9:4D:45:3D:09
Certificate issuer:       /CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
Certificate serial:       7D8B8DE2A9A13073E7E856C88E18BF3E250F513A
Authority key identifier: EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa
Signing time:             Mon 28 Oct 2024 19:43:12 +0000
ROA not before:           Mon 28 Oct 2024 19:38:12 +0000
ROA not after:            Mon 27 Oct 2025 19:43:12 +0000
asID:                     270980
IP address blocks:        168.196.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8b:8d:e2:a9:a1:30:73:e7:e8:56:c8:8e:18:bf:3e:25:0f:51:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA
        Validity
            Not Before: Oct 28 19:38:12 2024 GMT
            Not After : Oct 27 19:43:12 2025 GMT
        Subject: CN=14BC27E881DAC78C05821962C5A278A94D453D09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5c:3d:c7:af:94:17:9a:d2:36:aa:1b:d9:04:
                    9e:f0:ba:ff:9b:6c:6f:12:34:34:2b:44:dc:6a:ac:
                    a9:6c:48:a8:2c:61:5b:8f:fe:c8:9f:70:bd:1b:0b:
                    d1:05:1f:c8:a2:b4:de:28:d6:07:63:7f:82:f8:c3:
                    3d:88:62:a6:f0:0b:e9:b8:d4:fa:02:a1:3c:e7:69:
                    27:de:e6:f4:54:df:29:4a:ca:e5:e2:a6:e3:f2:14:
                    cd:2f:32:31:ab:59:4b:a3:dd:e2:dd:96:3a:4f:65:
                    c1:e1:b8:38:6c:24:87:69:18:3d:0e:72:71:64:b6:
                    1f:64:5c:7e:8e:f8:d8:e4:1c:61:29:67:79:98:98:
                    aa:64:c1:f7:82:9a:dd:5d:93:fd:66:8a:43:cc:8b:
                    86:d0:44:42:56:df:96:2b:16:2f:c0:98:62:45:d3:
                    fe:72:44:eb:15:8a:8d:e8:dd:08:22:57:d3:a3:17:
                    63:ce:40:4c:0a:ea:bc:42:40:3e:c0:96:f9:e5:59:
                    c5:5a:dd:73:51:11:52:b2:42:0c:17:81:60:12:4d:
                    47:32:31:13:21:ec:5f:6f:f9:1c:5b:61:21:8f:e4:
                    00:0d:68:be:c8:b3:d5:ba:15:ca:40:66:ae:70:33:
                    6d:4b:a5:2f:2b:31:d2:e3:72:9a:a8:d7:2c:2f:f0:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BC:27:E8:81:DA:C7:8C:05:82:19:62:C5:A2:78:A9:4D:45:3D:09
            X509v3 Authority Key Identifier:
                keyid:EF:CB:4B:27:22:33:BF:7E:BE:0F:34:40:0E:C6:06:EA:1B:FA:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFCB4B272233BF7EBE0F34400EC606EA1BFAE6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32332d3233203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:96:10:12:3d:b2:47:d6:5a:e7:e4:6d:90:ed:02:46:ee:c4:
         d9:03:55:63:e5:50:9c:fc:7f:1c:de:55:34:05:97:29:3d:2f:
         e7:6d:5b:e4:d8:47:1e:f6:28:6f:ee:a0:cd:47:af:9c:e6:26:
         f0:f0:c2:24:84:f9:b1:9b:1d:e8:41:e8:fb:48:e7:31:4f:ee:
         c1:dc:f4:3d:01:7d:cf:73:00:58:d2:76:e8:74:6f:59:61:e4:
         d0:1f:16:3c:d5:61:91:71:61:2a:3f:43:72:41:84:4d:8b:da:
         7d:07:8b:30:68:e6:31:75:79:4d:f1:7a:84:66:bf:dc:82:3e:
         f5:fd:d5:6d:b7:51:e8:c5:b5:1b:d6:17:5b:84:fe:e2:3b:17:
         1a:26:11:bb:ab:64:ef:d1:80:75:19:56:fe:21:e3:ed:5e:3d:
         85:26:e6:36:a7:85:e1:ad:7d:2e:ea:84:a3:26:b6:e7:65:eb:
         a0:2d:23:c8:45:90:cc:a5:91:44:f8:f8:ec:84:73:50:3d:19:
         65:65:db:ff:ba:cd:cb:a1:2b:55:39:75:47:14:92:69:6d:1c:
         2c:df:fa:e4:20:05:67:64:2f:3c:90:6b:33:f3:dc:a9:d3:a8:
         3c:5f:15:7b:52:ae:78:71:fd:cd:74:85:d1:19:66:3c:49:25:
         ce:c5:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org