Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa
File:                     3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa (raw, json)
Hash identifier:          YOusnxl7rokKRLtQdks2FmY31uABeZJQUG1XhV1wVQ4=
Subject key identifier:   F2:AA:47:1D:64:20:23:48:73:34:76:6C:E9:16:16:A8:A0:6D:7F:71
Certificate issuer:       /CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
Certificate serial:       42A27A229517F92D37897B0AE490FF898CAA9B2D
Authority key identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa
Signing time:             Thu 04 Apr 2024 03:56:13 +0000
ROA not before:           Thu 04 Apr 2024 03:51:13 +0000
ROA not after:            Thu 03 Apr 2025 03:56:13 +0000
asID:                     53102
IP address blocks:        187.103.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl
                          rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:7a:22:95:17:f9:2d:37:89:7b:0a:e4:90:ff:89:8c:aa:9b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
        Validity
            Not Before: Apr  4 03:51:13 2024 GMT
            Not After : Apr  3 03:56:13 2025 GMT
        Subject: CN=F2AA471D642023487334766CE91616A8A06D7F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:7f:8f:45:d4:a9:29:ea:93:e3:14:19:86:
                    df:59:ef:db:78:a2:a4:5f:02:76:0a:58:a6:37:c3:
                    81:45:a0:e0:e5:19:cf:2d:fc:d1:fb:02:c0:53:42:
                    0c:dc:61:0b:06:6e:91:48:8a:46:3c:c5:87:11:48:
                    4a:97:3f:41:bd:3b:47:49:ea:02:da:79:c9:db:6f:
                    48:2d:e7:b4:9a:b1:66:2d:35:36:e2:29:7d:68:05:
                    6b:72:1b:7f:6b:0a:30:09:8c:c1:89:a2:13:97:6b:
                    1f:ad:41:57:d7:58:fe:50:aa:2e:de:2e:54:1c:d9:
                    66:29:25:72:ec:b1:47:0b:0a:56:ae:56:a5:2a:4b:
                    28:1f:7a:46:55:fc:22:44:b3:eb:ea:a2:2b:82:bb:
                    4a:d5:98:44:bf:54:8f:e0:f4:5a:58:6e:f8:54:51:
                    6d:22:b8:26:4f:38:f5:ef:21:a4:9a:9f:3a:8d:7e:
                    4e:2a:0d:6d:31:4e:50:0f:ff:a8:a6:a3:7a:80:f9:
                    71:00:6e:b7:8f:25:ec:87:d1:7f:0b:1e:9d:5b:6d:
                    a4:c9:48:89:24:9c:a0:73:ad:62:66:9a:b8:bc:59:
                    b9:8b:0e:a3:c9:98:bc:7f:62:0b:29:c2:f0:fd:b3:
                    5f:ae:e0:d4:da:6b:22:83:86:25:c7:41:32:8d:d4:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:47:1D:64:20:23:48:73:34:76:6C:E9:16:16:A8:A0:6D:7F:71
            X509v3 Authority Key Identifier:
                keyid:47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138372e3130332e3136302e302f32302d3332203d3e203533313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:da:88:46:26:94:59:5c:67:f7:b2:39:1f:8c:95:24:50:
         5e:e4:ee:4b:52:10:30:42:eb:1e:a4:25:a2:39:e9:36:9d:e3:
         1e:fe:e6:62:49:31:7c:80:03:8c:ca:2f:e0:46:a3:2b:8c:03:
         ff:a0:2d:15:89:b1:64:9d:10:2d:1a:a6:b4:82:79:2e:87:e0:
         6a:fa:11:12:f9:7c:54:5a:e9:63:f3:36:a8:05:14:d8:a8:a5:
         9e:b9:f2:f2:9f:cd:4b:ba:13:53:d7:50:72:c3:59:63:b1:fd:
         5f:2a:77:48:b4:8d:77:75:6a:c3:ba:44:f6:62:11:0e:3a:f9:
         64:b0:03:e6:21:ca:8a:09:f2:ff:74:ff:1e:19:b3:58:01:22:
         74:92:7e:4b:c4:52:03:d4:bc:2a:32:bf:27:bc:01:9b:ae:53:
         46:6f:94:69:cf:bc:e2:0d:40:47:b2:50:ca:07:fd:b1:57:7b:
         f3:72:0f:9b:21:da:bf:41:6e:c8:29:8a:ea:d1:1a:4e:58:05:
         fb:82:79:21:d5:3d:ce:35:61:32:10:57:f2:3e:13:0c:d8:63:
         45:73:e3:4e:1b:49:7c:d6:3c:fc:a5:21:ee:45:75:ca:10:48:
         5e:f0:f6:4a:33:02:e0:09:77:0c:02:6a:1a:70:11:33:cb:5e:
         36:93:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org