Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa
File:                     3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          +hpy0UgNOZvcGtCDrJfybHKZufvrFuDgz+5ygYcA8+8=
Subject key identifier:   6F:B4:E6:C2:7D:C2:50:16:0E:41:1A:00:54:58:F8:BE:A9:A5:15:C3
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       44DF2E48B4736E1578566A64DDF516F92B703A3C
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     52604
IP address blocks:        168.194.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:df:2e:48:b4:73:6e:15:78:56:6a:64:dd:f5:16:f9:2b:70:3a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject: CN=6FB4E6C27DC250160E411A005458F8BEA9A515C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:90:e0:7c:b8:b5:1b:01:4c:c9:a3:4a:2f:
                    4b:69:ab:c8:41:f3:a6:ab:f8:a4:5b:2e:79:7f:50:
                    d5:8f:64:48:cc:80:43:e9:69:fb:ab:15:d8:1c:82:
                    b8:e7:88:1c:f0:5e:a5:6d:e2:a3:25:72:e6:0d:61:
                    de:cb:36:67:3a:3c:a1:07:80:51:2e:57:4b:1f:9f:
                    ec:4a:45:74:62:12:6d:7d:12:b6:5d:d5:21:1c:fa:
                    a9:58:df:ab:ad:3e:7a:a6:62:56:83:70:b7:dd:b2:
                    f5:f4:db:04:0a:59:8a:0c:fd:f1:42:56:3f:20:36:
                    eb:d7:7a:c8:85:e9:32:93:a0:a9:24:8d:89:cc:80:
                    13:83:bc:6f:31:e2:cd:2e:56:96:a1:34:48:68:3f:
                    41:34:de:97:a2:7f:dd:91:43:49:be:c5:12:83:1b:
                    63:3e:b2:be:48:67:2c:0b:c3:dc:4f:a9:a6:aa:18:
                    12:8a:c9:75:92:6a:c7:a2:22:9b:af:b7:64:9e:21:
                    2f:a4:ca:ae:b1:ee:1b:7f:3e:63:d3:1d:79:e3:c6:
                    d0:99:72:3a:f7:51:46:07:6a:b3:b8:b1:ca:92:b1:
                    47:f2:56:86:6a:f0:cd:26:c1:62:b1:c1:a4:2b:4e:
                    87:19:3c:51:dc:1c:8c:7c:e7:46:a7:8d:3f:aa:73:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B4:E6:C2:7D:C2:50:16:0E:41:1A:00:54:58:F8:BE:A9:A5:15:C3
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3136382e3139342e3234342e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:90:ec:65:57:39:f3:e8:3c:f5:2e:c1:ea:31:08:71:9c:fd:
         39:22:55:41:bc:2c:fe:b2:c3:37:67:c7:3f:47:75:ad:08:30:
         a7:d3:95:73:f1:6a:33:f7:37:56:de:2f:2d:ff:ad:a0:e6:5d:
         55:7d:78:dc:fd:c7:b6:2b:36:d7:84:e7:e5:61:ae:e5:64:c1:
         97:8b:5e:4a:8b:f9:4c:38:0b:a0:85:3a:1b:31:b4:55:45:23:
         60:09:4b:94:0b:87:58:b0:8d:b2:d9:4d:6b:45:58:06:94:9f:
         73:69:6f:55:ee:ee:a9:68:22:13:c1:4b:b0:7e:a8:94:f5:6f:
         47:4b:54:fb:fa:e9:cc:3f:e6:d9:7b:70:1c:48:93:6b:b5:6b:
         91:d8:23:21:4b:45:29:f4:45:ca:e1:52:18:11:63:df:71:bd:
         11:0b:be:37:51:e7:69:2c:7a:d0:23:63:69:a3:80:90:23:3e:
         d7:b6:08:b1:0a:8e:a0:be:2c:81:93:9e:ee:66:7f:0b:95:09:
         aa:4e:02:26:33:3d:d3:c6:6a:6f:a1:8a:a7:1d:b8:26:39:b3:
         45:5d:ab:17:a1:13:1e:bb:05:c8:ad:09:d9:43:35:8e:ac:32:
         2c:7f:68:de:b1:b6:64:f6:6f:bb:3b:43:82:50:7d:10:07:62:
         df:e1:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org