Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3136372e3235302e34302e302f32322d3234203d3e203631393334.roa
File:                     3136372e3235302e34302e302f32322d3234203d3e203631393334.roa (raw, json)
Hash identifier:          DS/BQ22qDawsQiLNho28AV93sUlUuK9sHq2wyZsu8w0=
Subject key identifier:   0F:AC:40:FB:AE:A9:68:95:B9:14:60:38:E1:E8:03:C0:42:53:E0:E0
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       70691EBED015830CBDE309137A4976275205791E
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3136372e3235302e34302e302f32322d3234203d3e203631393334.roa
Signing time:             Fri 12 Jul 2024 17:46:36 +0000
ROA not before:           Fri 12 Jul 2024 17:41:36 +0000
ROA not after:            Fri 11 Jul 2025 17:46:36 +0000
asID:                     61934
IP address blocks:        167.250.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:1e:be:d0:15:83:0c:bd:e3:09:13:7a:49:76:27:52:05:79:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Jul 12 17:41:36 2024 GMT
            Not After : Jul 11 17:46:36 2025 GMT
        Subject: CN=0FAC40FBAEA96895B9146038E1E803C04253E0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:2a:0d:19:1e:0e:d3:21:f7:37:dc:74:d1:
                    0f:d7:72:34:87:bf:ba:23:c3:48:ef:b7:d1:90:b8:
                    9f:2f:43:93:43:9b:58:76:c7:a0:28:a9:ee:d9:0e:
                    5c:fd:94:2c:12:d2:a8:9b:d1:28:be:14:66:22:08:
                    1c:f3:d0:d4:6f:af:63:19:7e:f7:bb:51:e6:13:de:
                    1a:78:6e:ea:02:e6:27:c7:d0:84:97:23:9f:cb:37:
                    66:3e:8c:fd:a2:60:a5:00:cb:e8:fd:38:14:72:da:
                    38:28:8f:f5:d3:61:cd:50:fd:83:81:cf:5b:fa:60:
                    00:df:40:e2:ff:fd:70:76:8f:01:97:e2:2a:4f:7a:
                    74:87:da:97:8e:ec:dd:3b:d7:96:a4:9b:c2:e9:b3:
                    a7:0e:3b:76:c4:53:b2:93:c1:d9:9c:21:45:cc:42:
                    a6:db:1a:59:57:61:a5:a0:cb:2d:e9:12:41:0c:01:
                    ff:10:29:2a:17:a4:4e:5e:21:be:79:a9:d1:1d:41:
                    fe:16:dc:1b:75:c2:75:fc:a3:dc:99:36:8d:33:bf:
                    51:8a:66:e7:35:97:c5:b6:a8:67:8f:f5:ba:a5:0b:
                    79:50:0f:61:cd:ee:3c:09:49:86:e9:ee:1f:35:70:
                    1e:0d:3f:24:0f:6f:e0:68:fd:56:03:9e:fd:8a:a2:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:40:FB:AE:A9:68:95:B9:14:60:38:E1:E8:03:C0:42:53:E0:E0
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3136372e3235302e34302e302f32322d3234203d3e203631393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:4c:67:02:56:e3:aa:17:3b:47:14:88:0d:10:87:55:5d:43:
         ff:60:00:79:5d:bc:25:74:9c:9f:22:ce:b7:2b:2c:74:0b:88:
         59:68:3b:3d:b1:4b:31:6d:c7:e1:37:1a:dd:7c:08:cc:51:21:
         a5:b1:b3:5b:df:02:b1:35:f4:b7:a3:98:be:9d:7e:2e:89:2f:
         ea:10:64:e1:67:75:47:e4:6b:d0:c8:2f:1e:62:00:f8:d7:6a:
         49:9d:66:98:f2:49:b3:7b:f8:4e:aa:12:49:3a:c0:fe:43:d9:
         79:a1:30:e8:76:06:3e:bc:12:fa:ed:b9:60:5e:68:72:0f:6b:
         ec:d3:07:ac:f2:ff:66:57:77:26:90:1e:a9:57:af:df:17:6a:
         56:a2:a9:6c:d7:b6:ed:2c:a3:ca:97:65:7a:ad:e0:f6:1c:3d:
         b1:58:2b:49:d6:29:8a:42:35:0c:39:bd:08:f7:ea:39:cf:fc:
         f6:d6:bf:d6:89:db:28:c9:28:a5:22:1c:43:d1:db:e8:0e:ef:
         90:84:5b:f0:9e:a6:a8:19:8b:00:f8:c7:72:d7:43:68:c0:e5:
         6e:38:d1:e6:31:2f:dc:40:87:67:d8:76:6e:2d:b3:1e:c4:f2:
         f9:cd:9e:e8:dd:37:72:1c:fe:29:de:98:dc:f7:f3:27:0e:eb:
         dc:b0:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:12 2024 by rpki-client on console-ams.rpki-client.org