Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa
File:                     3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          SfWNwI6CMOF9L9iYjcVshT04e+JxNj+LphbXXDQb2+8=
Subject key identifier:   C9:A9:A7:F1:66:A8:D1:33:F1:8E:C3:C2:09:1D:9B:41:FF:06:13:5B
Certificate issuer:       /CN=16F623F7E404FC45279199F873CB67B24D28DD2E
Certificate serial:       10BA735B28392E58E4D552183B66E0952B7CAA11
Authority key identifier: 16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 11 Jul 2024 17:46:33 +0000
ROA not before:           Thu 11 Jul 2024 17:41:33 +0000
ROA not after:            Thu 10 Jul 2025 17:46:33 +0000
asID:                     271253
IP address blocks:        164.163.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ba:73:5b:28:39:2e:58:e4:d5:52:18:3b:66:e0:95:2b:7c:aa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F623F7E404FC45279199F873CB67B24D28DD2E
        Validity
            Not Before: Jul 11 17:41:33 2024 GMT
            Not After : Jul 10 17:46:33 2025 GMT
        Subject: CN=C9A9A7F166A8D133F18EC3C2091D9B41FF06135B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:19:25:0d:12:f0:24:15:77:a1:8d:b8:ce:
                    66:8d:25:b1:04:09:d8:3b:d7:fe:9a:87:f2:ad:62:
                    7e:25:09:57:ae:3e:dd:1a:2e:dd:ce:3a:e2:60:7b:
                    4d:b9:6b:5a:63:75:bf:26:7f:7d:06:ab:8f:a5:9b:
                    ac:26:e2:d0:1e:bb:f2:94:12:31:49:0b:f0:a7:71:
                    65:7d:2c:d9:f4:d8:e4:43:2b:6b:51:7a:06:60:e2:
                    2c:3b:f2:2e:06:f1:d1:83:e3:43:3f:ca:c1:e2:2d:
                    87:ec:75:a8:1f:d5:89:d2:db:35:f0:25:cc:33:34:
                    28:c3:95:c0:e5:76:b1:1c:e3:78:fc:1f:58:1d:05:
                    6f:d7:ba:5f:b9:93:66:59:b6:1c:27:84:58:ae:1d:
                    6c:66:df:f1:03:62:9b:82:aa:17:ee:7d:1c:fe:e0:
                    93:0d:62:0e:3a:f2:86:61:5c:9f:74:cc:e2:24:48:
                    03:3f:db:8a:89:ec:57:60:35:98:26:95:f6:3d:cb:
                    3e:1e:45:e8:c9:aa:23:09:29:c5:a3:08:27:ec:83:
                    c0:cd:a1:6d:00:c9:3e:c4:ce:2f:e6:10:1d:57:d6:
                    70:42:e5:f8:7b:ea:c4:fb:ec:d0:0d:0f:26:40:f5:
                    0d:39:28:81:ac:e7:de:7e:04:dd:8d:7e:ec:38:7b:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:A7:F1:66:A8:D1:33:F1:8E:C3:C2:09:1D:9B:41:FF:06:13:5B
            X509v3 Authority Key Identifier:
                keyid:16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:4e:20:11:e1:6a:da:27:2e:ca:63:b2:e9:ff:8c:2b:b1:
         47:01:e9:b4:64:cf:fe:16:67:0f:ee:00:2b:77:64:cc:5e:32:
         ab:d0:24:0d:00:45:aa:0b:e8:37:c2:47:dc:99:10:c1:53:4b:
         37:42:39:4c:4c:63:d0:ad:db:90:fe:ee:6f:88:e6:92:cf:7a:
         cf:2f:b6:d0:33:21:33:5f:5e:cf:30:6b:ba:bd:74:d8:f0:9e:
         2b:00:e5:d2:2a:45:31:9a:9e:00:9f:31:6b:80:eb:74:ad:e8:
         bd:91:35:12:c0:ab:7a:e3:b2:2c:d8:db:77:95:af:2e:a7:3c:
         df:f3:c2:a2:34:b3:c4:43:4b:40:7e:ef:5f:1c:0d:d1:4e:46:
         fb:c7:ab:30:88:7c:73:44:2f:2e:09:b2:f0:4b:0d:99:49:50:
         58:66:48:92:c4:29:59:b8:2d:95:71:f7:86:b0:6c:6d:5b:40:
         f6:f0:b0:39:f3:13:5d:ec:2d:d4:e5:fd:d4:fd:53:ab:ee:6e:
         0b:d2:87:8d:1f:ea:db:a2:98:a4:38:35:23:ea:fc:67:dd:22:
         44:e6:f6:22:e6:b3:bf:88:8c:b0:77:2a:9c:b4:2e:09:e2:88:
         c0:f9:fe:16:53:15:94:08:21:4e:d0:d5:f8:d1:40:04:52:50:
         25:11:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:22 2024 by rpki-client on console-fra.rpki-client.org