Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa
File:                     3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa (raw, json)
Hash identifier:          ovqwZyFX/EwQNGQiiu3NgD4qG2KWV5hS9jvpNSuajGw=
Subject key identifier:   63:FE:9C:02:1C:65:AD:50:79:E6:0D:1F:4F:5D:31:46:4C:4D:0E:CF
Certificate issuer:       /CN=282867FDA1906735DA18D9838B50748AC97E1655
Certificate serial:       096EFEBFD2EE43F8BC1EAF2885A01EE78C9BDE
Authority key identifier: 28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa
Signing time:             Tue 16 Apr 2024 18:44:57 +0000
ROA not before:           Tue 16 Apr 2024 18:39:57 +0000
ROA not after:            Tue 15 Apr 2025 18:44:57 +0000
asID:                     265484
IP address blocks:        168.197.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6e:fe:bf:d2:ee:43:f8:bc:1e:af:28:85:a0:1e:e7:8c:9b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Validity
            Not Before: Apr 16 18:39:57 2024 GMT
            Not After : Apr 15 18:44:57 2025 GMT
        Subject: CN=63FE9C021C65AD5079E60D1F4F5D31464C4D0ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:1b:94:c0:30:ac:3f:3d:59:e2:85:4d:82:
                    6e:fe:8f:c6:bc:de:70:7d:35:d6:b5:96:b4:2f:d2:
                    22:fe:2b:44:4f:f4:5d:53:5c:ee:3c:50:a0:ad:87:
                    18:f4:18:ce:6b:65:4a:4f:21:e0:03:e0:13:c9:3a:
                    c4:1c:90:e0:ea:cc:59:1e:fb:42:5b:15:7f:c9:7b:
                    b9:95:4f:be:5f:61:f8:22:34:bb:2c:2f:5f:9f:57:
                    c2:d6:a0:b8:b9:2b:91:1a:65:d6:34:01:be:a8:f8:
                    57:c2:aa:7f:45:f5:2f:2e:8e:22:30:cc:3c:dc:56:
                    72:4c:f0:a3:44:4e:ce:d6:10:dd:73:ba:6f:38:c6:
                    83:17:2e:81:4e:f1:ec:a8:0a:52:1b:1a:28:ed:a5:
                    9a:07:e9:7d:38:cf:dd:d1:e8:16:73:a5:e9:35:b5:
                    c9:72:34:1b:fd:f0:b6:24:24:59:46:78:08:fb:d9:
                    4f:99:32:3a:49:dc:5e:75:87:2b:ba:89:db:53:7e:
                    ba:7d:6b:3f:15:da:7d:33:46:5e:2b:e9:c2:63:0d:
                    a1:d4:ef:d4:13:dc:7a:f0:57:21:c3:53:ee:84:b0:
                    3c:e8:c2:42:42:af:8b:fe:8c:d7:34:29:6e:1c:f5:
                    89:e8:2a:a0:b4:eb:8a:e8:49:4a:e0:6d:d0:1a:5e:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FE:9C:02:1C:65:AD:50:79:E6:0D:1F:4F:5D:31:46:4C:4D:0E:CF
            X509v3 Authority Key Identifier:
                keyid:28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:d5:ce:72:6b:c1:4a:5d:dc:fd:5f:0f:30:5f:e8:ed:28:
         4b:bd:5e:b2:21:f3:f8:00:b9:32:ee:00:39:8d:cc:8f:f0:78:
         ce:7f:3e:28:aa:42:48:9d:5f:1d:ec:7b:c9:06:96:f6:12:24:
         28:b8:5e:dd:89:a9:e1:50:67:89:8c:62:fa:4e:b4:c6:0a:e8:
         aa:e1:ed:b9:8c:d6:d8:fd:20:4d:73:1d:81:97:f2:12:ad:f4:
         99:d1:4d:50:16:c9:1c:3d:57:59:a8:c0:78:28:b2:de:14:87:
         97:c7:8a:19:c6:56:73:f9:01:41:e9:76:03:00:8e:15:af:a8:
         65:1e:fc:9d:b8:c9:ec:6d:58:fb:c4:a4:70:5f:e8:a7:df:14:
         57:9f:b4:94:02:5d:94:9b:fe:06:02:4f:2e:3e:cf:18:13:1f:
         3f:4e:4c:09:81:b7:3d:11:bf:a9:ff:57:3d:9f:b3:56:d0:99:
         b4:78:7e:2a:cc:fa:12:81:43:53:33:98:37:8a:b2:ca:37:e8:
         dd:81:49:95:8b:62:d0:9b:ad:cb:42:95:10:dd:ab:e3:97:57:
         40:e9:1b:94:84:33:a1:32:40:15:70:be:48:b4:b3:60:16:71:
         83:f5:36:41:b6:e9:7c:76:f8:b1:f0:d6:1d:93:3e:b3:e8:53:
         a9:1c:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:44 2024 by rpki-client on console-fra.rpki-client.org