Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32342d3234203d3e20323636353436.roa
File:                     3136302e3233382e3139362e302f32342d3234203d3e20323636353436.roa (raw, json)
Hash identifier:          BsnjJkdE64JYJKxtNCB/WJJ11avKOu+rBfHm7L6Uqq8=
Subject key identifier:   2A:BF:E4:3F:D1:DC:65:0E:AE:F9:47:17:9D:9A:36:75:80:01:4A:BA
Certificate issuer:       /CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
Certificate serial:       22344FA68A711D2B7CAB0C41986ACB95E301A7E6
Authority key identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32342d3234203d3e20323636353436.roa
Signing time:             Thu 01 Aug 2024 03:17:41 +0000
ROA not before:           Thu 01 Aug 2024 03:12:41 +0000
ROA not after:            Thu 31 Jul 2025 03:17:41 +0000
asID:                     266546
IP address blocks:        160.238.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:34:4f:a6:8a:71:1d:2b:7c:ab:0c:41:98:6a:cb:95:e3:01:a7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
        Validity
            Not Before: Aug  1 03:12:41 2024 GMT
            Not After : Jul 31 03:17:41 2025 GMT
        Subject: CN=2ABFE43FD1DC650EAEF947179D9A367580014ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bd:c7:01:5c:5c:39:62:2e:7e:c1:2d:f8:09:
                    55:a1:2b:93:36:de:c7:bf:e1:ee:ca:62:ef:13:27:
                    62:5e:6b:2d:da:61:17:2d:68:95:f5:69:dc:c7:1b:
                    83:ad:d0:30:70:87:31:3d:b8:9e:98:23:f3:88:60:
                    b7:aa:0d:93:34:ca:cb:dc:27:4c:f9:9f:92:b1:8c:
                    ca:c4:35:37:92:3a:22:7a:c7:6e:c1:fd:a3:d9:30:
                    81:d7:57:fd:4c:de:12:10:12:06:19:5a:3d:87:89:
                    51:17:51:4d:22:91:06:e9:14:c4:84:3d:50:8e:ec:
                    52:4f:1e:d1:90:8d:45:b9:bb:5c:66:fe:e1:54:d5:
                    08:05:ac:5e:dd:5d:73:5a:a4:b0:04:a9:05:30:fd:
                    c0:8b:70:a1:a0:cb:47:a8:92:87:0e:d2:46:92:46:
                    15:64:ca:bc:c0:14:39:ec:6d:68:3d:e7:95:01:bf:
                    bd:ce:ba:d1:c3:83:96:42:c1:38:ab:bb:fd:a3:95:
                    70:5c:3c:4f:fd:76:16:b1:4c:f4:97:0e:13:e7:a2:
                    24:a4:45:5c:20:17:0b:e9:97:10:05:64:75:74:e2:
                    60:c6:33:e8:81:51:6f:46:69:65:ef:b2:38:99:9d:
                    04:0a:06:d5:43:c6:96:25:b3:4e:ef:7d:75:4a:45:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:E4:3F:D1:DC:65:0E:AE:F9:47:17:9D:9A:36:75:80:01:4A:BA
            X509v3 Authority Key Identifier:
                keyid:B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32342d3234203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:f6:94:21:87:34:3d:fe:3e:44:38:6b:7c:5e:d3:d8:66:
         62:42:09:51:ce:31:26:33:0b:26:1d:7c:e3:54:39:e3:24:25:
         8e:52:e9:03:80:98:92:5f:bf:06:bc:81:08:cb:6d:b6:f7:b1:
         11:09:f4:af:36:db:24:c8:a9:c9:3a:63:48:51:ae:a0:57:91:
         c9:b2:4b:3c:b1:5d:37:f8:a5:f5:b7:cd:d5:cd:f6:81:ce:ea:
         cc:4a:18:69:86:27:93:e9:f1:d3:c1:18:13:fc:9f:54:1f:0f:
         c0:66:62:d8:35:e7:c8:f2:6f:d0:22:e2:99:6e:d1:f1:23:c5:
         90:11:2d:aa:f1:b3:0c:86:69:0d:63:60:0b:d9:6f:68:98:1f:
         da:7b:b7:4e:66:ae:a8:d7:b4:b4:06:b4:a6:72:7d:83:50:a4:
         ec:ee:ed:98:42:2a:c1:64:56:3b:f6:c8:60:a2:11:06:51:e6:
         7e:a8:b0:d7:76:d6:b4:3b:4b:4b:c3:e5:a1:92:49:66:28:1c:
         32:20:55:87:12:ac:60:b5:99:98:a9:69:b9:dc:56:7b:4f:79:
         24:bc:ed:e4:27:e6:80:d5:37:e0:24:61:f6:16:f3:6b:03:e2:
         41:07:2d:0e:2d:ee:78:73:b5:22:a1:c6:17:6f:5d:9c:ea:7a:
         3e:51:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:07 2024 by rpki-client on console-fra.rpki-client.org