Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139382e302f32332d3233203d3e20323636353436.roa
File:                     3136302e3233382e3139382e302f32332d3233203d3e20323636353436.roa (raw, json)
Hash identifier:          3j3Ujpt2NRs6wMIb6HTio2CCzcIpoU13D31xrtd9o3o=
Subject key identifier:   9F:3C:44:07:99:52:55:E2:5C:25:6E:E5:BD:77:00:CF:A5:56:A4:55
Certificate issuer:       /CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
Certificate serial:       2F760D259C86BECBBDF44F73EB726F7DC814F5B5
Authority key identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139382e302f32332d3233203d3e20323636353436.roa
Signing time:             Thu 01 Aug 2024 03:17:41 +0000
ROA not before:           Thu 01 Aug 2024 03:12:41 +0000
ROA not after:            Thu 31 Jul 2025 03:17:41 +0000
asID:                     266546
IP address blocks:        160.238.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:76:0d:25:9c:86:be:cb:bd:f4:4f:73:eb:72:6f:7d:c8:14:f5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
        Validity
            Not Before: Aug  1 03:12:41 2024 GMT
            Not After : Jul 31 03:17:41 2025 GMT
        Subject: CN=9F3C4407995255E25C256EE5BD7700CFA556A455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:ea:a3:5c:4a:42:6b:00:97:49:55:2a:7b:
                    60:31:72:a5:7e:02:7a:2e:c4:6e:48:2a:a0:ae:43:
                    d9:95:80:eb:bc:91:1b:ef:52:7e:44:dd:8e:ad:88:
                    8b:13:ca:72:b8:ab:4a:f4:03:5b:f9:b1:50:e2:40:
                    72:b5:c8:67:ed:c8:a6:d6:87:e3:c7:d1:6f:ba:9e:
                    b5:b2:14:11:f9:85:21:5f:3f:b0:de:6b:36:7f:23:
                    cc:96:37:a7:a5:05:a2:e4:21:ea:5c:d7:c9:e0:1c:
                    78:4d:82:95:7b:93:61:5e:66:50:a6:4c:e9:65:c7:
                    0e:12:65:d8:e9:a7:c6:a9:b8:01:f8:ca:94:23:1c:
                    0a:3f:b5:52:6e:15:c7:28:e8:3d:38:ce:9f:6d:ca:
                    1f:0c:f4:d6:d9:e8:2c:b5:f4:ea:25:46:bf:ba:92:
                    47:7b:d3:83:b5:1a:7b:e8:92:a5:f6:d5:19:1a:96:
                    81:91:bd:b6:3c:d1:f6:50:a9:13:6b:92:65:c9:a8:
                    a7:ed:7e:e8:1a:eb:47:85:92:54:98:e6:7e:a8:54:
                    9e:ff:57:99:4a:3a:25:42:83:7e:e5:01:14:96:5b:
                    5d:de:3d:7d:ef:e2:20:82:2c:49:28:84:46:b9:b2:
                    1f:39:40:57:8a:90:36:b0:86:76:4a:2f:46:46:e7:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3C:44:07:99:52:55:E2:5C:25:6E:E5:BD:77:00:CF:A5:56:A4:55
            X509v3 Authority Key Identifier:
                keyid:B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139382e302f32332d3233203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:aa:b6:af:3d:7f:4f:6c:f1:67:0b:c9:83:15:8d:96:db:
         4c:48:7d:3e:7f:4f:3d:f7:e4:15:9e:fd:76:79:55:bb:28:a4:
         2f:46:13:df:c9:e7:77:f6:cd:5a:b9:14:9f:57:3b:f6:87:34:
         c2:74:25:6c:9a:b6:56:03:97:aa:de:fc:1f:24:40:cd:d4:04:
         2c:42:97:10:de:0c:ab:20:de:cc:c0:89:f4:87:57:6a:c6:00:
         1f:61:dd:61:36:97:88:89:18:55:79:5e:9b:24:29:bb:7f:6f:
         b6:ff:23:88:a8:b0:20:91:94:d4:1e:5d:d6:b0:c1:34:4e:0d:
         1f:72:44:d3:97:80:fc:df:e7:9e:48:1f:d4:ae:79:06:cd:53:
         ea:6c:28:27:c5:a8:22:7a:52:92:ce:2b:9c:fe:1b:c4:a8:27:
         e1:47:55:70:36:dd:d2:65:4e:2f:28:d9:df:6f:c5:11:40:ae:
         c4:b6:73:36:e4:21:b7:1a:82:20:e2:69:8c:03:3e:8c:a1:d6:
         1b:81:a7:27:50:67:e7:31:c3:96:19:02:90:be:63:a3:3b:9b:
         f9:0e:c3:6f:9c:46:fa:42:6d:98:89:bf:69:2a:b5:a2:38:90:
         af:bb:9c:8d:c6:9c:2d:65:43:b1:aa:c7:aa:e2:a3:9c:06:b5:
         46:d5:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:07 2024 by rpki-client on console-fra.rpki-client.org