Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
File:                     3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (raw, json)
Hash identifier:          GYgDLOTIP0d3gb5ienm7Q2VjGwfwcSKhNjYrQ5r6E9M=
Subject key identifier:   56:8F:51:68:F6:4D:48:25:AB:93:E2:A1:D0:D8:74:C1:F3:BD:30:12
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       75E96BCFB602E954FCF2A5F2F523533004E0794C
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa
Signing time:             Fri 24 May 2024 06:23:39 +0000
ROA not before:           Fri 24 May 2024 06:18:39 +0000
ROA not after:            Fri 23 May 2025 06:23:39 +0000
asID:                     263395
IP address blocks:        168.194.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e9:6b:cf:b6:02:e9:54:fc:f2:a5:f2:f5:23:53:30:04:e0:79:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: May 24 06:18:39 2024 GMT
            Not After : May 23 06:23:39 2025 GMT
        Subject: CN=568F5168F64D4825AB93E2A1D0D874C1F3BD3012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:c2:e2:19:19:15:99:cb:06:4c:c3:e9:a6:
                    3e:f8:8c:53:c0:b3:f8:ee:3a:3a:ec:87:5d:d3:a2:
                    7d:af:eb:19:0e:d8:31:c5:96:62:0e:ae:68:ef:d6:
                    04:94:1d:fd:c7:bb:3f:af:0b:13:15:9c:eb:07:33:
                    76:4e:34:36:21:de:85:4d:a4:61:c8:71:75:48:b5:
                    35:d5:32:48:e7:fd:be:74:f8:b0:4b:cc:3b:bc:3d:
                    e4:47:ab:fd:25:26:3e:97:b6:c8:14:dd:2d:2c:9b:
                    c3:49:f9:64:82:68:91:f7:ee:bd:e2:ee:15:55:32:
                    60:1f:71:5a:2b:70:2f:92:aa:6c:ab:9f:97:ca:6c:
                    f2:34:42:ed:c7:f9:82:cd:34:1e:22:62:88:be:d9:
                    aa:cd:25:c9:43:b8:05:14:64:76:e6:e4:8c:c8:ae:
                    0c:7f:41:4e:aa:5d:26:43:e6:5f:e5:1b:f8:a3:a6:
                    9a:92:da:ca:a9:30:ab:68:12:34:4a:5a:9b:a0:45:
                    c0:25:df:52:7e:20:b5:db:bf:35:f5:63:fc:2a:81:
                    9f:6c:8a:b0:92:2e:f0:80:34:5f:14:7a:52:c8:30:
                    47:97:0e:38:c5:66:8d:f6:04:a1:9f:3f:a4:74:e5:
                    c4:ad:18:37:4b:a7:5b:8c:aa:1f:37:b0:e3:5e:26:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:51:68:F6:4D:48:25:AB:93:E2:A1:D0:D8:74:C1:F3:BD:30:12
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:17:63:c1:b4:e5:20:d6:95:dc:7b:81:8b:b8:33:2f:2c:
         97:09:02:ae:48:14:76:1e:54:e6:ed:6a:7a:93:4d:36:94:71:
         90:e8:26:4e:fb:e9:d8:6b:1c:08:e6:47:d6:13:d9:33:b6:24:
         2f:f0:42:91:c3:b9:79:fe:63:5c:2d:82:0a:ce:8d:b0:9c:e0:
         b5:1b:03:61:58:9a:22:67:61:22:ee:a8:43:5d:47:60:3e:84:
         17:8e:34:a5:aa:95:6b:e1:7c:b3:b1:db:6a:16:d1:5e:7e:fb:
         14:04:20:58:11:09:6b:89:2e:12:03:3c:e2:0f:42:e8:62:bf:
         8a:8e:ba:81:2c:9f:6f:6a:32:24:52:35:91:29:59:14:fa:8f:
         0e:f9:c9:0b:d9:ab:e5:07:cc:9d:ec:67:c9:05:9a:e1:d8:ba:
         e3:2c:d7:e5:06:f3:c9:a2:6e:73:33:00:40:d9:25:ca:1e:0f:
         42:9e:7c:8a:92:28:36:00:ea:2d:a6:1e:a6:58:b2:75:a0:f5:
         a1:5e:14:c8:4e:48:54:2d:41:a7:0c:4f:99:14:c0:cb:25:ad:
         a3:6c:2c:1f:67:f2:90:e9:c9:c1:85:6b:5e:3f:10:f2:68:c7:
         9c:5b:b4:d2:e4:4c:40:da:5b:29:f5:e1:9a:b7:09:86:93:0c:
         d7:18:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org