Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3136382e302e3130342e302f32322d3332203d3e20323632353537.roa
File:                     3136382e302e3130342e302f32322d3332203d3e20323632353537.roa (raw, json)
Hash identifier:          nttPBnmU1Ip1ZlYBB3xqHXBAISAA4+EQyOtOLAaPiiU=
Subject key identifier:   CD:19:ED:58:1C:F1:4D:B5:24:2A:29:DD:74:0A:F4:3C:6E:3F:94:99
Certificate issuer:       /CN=EAC3E8567DB2ABB37844299A31DDE6917346C1BE
Certificate serial:       77A9508612FA8AC914A0E4930DE357B5DC3A97DE
Authority key identifier: EA:C3:E8:56:7D:B2:AB:B3:78:44:29:9A:31:DD:E6:91:73:46:C1:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3136382e302e3130342e302f32322d3332203d3e20323632353537.roa
Signing time:             Tue 24 Sep 2024 12:27:16 +0000
ROA not before:           Tue 24 Sep 2024 12:22:16 +0000
ROA not after:            Tue 23 Sep 2025 12:27:16 +0000
asID:                     262557
IP address blocks:        168.0.104.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.crl
                          rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a9:50:86:12:fa:8a:c9:14:a0:e4:93:0d:e3:57:b5:dc:3a:97:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC3E8567DB2ABB37844299A31DDE6917346C1BE
        Validity
            Not Before: Sep 24 12:22:16 2024 GMT
            Not After : Sep 23 12:27:16 2025 GMT
        Subject: CN=CD19ED581CF14DB5242A29DD740AF43C6E3F9499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:0b:31:f4:f8:c6:c0:c4:78:f3:a1:16:ef:
                    64:8b:20:58:d3:b6:a7:a7:68:ce:f3:22:fc:85:41:
                    44:43:87:2a:f6:11:ac:7b:26:9b:4c:11:f8:e6:29:
                    72:42:c5:2e:dc:3d:dd:8b:c2:d3:5d:44:52:c8:89:
                    42:09:87:b1:3a:4c:eb:8c:f4:c5:13:66:d5:9b:55:
                    4f:83:70:7a:b0:a8:b3:cf:e6:cd:e5:f8:b0:c6:8a:
                    76:bf:09:1a:0f:01:f1:07:51:1c:0b:af:27:98:a4:
                    17:e6:11:77:ef:49:66:71:b2:9d:57:73:f4:47:aa:
                    4f:4b:7b:48:16:b2:18:a2:0e:82:cf:57:e8:f3:5f:
                    55:64:6c:73:8a:53:98:6f:a8:41:93:6f:71:34:de:
                    ad:7f:96:61:19:f1:84:90:fd:be:f8:da:ac:1d:90:
                    09:62:b1:1a:09:30:7c:6d:28:0c:20:41:3c:a8:58:
                    75:20:cf:b3:63:5c:ec:a1:e9:7e:bc:92:25:19:45:
                    07:dd:55:35:82:be:c9:8b:bb:df:f8:fb:c8:e3:36:
                    3a:d0:c7:e2:ef:a5:71:d2:ae:2e:b9:67:1d:47:a2:
                    81:31:1c:ec:da:28:9d:b3:48:63:8b:f7:f1:d1:72:
                    7c:10:3a:93:b7:73:1b:2e:35:5d:be:de:e8:3b:b5:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:ED:58:1C:F1:4D:B5:24:2A:29:DD:74:0A:F4:3C:6E:3F:94:99
            X509v3 Authority Key Identifier:
                keyid:EA:C3:E8:56:7D:B2:AB:B3:78:44:29:9A:31:DD:E6:91:73:46:C1:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3136382e302e3130342e302f32322d3332203d3e20323632353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:3b:64:99:4d:58:59:86:31:ad:51:2c:90:b5:e2:27:77:
         f5:88:b4:c7:19:5d:c9:cf:48:fb:75:ec:ab:80:71:bb:6e:de:
         b8:ab:d6:9a:c9:4b:c8:c6:be:4f:1f:cc:c6:c3:26:1a:02:ff:
         d3:f7:be:7f:d4:6f:bd:5c:ab:30:90:c8:fe:b8:b8:32:7d:bb:
         e9:f2:1c:32:94:bf:da:84:f4:dd:20:3d:be:23:78:bc:3a:5e:
         34:93:3a:39:b9:6d:75:2c:7e:1b:57:8d:2c:65:28:14:84:a0:
         71:c4:71:29:7e:89:18:c5:34:2f:f8:7d:a6:c1:31:08:c8:13:
         13:4b:29:41:9d:5b:a3:61:da:39:51:a4:23:8b:94:83:97:ca:
         63:3a:35:aa:db:ea:c4:22:0b:c7:07:6b:d1:ab:a3:80:dd:ca:
         ce:c0:6f:9a:48:26:54:54:ba:93:4d:6b:5b:39:d4:84:ac:97:
         77:8d:16:b2:ca:aa:40:d4:b1:81:65:e5:d5:76:ee:b7:9a:12:
         2e:12:62:9d:5a:a9:37:5a:44:64:03:7e:e2:41:43:7c:b0:a6:
         e6:a7:10:66:62:9b:84:dc:36:39:c2:5a:e8:c7:01:66:9e:39:
         41:cc:28:d8:48:05:c6:57:f6:33:6d:2b:17:03:ad:9d:f8:e1:
         89:9f:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:37 2024 by rpki-client on console-fra.rpki-client.org