Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa
File:                     3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa (raw, json)
Hash identifier:          s9t774uWcP1eCCJmuwFCF/QDq/d3Yl7LJzQzTsFCJ0U=
Subject key identifier:   9C:5A:50:50:A5:42:4C:E4:1E:EA:A6:DC:A7:90:68:B0:F3:73:4E:48
Certificate issuer:       /CN=5891D2454F336490E5D334AA9E3D63FEE0EBD8FC
Certificate serial:       54C340B880A559D3652983B367C3F4D7192A55D9
Authority key identifier: 58:91:D2:45:4F:33:64:90:E5:D3:34:AA:9E:3D:63:FE:E0:EB:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa
Signing time:             Thu 04 Apr 2024 13:11:05 +0000
ROA not before:           Thu 04 Apr 2024 13:06:05 +0000
ROA not after:            Thu 03 Apr 2025 13:11:05 +0000
asID:                     264954
IP address blocks:        168.232.200.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.crl
                          rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c3:40:b8:80:a5:59:d3:65:29:83:b3:67:c3:f4:d7:19:2a:55:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5891D2454F336490E5D334AA9E3D63FEE0EBD8FC
        Validity
            Not Before: Apr  4 13:06:05 2024 GMT
            Not After : Apr  3 13:11:05 2025 GMT
        Subject: CN=9C5A5050A5424CE41EEAA6DCA79068B0F3734E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:06:90:56:c1:c7:60:9a:9c:f2:1b:8b:8a:
                    d3:87:93:e2:bf:c9:b4:b0:a6:ad:87:82:32:de:53:
                    4d:b0:fc:d7:0d:35:56:c4:3f:3c:91:e9:d3:98:e3:
                    98:92:48:71:f9:dc:8e:6b:68:b5:ac:5e:29:97:21:
                    b3:c2:ff:c0:c4:2b:93:0b:b0:3f:6c:96:99:3a:ca:
                    5c:cc:c5:76:68:f5:1c:13:2e:6a:93:ba:41:ed:e1:
                    02:56:3b:5b:93:6b:53:5c:60:12:17:38:e4:c3:1a:
                    70:fe:30:30:eb:23:9d:40:57:ed:e6:44:26:e2:0b:
                    80:42:94:c3:e2:df:5c:23:54:46:8b:31:c0:e3:77:
                    2b:2a:4c:cd:81:36:bf:3a:f3:95:ac:ce:89:55:da:
                    74:d4:5c:91:2d:c8:ce:e2:d9:b4:47:c8:54:84:d3:
                    e8:db:1a:25:a8:bb:af:d7:3f:32:c6:21:fb:8e:c1:
                    55:e1:be:c4:30:0e:9e:48:3b:18:85:a1:df:5c:7c:
                    aa:35:c5:7a:37:5a:26:2e:92:b8:93:fe:58:e2:20:
                    e8:04:92:3b:06:70:28:c7:3a:80:42:fd:35:cf:00:
                    a0:60:9b:8c:c6:e8:ed:6b:03:e4:18:44:a5:09:ec:
                    1d:93:9e:c6:cc:57:dd:59:a2:fd:cb:b3:6f:1f:fb:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:50:50:A5:42:4C:E4:1E:EA:A6:DC:A7:90:68:B0:F3:73:4E:48
            X509v3 Authority Key Identifier:
                keyid:58:91:D2:45:4F:33:64:90:E5:D3:34:AA:9E:3D:63:FE:E0:EB:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5891D2454F336490E5D334AA9E3D63FEE0EBD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/1/3136382e3233322e3230302e302f32322d3332203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:a8:7b:c5:eb:c3:5a:65:ca:17:77:02:12:2d:33:a7:9f:5e:
         9e:a5:d2:69:4c:13:a4:8e:5a:c6:7f:8d:90:b3:5e:23:bf:45:
         e6:dc:09:7b:49:b2:38:d3:44:89:d5:7d:30:95:78:c7:ea:c2:
         24:2c:f8:2d:19:8d:62:35:95:72:d5:e6:57:3d:6d:eb:8e:37:
         89:5f:8e:71:bd:e3:84:c2:18:a9:e3:e8:99:67:42:73:c8:df:
         c0:55:3d:cf:b6:46:00:84:3f:5d:b7:92:72:eb:4d:10:79:7a:
         ac:07:d6:e5:41:ab:88:ec:dd:0a:6b:fb:04:65:a7:3a:15:e7:
         2a:63:52:80:0e:9f:e6:e2:69:09:89:73:43:09:58:47:da:c5:
         c5:3b:ab:a0:fc:f6:34:42:31:f6:2b:56:f6:63:39:2d:0a:26:
         b8:a5:fe:59:bf:ee:29:b2:fa:43:1f:a8:e9:74:3e:58:35:bd:
         e7:f4:4d:39:84:9d:da:9b:cf:3a:b6:e6:2d:c6:7e:d0:79:42:
         97:49:df:37:4b:73:fe:58:53:df:0d:1c:fe:51:33:99:f7:63:
         21:d2:9b:94:89:13:ff:32:e0:8b:6f:02:98:9a:61:5b:e4:07:
         8c:9a:3f:a6:46:64:3b:20:64:39:a9:51:d2:1e:99:1d:64:56:
         c3:14:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:49 2024 by rpki-client on console-ams.rpki-client.org