Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
File:                     3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          rTEPkLtsMnsLzQ7Ge7fnJYoLXMXjUKdr3Dge0E6IjM0=
Subject key identifier:   9F:21:B9:4C:D7:97:66:11:67:BF:14:E1:50:F4:C6:FB:69:9F:69:EF
Certificate issuer:       /CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
Certificate serial:       1AF3D27A8C60C407630084B18A168A554AC3D779
Authority key identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa
Signing time:             Thu 04 Apr 2024 05:45:36 +0000
ROA not before:           Thu 04 Apr 2024 05:40:36 +0000
ROA not after:            Thu 03 Apr 2025 05:45:36 +0000
asID:                     262777
IP address blocks:        168.121.188.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f3:d2:7a:8c:60:c4:07:63:00:84:b1:8a:16:8a:55:4a:c3:d7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
        Validity
            Not Before: Apr  4 05:40:36 2024 GMT
            Not After : Apr  3 05:45:36 2025 GMT
        Subject: CN=9F21B94CD797661167BF14E150F4C6FB699F69EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:41:0e:c5:1c:e2:26:03:a7:86:6c:9c:e8:
                    4d:c1:c5:b6:a5:e5:48:4d:ae:7d:bb:40:8c:ec:04:
                    92:45:9f:a3:8c:3c:84:85:be:e6:e7:f7:4a:dd:ee:
                    1d:b7:bb:da:51:f8:7f:14:46:00:d3:a1:74:51:3e:
                    ad:fa:d1:bc:40:14:94:50:52:e6:81:9d:db:68:13:
                    eb:46:6f:25:93:da:07:a9:fa:db:c2:12:0e:9e:7c:
                    28:1f:d4:15:0c:4c:9d:ed:cb:07:50:de:41:6a:b2:
                    f1:7c:e9:24:72:bf:2a:d2:2a:c9:b4:0b:3b:0f:a6:
                    5d:40:7e:e8:8a:db:07:a0:3a:16:40:60:ff:84:83:
                    31:29:45:9f:05:59:3e:68:ef:89:02:90:25:f6:c4:
                    a3:95:53:cb:bf:ee:af:84:dc:c4:24:21:bd:ad:f2:
                    22:8b:b1:5f:5a:36:70:d7:00:a5:5e:a8:4b:cb:4a:
                    80:e7:8d:df:d9:1a:a7:f4:5d:1a:5b:35:45:92:f5:
                    3b:f1:6f:8a:40:0d:f2:2d:43:9b:fc:cd:34:46:23:
                    0d:11:21:ac:d8:42:32:a2:b7:c2:71:8a:a8:36:64:
                    95:b7:3b:9e:96:a6:78:4b:40:f6:61:44:78:67:0e:
                    38:93:2f:cb:4b:c2:55:93:09:d6:a3:17:19:01:a6:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:21:B9:4C:D7:97:66:11:67:BF:14:E1:50:F4:C6:FB:69:9F:69:EF
            X509v3 Authority Key Identifier:
                keyid:47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3136382e3132312e3138382e302f32322d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:a5:3f:1d:bd:59:0a:bb:64:ef:aa:cb:5c:43:c0:bb:d9:
         3b:bc:4d:2b:1d:62:01:1b:4a:3e:17:ff:66:6e:c7:19:3f:f2:
         49:a4:a7:70:73:e3:6b:5c:d6:63:95:8d:21:cc:7d:e6:b4:2b:
         0d:5b:26:25:6e:47:21:ee:e7:96:b3:a9:2a:23:29:b7:a5:e9:
         26:c9:a9:69:42:01:63:37:61:28:d7:6b:22:ac:19:5a:7a:31:
         c5:44:33:d1:f5:fc:cd:e9:ed:9f:b0:8d:1e:32:fd:24:af:47:
         49:6e:75:36:bc:80:5b:af:6b:25:b8:33:e9:85:c1:46:b1:87:
         5d:a3:86:19:fa:93:3b:7f:11:5b:ce:d4:d0:02:54:cf:50:be:
         c2:7b:4f:36:ff:94:b0:a0:20:0d:27:3d:18:08:1f:b3:b2:ea:
         65:3b:b4:b9:5c:fd:83:d1:39:8b:57:64:0f:86:ca:02:33:cb:
         61:01:2e:80:14:c3:66:ef:79:1e:19:f8:4d:44:9a:fa:e0:02:
         0f:a3:77:83:90:3c:e2:07:c1:f7:a6:a8:5b:99:ea:18:0f:68:
         52:1c:72:7d:7e:33:60:bc:ab:b0:cc:ac:5c:bb:ad:d2:f8:dc:
         d3:0b:79:79:08:b2:68:89:8d:59:a5:9e:0f:6c:89:fb:4c:43:
         5d:fb:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org