Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa
File:                     3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (raw, json)
Hash identifier:          qqgKdsyIff38cUlA7BLQo5VrkOAlfEIgoXntb+yJPZ4=
Subject key identifier:   86:99:8F:E3:66:58:80:A1:58:DA:D6:13:D6:E3:13:77:41:9D:D4:05
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       634BC39BCA32FFB8E11720D531B27B3ABC663D75
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa
Signing time:             Fri 17 May 2024 13:50:35 +0000
ROA not before:           Fri 17 May 2024 13:45:35 +0000
ROA not after:            Fri 16 May 2025 13:50:35 +0000
asID:                     22356
IP address blocks:        186.192.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4b:c3:9b:ca:32:ff:b8:e1:17:20:d5:31:b2:7b:3a:bc:66:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: May 17 13:45:35 2024 GMT
            Not After : May 16 13:50:35 2025 GMT
        Subject: CN=86998FE3665880A158DAD613D6E31377419DD405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:96:a5:33:fc:83:5b:92:7d:4f:2f:4b:35:
                    30:db:54:59:92:68:4c:14:67:eb:bb:da:50:48:cd:
                    53:d9:2d:f4:c7:9f:6c:10:4b:fb:13:2c:21:3b:24:
                    52:bb:34:2e:61:7e:cb:7e:7b:07:a1:c0:01:60:17:
                    b0:f2:4c:c9:62:17:10:66:e1:d4:3d:a5:e5:0b:23:
                    76:9a:1c:cd:c1:e3:a3:05:0b:f5:99:bc:c0:5a:7d:
                    2a:16:0f:4e:f6:5d:0a:70:f5:b1:83:5f:5d:48:45:
                    3c:9c:70:7d:0f:b1:66:26:8a:ca:49:4f:6d:22:79:
                    df:7a:7a:4d:f5:75:bf:78:2e:0e:c2:ba:e8:42:c3:
                    7a:8c:31:ac:a4:6d:8d:fb:20:41:3a:20:bf:62:56:
                    07:59:12:de:b3:fd:5d:92:4d:16:fc:e1:e0:3a:44:
                    7e:8a:41:68:26:29:97:41:64:a8:18:a5:8f:51:96:
                    ea:a1:95:d7:30:1e:c2:26:8f:bb:ff:e8:9d:80:b3:
                    56:12:d9:48:55:1b:52:de:d3:49:31:ef:7b:2b:53:
                    a8:58:65:a3:2e:1f:b9:42:fd:5d:54:3b:69:de:00:
                    d8:9d:3a:7f:59:d3:83:39:ad:7f:24:3a:f2:c1:29:
                    2b:06:8b:8c:07:42:3a:5d:84:27:41:11:41:2b:08:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:99:8F:E3:66:58:80:A1:58:DA:D6:13:D6:E3:13:77:41:9D:D4:05
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:b5:44:e8:13:c6:cb:92:66:2b:17:4b:63:64:a6:fb:e5:
         6e:c4:55:a1:d4:27:f4:29:89:ea:d8:c5:9a:33:8d:ea:f2:70:
         8e:34:07:2c:c3:15:80:74:25:7f:82:7f:dd:aa:4e:4d:83:57:
         44:7b:9d:92:34:45:74:89:5b:eb:6c:98:67:2f:77:c1:a2:be:
         8f:ca:94:45:bc:62:8b:31:f8:7e:25:47:dc:4b:0b:f4:b7:97:
         ce:ef:af:1b:eb:8e:b2:f7:39:d6:91:6e:d5:f9:fa:22:10:06:
         57:f4:46:a8:4f:d1:34:c6:46:1a:20:c8:c2:00:6b:89:af:aa:
         69:66:92:f1:07:74:1d:ff:d5:c0:ad:7b:24:9b:d0:8c:c2:3b:
         1b:a9:2d:57:6b:63:0e:d8:90:c3:c1:7a:aa:db:bc:5c:21:ad:
         7b:4b:7a:69:dc:6f:0b:25:f4:c0:99:36:d0:eb:e8:26:07:61:
         76:ae:02:f0:e7:7a:ce:e2:be:2e:d4:f6:ad:c4:18:51:86:bb:
         6f:39:08:2a:e2:83:f0:f5:29:54:50:9c:cb:12:e8:10:c6:28:
         2b:f1:31:9d:36:d1:b8:35:0b:06:f3:6a:6f:88:98:3e:29:de:
         3d:d2:26:48:72:f1:43:1a:c3:0d:d2:81:25:a1:ce:65:89:10:
         7e:fd:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:06 2024 by rpki-client on console-ams.rpki-client.org