Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
File:                     3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          HEIvxHN3pSM/hFIJnREynsPI1Fz6iGxD9vPaTwt0UHo=
Subject key identifier:   5F:99:E3:41:16:A0:AC:9D:07:D3:8F:04:5E:FC:D1:AF:18:4B:2A:08
Certificate issuer:       /CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
Certificate serial:       50B5C12907025641AA6564D201D3E9120FF4AD33
Authority key identifier: 0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
Signing time:             Wed 03 Apr 2024 18:38:39 +0000
ROA not before:           Wed 03 Apr 2024 18:33:39 +0000
ROA not after:            Wed 02 Apr 2025 18:38:39 +0000
asID:                     263631
IP address blocks:        168.205.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b5:c1:29:07:02:56:41:aa:65:64:d2:01:d3:e9:12:0f:f4:ad:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
        Validity
            Not Before: Apr  3 18:33:39 2024 GMT
            Not After : Apr  2 18:38:39 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:12:38:d2:4d:19:68:57:e3:84:f0:25:1d:
                    09:a3:8e:31:6f:cc:d4:0f:da:2a:45:cb:66:97:e6:
                    48:8b:be:a5:f7:1f:75:80:1d:d7:66:e1:20:d4:48:
                    75:bf:bd:42:2e:18:97:6a:e6:1f:e8:6a:de:0d:22:
                    a2:8b:1a:b6:37:c6:a0:81:35:b2:ad:ce:79:b7:d4:
                    80:15:0a:b3:b9:9f:d9:d3:29:84:7b:f5:fd:22:d7:
                    0f:0d:a4:56:59:c9:e4:00:12:d1:90:0e:5e:c0:b7:
                    97:d8:11:03:89:0b:7e:66:80:fd:de:fd:ba:5a:65:
                    77:4a:40:73:fe:44:52:f7:6d:6d:c3:3c:f8:21:f4:
                    a1:c3:e6:3d:99:4a:e5:11:68:3b:2e:de:7e:88:a6:
                    98:d6:21:2b:ca:93:5c:bb:54:b3:c4:1f:23:40:09:
                    48:b2:16:58:d4:4d:fb:ac:12:35:99:89:fe:28:41:
                    48:15:be:98:f2:6b:15:66:4c:d0:62:cf:1e:fe:fb:
                    9b:60:d9:66:5b:7d:d4:d3:5b:5e:d0:7d:5a:9f:33:
                    9f:0a:ae:ea:fa:2e:3e:16:b0:8a:52:7e:29:4a:51:
                    c4:85:98:6c:b6:dd:9e:a6:8f:0e:49:af:7d:ba:03:
                    ea:ab:b4:90:1b:37:4b:6a:9a:fa:9b:6f:96:9f:42:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:E3:41:16:A0:AC:9D:07:D3:8F:04:5E:FC:D1:AF:18:4B:2A:08
            X509v3 Authority Key Identifier:
                keyid:0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:0d:bc:7a:c0:26:9b:38:55:a6:eb:ad:50:a8:1b:30:6e:48:
         00:5f:13:eb:73:b3:41:1d:c3:d2:be:9d:ef:fa:18:22:e3:57:
         f7:df:9a:be:42:f7:5c:89:10:40:a4:86:47:c4:41:75:8e:76:
         e2:9c:d7:c2:fc:20:db:bf:86:23:f2:6d:0c:84:61:11:dc:b7:
         25:1e:b7:26:26:75:74:7f:84:5f:f0:a5:80:84:92:ce:f8:e6:
         c3:2b:66:9f:91:c6:34:5b:a7:e4:a9:4e:e3:b6:cf:9d:e1:a3:
         9a:4a:ee:c7:91:10:49:5a:c9:4e:33:f0:7a:79:85:37:d5:3a:
         af:69:85:3e:4f:fa:bd:98:fe:08:f2:19:98:2b:50:53:a4:bf:
         f8:6d:8f:bb:d1:e6:ef:c6:e1:2a:61:73:fd:1c:4c:6a:4f:49:
         4f:9b:e6:a6:30:ff:4c:bc:37:ff:86:e3:a9:c0:d6:5c:a8:0b:
         7a:ad:ac:6e:9d:69:a5:3a:f4:bf:07:26:3a:4b:7a:f5:8d:f2:
         9a:9c:51:95:47:c4:08:9a:63:39:a9:95:2c:c2:39:4b:32:01:
         c1:f8:83:3b:87:e8:a2:bb:f4:74:3e:46:fc:e7:3d:32:f6:22:
         21:81:90:98:71:02:87:26:7b:97:68:cc:84:9d:b0:4a:0d:51:
         f4:d7:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:08 2024 by rpki-client on console-ams.rpki-client.org