Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
File:                     3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          5f5vx56if0tw2Wzo84Pzs8QyO1JCIJDvecORLaUOUKc=
Subject key identifier:   F7:A9:B9:D8:74:B7:1F:F3:45:7B:1B:00:D8:E9:F9:BF:4D:9C:39:51
Certificate issuer:       /CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
Certificate serial:       3A7087547C63F0EE72233497E882CC77C30B4C56
Authority key identifier: 8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa
Signing time:             Fri 01 Nov 2024 13:10:24 +0000
ROA not before:           Fri 01 Nov 2024 13:05:24 +0000
ROA not after:            Fri 31 Oct 2025 13:10:24 +0000
asID:                     262765
IP address blocks:        168.232.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:70:87:54:7c:63:f0:ee:72:23:34:97:e8:82:cc:77:c3:0b:4c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D
        Validity
            Not Before: Nov  1 13:05:24 2024 GMT
            Not After : Oct 31 13:10:24 2025 GMT
        Subject: CN=F7A9B9D874B71FF3457B1B00D8E9F9BF4D9C3951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:2f:33:35:41:82:a6:28:a9:72:ab:11:f3:
                    32:fd:d5:a3:3e:f6:27:9d:e0:73:e7:f4:df:4e:c1:
                    55:cd:00:60:a0:f3:81:71:45:92:db:67:82:b5:1e:
                    c0:43:35:76:cb:95:49:33:ad:dd:ec:94:dd:ec:5b:
                    1a:92:e2:93:fd:5d:43:9c:88:6a:1f:01:de:05:9d:
                    d4:2a:9e:ed:f4:e8:a8:ca:e9:fc:f5:2c:06:55:6f:
                    29:f5:54:c9:2e:82:1d:18:92:ae:c4:81:04:23:f7:
                    d5:27:dd:f1:cd:23:e5:da:22:00:59:60:7f:93:d7:
                    6b:9d:fb:db:f9:2d:a6:4b:e9:83:ce:29:1c:5f:43:
                    05:7c:f0:19:53:06:3e:91:d5:09:dc:fa:27:86:e8:
                    5c:81:4b:3b:b2:6b:9f:ed:2b:3f:be:19:7a:b2:b8:
                    a4:c3:78:e5:17:a4:31:7f:12:b7:d4:a1:2f:d2:02:
                    a7:e0:c5:71:17:48:ff:d2:c6:87:41:2b:17:11:bc:
                    d0:6d:7b:1d:8c:4b:da:fc:3d:04:b3:86:53:55:3f:
                    aa:78:0a:0f:e3:fd:3b:de:ad:51:cb:c5:00:5b:91:
                    d5:8a:48:b9:d1:3f:d3:bf:2e:73:9c:1e:dd:d2:70:
                    c4:81:fa:91:f3:8c:b6:4f:ed:41:04:b9:d5:64:13:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:B9:D8:74:B7:1F:F3:45:7B:1B:00:D8:E9:F9:BF:4D:9C:39:51
            X509v3 Authority Key Identifier:
                keyid:8F:80:0E:1C:E2:7B:87:F2:4F:D7:DD:76:C3:4B:69:DC:FC:8A:F2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F800E1CE27B87F24FD7DD76C34B69DCFC8AF28D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/1/3136382e3233322e37322e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:b6:3a:53:95:5e:4a:c1:b8:cb:78:c6:43:61:57:3c:bf:
         2b:13:a9:0f:a5:10:b2:a1:0b:89:60:d7:46:60:c1:e2:db:3b:
         b0:62:74:c0:67:97:b2:1f:46:c8:60:fb:3e:d4:66:94:74:52:
         ac:bc:a2:51:b3:49:65:7f:4a:1a:90:5c:00:a1:44:f0:4e:18:
         8a:1b:f7:b1:ff:67:f9:09:7c:ab:26:1d:92:8c:5f:7a:cb:cb:
         37:2e:a5:16:cc:23:67:80:9d:20:df:09:d8:3e:6e:37:6a:4a:
         41:e2:a9:16:07:50:53:66:69:78:15:8b:87:b8:20:ec:bb:c9:
         78:77:bf:19:e7:f2:f1:fd:28:57:fd:cb:12:69:ff:13:2c:a1:
         bc:0c:b7:57:b6:2b:f4:a2:4e:80:21:94:c0:82:e1:19:b5:2a:
         f9:73:cd:8b:b5:a8:ec:f4:7c:93:99:28:73:27:8c:99:b1:b0:
         12:25:4a:37:9f:a9:55:ca:c5:e0:91:ba:40:96:e9:9d:72:92:
         20:86:79:f2:fe:e3:f7:d4:ff:e2:fa:ad:f8:30:ed:91:d5:10:
         d4:f8:1b:a8:51:1b:90:23:32:fe:11:0b:5b:77:cc:fb:cc:ec:
         72:f4:0f:89:5c:e6:0e:ac:0c:55:3e:e5:92:2c:a1:60:58:4e:
         bd:17:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:35 2024 by rpki-client on console-fra.rpki-client.org