Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3136382e3132312e3133322e302f32322d3232203d3e20323639303733.roa
File:                     3136382e3132312e3133322e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          0RNc5bM8iJtAmsYkhMHKnDReQrm9zThsgePlpOiBtts=
Subject key identifier:   A5:8C:03:38:B9:25:2F:FA:89:C8:A6:1B:D8:FC:AC:8F:44:EB:9F:76
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       4FADE9A530F72CFE2D9249CF1A985D8109AD99F4
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3136382e3132312e3133322e302f32322d3232203d3e20323639303733.roa
Signing time:             Tue 22 Oct 2024 14:21:50 +0000
ROA not before:           Tue 22 Oct 2024 14:16:50 +0000
ROA not after:            Tue 21 Oct 2025 14:21:50 +0000
asID:                     269073
IP address blocks:        168.121.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:e9:a5:30:f7:2c:fe:2d:92:49:cf:1a:98:5d:81:09:ad:99:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Oct 22 14:16:50 2024 GMT
            Not After : Oct 21 14:21:50 2025 GMT
        Subject: CN=A58C0338B9252FFA89C8A61BD8FCAC8F44EB9F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:c2:95:f4:5a:5b:9a:0b:bb:e2:88:7a:2f:
                    a4:bb:e0:4f:78:a8:44:04:ac:28:6b:53:ec:45:a1:
                    47:0a:b6:7f:cb:ba:cb:6f:94:1a:18:16:0d:a7:a7:
                    0e:92:75:fd:b5:b9:05:55:24:ff:f0:01:d9:b9:6a:
                    92:73:84:a0:6a:04:fb:40:25:ef:b7:ab:0a:36:19:
                    73:e2:ec:92:c1:fb:e0:3a:d0:04:44:5a:84:bc:60:
                    ef:4b:ea:4d:36:c8:79:19:ea:2f:0e:ca:df:05:ce:
                    f8:68:52:64:5f:7e:35:58:b3:fd:d8:af:07:55:93:
                    ab:ea:c0:5b:77:b6:28:ec:cf:1c:31:a6:3b:ee:ba:
                    a6:1d:78:9c:b2:98:d7:24:3a:8a:d2:b1:34:3c:44:
                    51:bc:d9:0d:28:6c:84:93:06:cc:33:86:02:61:c9:
                    4d:e9:25:02:98:67:c1:af:c4:7f:f4:7c:4c:ad:82:
                    95:ea:4a:20:68:8f:a7:61:78:89:37:f9:85:3a:de:
                    29:66:60:fd:66:ac:08:b7:bb:19:12:4c:44:10:fc:
                    29:7a:15:50:e9:aa:fb:33:26:69:52:58:63:f7:5b:
                    57:49:2c:0c:3b:6d:3d:ea:9a:a4:81:bf:03:e5:bd:
                    92:1f:88:cd:89:5a:df:50:95:2e:fc:f2:41:0f:72:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8C:03:38:B9:25:2F:FA:89:C8:A6:1B:D8:FC:AC:8F:44:EB:9F:76
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3136382e3132312e3133322e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:ef:a4:00:8e:e9:94:29:7e:ca:26:da:1c:29:25:7a:0b:
         92:8a:af:f4:32:36:1c:6c:37:11:80:2c:08:62:5a:25:3f:be:
         9d:02:ed:be:02:56:8f:fd:35:20:2a:c3:20:ee:64:25:dd:32:
         75:e2:c2:44:bb:62:9c:dc:b2:d8:13:53:f4:ed:cf:a0:50:85:
         a8:79:4a:79:b0:6a:4c:d5:90:ac:40:3a:c6:97:60:b2:24:1a:
         91:88:a0:da:fa:66:3b:67:ee:24:a6:55:2c:c4:d5:f5:57:07:
         19:be:bb:1b:a6:81:08:5b:07:ee:da:f6:21:82:17:d8:a9:ca:
         8e:e6:4c:02:73:e7:be:e2:eb:af:61:bd:82:01:45:b0:ec:2f:
         dc:a3:6d:2f:d0:2d:13:05:7e:e0:3d:65:79:85:49:25:44:6f:
         6f:f2:74:b9:39:9e:89:b5:4e:aa:4f:0d:31:22:2d:9e:4d:6c:
         a7:c0:8c:9e:96:17:b9:ac:1d:7e:4d:53:3e:c9:93:60:d6:1c:
         09:bc:4a:c6:9d:d2:88:b1:29:4a:13:02:a0:97:a0:d0:a4:64:
         f8:b0:4e:94:78:e9:29:07:ee:ed:f0:d2:27:d6:1d:3d:89:75:
         9d:b0:da:b5:2c:16:44:77:58:a7:ec:84:5d:3b:32:13:0a:4e:
         1f:9f:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net