Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e31312e302f32342d3234203d3e20323634393030.roa
File:                     3136382e3232382e31312e302f32342d3234203d3e20323634393030.roa (raw, json)
Hash identifier:          GlzMdUVqyX7ng/AW4HhCi0coySdZi1Xo8uhox/zCOQc=
Subject key identifier:   1B:4E:1A:94:D1:E1:80:24:0B:E5:AB:4A:5F:7D:10:EE:FE:C7:BA:8C
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       02FE4B091540E944BF3862F6432887C3DAAFD2E1
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e31312e302f32342d3234203d3e20323634393030.roa
Signing time:             Thu 18 Apr 2024 13:12:22 +0000
ROA not before:           Thu 18 Apr 2024 13:07:22 +0000
ROA not after:            Thu 17 Apr 2025 13:12:22 +0000
asID:                     264900
IP address blocks:        168.228.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 05:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fe:4b:09:15:40:e9:44:bf:38:62:f6:43:28:87:c3:da:af:d2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Apr 18 13:07:22 2024 GMT
            Not After : Apr 17 13:12:22 2025 GMT
        Subject: CN=1B4E1A94D1E180240BE5AB4A5F7D10EEFEC7BA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:03:70:e9:94:95:86:9f:a8:42:6a:bc:69:2a:
                    6f:10:c8:32:23:bf:72:47:7d:2c:13:c8:c3:89:81:
                    e3:1b:fe:7c:1a:25:5f:7c:7b:f8:f6:f5:fb:92:76:
                    f7:ef:40:14:3f:67:f1:5c:9d:ca:72:48:41:3d:2b:
                    53:21:9a:a9:9d:1f:58:3b:ac:b6:f7:89:42:93:6f:
                    b8:ba:82:87:fa:e4:cd:48:cb:d2:cf:b4:b6:01:2d:
                    8c:8e:8c:35:2c:e9:44:fe:be:eb:a6:82:ac:43:8f:
                    7d:8d:60:b3:3e:02:14:b1:42:67:29:99:1c:e1:96:
                    4a:da:b2:17:6b:ac:b4:f3:c6:de:f5:6f:4c:63:f4:
                    d5:ca:b0:ee:9f:1d:96:3c:3f:6d:de:62:7a:85:15:
                    58:1d:1e:31:9b:47:92:48:b1:03:20:56:2f:25:7c:
                    a3:ad:57:e7:ac:9d:eb:80:61:34:0b:dd:de:35:eb:
                    27:cd:11:46:3f:f6:7c:be:61:dd:88:55:96:b1:a1:
                    b2:9c:10:f9:fb:58:5f:d4:d9:69:84:d5:b9:aa:fa:
                    80:0b:06:34:26:2c:79:cd:38:d9:4e:05:01:45:b0:
                    46:54:01:93:02:74:9b:b4:88:90:3a:17:38:45:45:
                    7e:93:73:b3:f1:30:93:10:f3:48:46:5d:c8:74:0d:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:1A:94:D1:E1:80:24:0B:E5:AB:4A:5F:7D:10:EE:FE:C7:BA:8C
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e31312e302f32342d3234203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:ee:0e:5c:d9:a8:78:94:72:16:49:fd:56:95:fa:fa:b2:
         a8:67:21:f5:7e:5c:32:fa:a4:ea:16:1b:f9:e6:9d:00:ab:70:
         17:e0:3e:eb:ed:61:5c:59:91:3a:44:3d:fe:f6:2b:6a:71:cb:
         4c:a8:00:3a:4e:dd:90:b5:b4:49:3a:1f:2f:ea:af:d1:92:a4:
         7b:05:88:e4:8f:36:76:00:f9:cd:33:13:41:67:7d:f7:61:25:
         24:47:5e:a5:bd:0d:51:3c:2b:d0:cd:fb:0c:bf:fe:38:e5:0b:
         3d:95:9f:3c:77:ef:1f:08:23:3d:6e:d9:c5:1d:70:73:80:28:
         be:58:64:1c:da:f1:e4:19:4c:3d:41:6b:47:22:45:7e:37:a4:
         7f:20:7e:f6:71:f1:2e:26:ad:56:a8:9f:80:85:1b:b7:a9:5f:
         78:54:9d:a0:2a:a3:8c:21:5f:c2:b3:3a:32:d0:41:17:74:67:
         d1:c9:10:ee:20:80:9b:55:de:f3:b9:8b:36:84:4e:dd:b8:df:
         14:2f:ba:21:72:cb:5d:ea:b7:81:e1:e2:0d:dd:55:45:ba:69:
         7c:32:45:c2:d9:1c:a2:e5:69:45:c3:76:9a:bc:a5:59:d5:95:
         a6:78:4a:c4:bc:30:a4:b4:b5:ca:fe:ad:25:1e:9a:d0:3e:50:
         d6:3f:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 05:00:27 2024 by rpki-client on console-fra.rpki-client.org