Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa
File:                     3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa (raw, json)
Hash identifier:          BVcj1TiQ25lQR5MSJtSuUBAO8tgIHwn/rRzYMhijinE=
Subject key identifier:   F5:15:52:19:3B:11:4D:B2:D8:76:9B:5E:F4:39:D6:89:EC:B0:14:96
Certificate issuer:       /CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
Certificate serial:       7886E853A402CCE19F4A30CAA7CA9F0C955E5BE7
Authority key identifier: AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa
Signing time:             Thu 04 Apr 2024 05:43:13 +0000
ROA not before:           Thu 04 Apr 2024 05:38:13 +0000
ROA not after:            Thu 03 Apr 2025 05:43:13 +0000
asID:                     265378
IP address blocks:        168.194.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl
                          rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 00:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:86:e8:53:a4:02:cc:e1:9f:4a:30:ca:a7:ca:9f:0c:95:5e:5b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
        Validity
            Not Before: Apr  4 05:38:13 2024 GMT
            Not After : Apr  3 05:43:13 2025 GMT
        Subject: CN=F51552193B114DB2D8769B5EF439D689ECB01496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:95:08:79:9c:a5:9e:d7:a4:df:6c:6a:0a:
                    de:8d:e1:1a:fe:a2:f1:34:ae:db:04:2f:ad:4e:5f:
                    dc:4d:5d:5c:2c:ae:54:35:d2:f2:e3:89:3b:0d:35:
                    8b:8a:86:ea:a6:88:68:12:2b:48:df:93:35:fc:55:
                    2a:26:5a:34:4a:eb:dc:ca:74:73:3d:9c:25:40:66:
                    c3:8b:c9:3a:e3:1c:37:3b:81:08:b3:50:d1:3e:b7:
                    49:ce:3f:5f:ff:ce:85:4a:4c:29:1f:6f:f8:a9:23:
                    99:54:3f:1f:d3:bd:69:42:cc:83:92:69:7e:1d:45:
                    a2:c6:ed:0e:c4:8c:9c:39:fc:da:d9:85:d5:fe:b0:
                    78:5e:a8:83:8f:37:55:1b:3c:26:c8:f7:b5:6d:60:
                    04:b3:ca:9e:84:91:85:48:92:8b:f6:10:cf:cc:89:
                    c8:be:a4:a9:85:d7:e6:83:5c:d8:58:3c:a2:dc:b5:
                    8b:53:45:de:c5:ec:17:54:5d:7c:e4:e9:e8:71:ab:
                    92:2c:be:56:8d:81:17:36:17:72:14:ef:41:4c:56:
                    23:c3:30:a0:66:bf:55:b8:b0:b0:cc:71:0e:a6:cf:
                    2c:e7:22:d2:1f:52:42:36:47:ee:bf:7f:b6:d2:a2:
                    5d:58:5d:e7:ab:43:3b:a0:9d:37:b5:5b:8b:3e:f6:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:15:52:19:3B:11:4D:B2:D8:76:9B:5E:F4:39:D6:89:EC:B0:14:96
            X509v3 Authority Key Identifier:
                keyid:AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32322d3232203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b4:60:3e:e7:30:99:d0:1b:86:40:27:ec:ed:85:3b:c0:fd:
         07:f9:35:05:3f:be:82:59:91:b8:e6:a3:b3:22:00:e2:ff:1d:
         4b:80:33:3b:7c:5b:89:75:c7:a7:eb:44:9f:5a:55:7c:c1:1c:
         f8:b9:c9:7e:26:0a:5e:19:52:eb:96:5b:da:b3:01:66:1d:44:
         9a:de:f5:d7:25:b7:d8:14:fa:4e:fd:12:aa:05:00:3b:f5:53:
         6c:dd:65:e3:90:60:23:a8:a1:68:db:77:20:75:29:16:70:20:
         b9:ff:a3:87:a9:b5:19:bd:58:93:2a:bc:45:9f:7e:c1:88:f3:
         d3:2f:fd:e8:7c:34:16:b4:db:6c:a7:64:e6:e6:17:41:4e:14:
         f6:75:65:1e:7c:17:34:17:24:c8:2a:8d:75:17:19:b9:29:03:
         e4:04:03:7c:f3:da:51:5a:6b:ef:55:41:e9:ef:20:b2:27:b8:
         c3:ef:87:99:dc:b7:2b:36:53:0d:29:e4:ec:3a:8f:15:a8:49:
         e1:d3:55:aa:5c:5c:e2:94:33:8d:cc:2d:d2:66:a1:be:90:23:
         b2:1c:e7:31:5f:56:0e:7c:68:b2:58:6b:d0:3e:2d:c0:40:ae:
         19:e8:40:c7:c8:9c:62:33:4b:64:53:a0:30:ab:4a:f3:81:ee:
         91:49:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:36 2024 by rpki-client on console-ams.rpki-client.org