Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32342d3234203d3e20323635333738.roa
File:                     3136382e3139342e34342e302f32342d3234203d3e20323635333738.roa (raw, json)
Hash identifier:          0TMKigMOFGjK6LIt1ybOGqmBQ0SgvGz79nIbmp6xx3I=
Subject key identifier:   5C:B2:02:19:AA:7C:21:DE:25:A3:8C:D2:25:C5:CD:AE:2C:BF:E6:EF
Certificate issuer:       /CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
Certificate serial:       615D9146EF2592D5A5B7ECFFA6B24E7DF062D791
Authority key identifier: AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32342d3234203d3e20323635333738.roa
Signing time:             Thu 04 Apr 2024 05:43:13 +0000
ROA not before:           Thu 04 Apr 2024 05:38:13 +0000
ROA not after:            Thu 03 Apr 2025 05:43:13 +0000
asID:                     265378
IP address blocks:        168.194.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl
                          rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5d:91:46:ef:25:92:d5:a5:b7:ec:ff:a6:b2:4e:7d:f0:62:d7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADA19A8F33624B7B066BD949E208F7B0E08B621
        Validity
            Not Before: Apr  4 05:38:13 2024 GMT
            Not After : Apr  3 05:43:13 2025 GMT
        Subject: CN=5CB20219AA7C21DE25A38CD225C5CDAE2CBFE6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:d4:f5:d7:d6:6a:74:4c:10:b0:89:23:50:
                    67:c7:f8:9b:35:70:bc:65:03:56:85:b6:1d:2e:d8:
                    70:10:51:e4:b6:d7:b9:83:0a:76:ee:1b:2e:9f:5f:
                    4c:f4:5b:0f:c8:00:ab:38:56:2c:e8:60:94:c5:64:
                    c8:42:70:5f:41:84:57:e2:a2:51:40:54:36:84:16:
                    23:c6:d5:51:7a:d4:47:44:1d:38:f4:bd:26:43:3a:
                    87:51:30:1c:0b:82:d0:57:09:24:4e:53:8c:f0:20:
                    be:d2:dd:1c:76:d1:f1:4c:87:53:d8:a6:0b:2a:e8:
                    ad:a2:9b:31:2d:4a:99:48:d5:1b:f9:43:e5:d3:45:
                    73:82:77:b5:8e:24:b4:e9:69:92:ba:98:49:ec:61:
                    97:5e:4b:3d:0d:c9:c6:34:2a:fc:fe:48:6d:ad:4d:
                    ef:33:43:d4:2c:88:40:5a:bb:11:f4:5d:c7:24:19:
                    23:8d:47:83:dd:af:a4:00:98:1e:d2:82:90:b8:7b:
                    c4:95:08:39:44:a6:2d:62:d9:67:55:33:1f:82:5a:
                    dd:df:08:a1:af:55:50:c6:66:1f:05:78:c6:5d:1c:
                    36:16:9b:d3:ba:4c:81:f6:18:fb:8d:3b:99:b1:06:
                    24:cd:35:a8:30:d4:07:2b:e8:0b:69:d5:40:5a:a6:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B2:02:19:AA:7C:21:DE:25:A3:8C:D2:25:C5:CD:AE:2C:BF:E6:EF
            X509v3 Authority Key Identifier:
                keyid:AA:DA:19:A8:F3:36:24:B7:B0:66:BD:94:9E:20:8F:7B:0E:08:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AADA19A8F33624B7B066BD949E208F7B0E08B621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/1/3136382e3139342e34342e302f32342d3234203d3e20323635333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:6a:7a:1c:15:79:17:c9:d5:2d:a1:d0:bf:91:a5:dd:d3:
         af:62:31:78:26:3c:1a:c8:0f:da:29:38:6a:8d:9c:d3:7d:d3:
         53:e2:4e:eb:06:56:89:f8:71:9f:bc:28:84:c9:82:0c:c3:b6:
         ac:b3:59:95:71:2a:1c:15:a1:80:f8:76:31:ee:24:1e:23:04:
         47:5a:d4:9e:4c:c4:b8:1e:aa:7f:c1:a8:ea:cb:b6:af:3a:55:
         fb:1f:a0:c9:88:69:95:7a:2a:97:e2:8f:73:ff:cf:0d:b2:ce:
         71:cf:e3:68:63:66:e8:88:ca:6c:be:ee:3c:09:71:75:a7:2c:
         ba:6b:0c:69:45:b7:95:3e:05:6b:58:de:10:c5:d5:3d:73:3f:
         40:05:1b:6c:d2:0f:1d:14:55:6c:cf:aa:e8:74:a1:c6:ce:b8:
         1a:e5:e1:cd:04:24:e0:2c:1d:84:3e:8c:b5:68:be:09:7c:ae:
         4d:0f:4a:af:a1:62:d3:27:b1:13:3e:47:62:df:11:03:77:cb:
         a4:b8:15:30:79:85:e4:e8:ce:cf:22:1a:d5:a0:aa:25:41:7b:
         df:9e:d1:8a:97:5a:22:0f:52:c4:23:ef:6e:95:00:14:32:ce:
         83:44:1e:c7:7a:03:2b:18:e0:29:94:5b:af:0f:ac:76:7a:c5:
         86:78:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:41 2024 by rpki-client on console-ams.rpki-client.org