Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3136382e3230352e3137362e302f32322d3234203d3e20323632343539.roa
File:                     3136382e3230352e3137362e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          crG6wuwRphiUEA45oZtR+oPl8QyZavIq2lVKpnf7lNQ=
Subject key identifier:   31:94:A8:96:97:85:9F:A7:06:07:9D:0B:69:2D:8A:73:24:1A:E6:E5
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       36EB5492F270130F55EEF0A143B634B9F6A5CEF7
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3136382e3230352e3137362e302f32322d3234203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:30 +0000
ROA not before:           Thu 04 Apr 2024 02:55:30 +0000
ROA not after:            Thu 03 Apr 2025 03:00:30 +0000
asID:                     262459
IP address blocks:        168.205.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:eb:54:92:f2:70:13:0f:55:ee:f0:a1:43:b6:34:b9:f6:a5:ce:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:30 2024 GMT
            Not After : Apr  3 03:00:30 2025 GMT
        Subject: CN=3194A89697859FA706079D0B692D8A73241AE6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a7:2f:cf:81:c7:4c:16:a1:b3:f5:cb:c8:9c:
                    42:a3:af:b4:21:eb:0e:b8:a4:53:bd:3b:ec:f2:15:
                    ec:b1:ca:ea:c9:dc:8d:65:6a:c8:b6:f7:5b:01:1e:
                    1e:4f:a3:ca:0d:06:a3:1c:86:35:f8:01:8c:92:90:
                    ff:d5:2d:d6:d4:7d:4b:38:39:60:79:2f:98:fb:e4:
                    60:e6:57:b4:4c:54:ab:81:fc:53:7b:5b:78:4a:dd:
                    d8:99:95:4d:d6:64:fe:d0:67:aa:6d:a5:ce:57:39:
                    fd:18:67:0c:77:80:6e:15:2f:a2:9b:26:4c:76:ff:
                    5c:e8:b8:e0:a3:46:6d:3d:dd:dc:9b:6d:13:3e:7a:
                    01:df:f8:57:a1:28:38:d8:bc:22:4c:e3:db:6f:69:
                    75:91:71:ee:9c:28:db:84:34:dc:60:95:ba:bf:f2:
                    bb:b8:64:ba:8e:65:6c:d2:2f:18:aa:8e:ec:e8:1c:
                    9e:cb:7c:66:4f:f5:6e:91:76:66:04:bf:30:70:27:
                    79:92:c3:b0:fe:5c:48:7b:0f:f8:52:b9:a8:24:83:
                    ca:f9:5c:de:56:41:01:f6:21:a4:2a:a2:01:ce:45:
                    ec:75:8b:f7:f0:ad:01:a4:07:22:92:90:05:93:f0:
                    89:5e:ec:50:24:dd:f9:67:76:c7:2c:a7:ae:37:92:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:A8:96:97:85:9F:A7:06:07:9D:0B:69:2D:8A:73:24:1A:E6:E5
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3136382e3230352e3137362e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:cc:79:69:42:74:51:93:0a:2d:fa:c6:cd:f7:a0:83:44:67:
         d0:99:44:53:e6:ec:7c:33:56:91:eb:fb:ee:a8:4f:0c:88:38:
         75:28:30:e1:94:bd:d9:fc:9d:a8:56:e2:74:b8:88:41:aa:96:
         93:b4:17:65:88:53:90:5a:ac:19:9f:63:c4:93:50:c5:28:93:
         be:fb:ff:72:d5:60:f5:76:7c:63:83:a8:69:09:90:a1:18:43:
         13:15:ed:7a:60:ca:fc:41:4d:a3:6e:67:88:13:4e:c6:65:c8:
         9e:77:a2:75:ca:50:42:6f:9a:95:56:ab:b5:86:35:cc:1e:c9:
         68:c3:da:d8:1f:e1:38:9b:89:57:40:9a:f6:c4:6b:4f:16:05:
         81:c9:8e:da:6f:05:28:76:70:13:d8:3f:e3:a2:0a:6f:dc:97:
         67:96:f3:77:f2:5b:0c:9e:67:ec:ff:32:eb:5c:38:14:c7:94:
         73:da:5b:01:b6:0d:73:09:46:21:02:14:b1:bc:ee:1d:94:d4:
         f8:c8:f7:d4:98:60:9c:c9:1c:86:3f:2a:47:4c:4f:fd:e7:5d:
         c1:67:30:53:96:62:f7:1a:ac:ab:b4:dc:e6:44:2b:76:2d:da:
         8d:b3:7e:b5:4a:c3:70:93:17:54:36:68:1a:e9:ee:27:a1:78:
         4f:f4:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:19 2024 by rpki-client on console-fra.rpki-client.org