Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa
File:                     3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa (raw, json)
Hash identifier:          dYmMHAl0eYN1cXjJvsSky2atzD0U4gCWKYFBHJROiX4=
Subject key identifier:   C6:27:DC:D3:DE:42:41:21:D3:11:7E:69:AE:0C:5B:9F:DB:D7:6B:D2
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       7F4E39AACD27C73FDC5847C7F3F15ED69C007FEF
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa
Signing time:             Wed 03 Apr 2024 18:32:38 +0000
ROA not before:           Wed 03 Apr 2024 18:27:38 +0000
ROA not after:            Wed 02 Apr 2025 18:32:38 +0000
asID:                     265477
IP address blocks:        168.197.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4e:39:aa:cd:27:c7:3f:dc:58:47:c7:f3:f1:5e:d6:9c:00:7f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Apr  3 18:27:38 2024 GMT
            Not After : Apr  2 18:32:38 2025 GMT
        Subject: CN=C627DCD3DE424121D3117E69AE0C5B9FDBD76BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:14:95:99:f3:5e:a3:4c:6e:c6:a8:27:a0:
                    7b:3d:4d:0e:ce:71:96:c5:08:27:8e:ab:bc:fa:dd:
                    84:70:50:83:f5:8c:84:60:fe:98:2c:f7:65:99:0e:
                    73:9d:4c:19:70:69:f4:95:38:07:83:b7:14:b9:8d:
                    94:cd:75:70:25:64:e1:00:87:ba:4b:dc:7c:24:8a:
                    6b:34:16:ae:c7:76:db:81:8f:30:19:c2:1f:62:fb:
                    17:a7:b4:db:9a:09:55:40:65:98:59:f7:8c:b1:38:
                    02:08:a6:3e:60:e7:4f:ae:82:aa:71:90:41:70:c3:
                    4e:b8:f6:f4:cc:2f:80:ee:f4:e8:5b:bd:fa:ba:f0:
                    77:56:d7:82:36:dc:63:33:52:40:44:01:49:79:0f:
                    ff:8d:0d:3e:43:f6:d9:f5:b2:10:84:0f:74:a1:97:
                    69:46:eb:a7:d7:67:8c:4a:f1:d1:20:d3:ec:91:ea:
                    e5:27:be:ba:57:e8:22:7e:84:c9:57:e3:28:7f:f8:
                    e8:9b:f2:5b:5f:e4:7a:e2:6b:52:a6:ce:2f:a7:fa:
                    51:28:04:97:57:5e:cc:7c:ad:aa:13:96:61:82:c5:
                    5c:34:70:89:5a:2e:1b:aa:34:2f:1c:39:d3:95:5e:
                    96:52:50:79:8c:72:31:0c:36:f9:5f:cf:c7:b6:bb:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:DC:D3:DE:42:41:21:D3:11:7E:69:AE:0C:5B:9F:DB:D7:6B:D2
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32332d3233203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:34:0b:46:f2:9d:2d:75:e7:02:5f:c9:09:dc:58:92:c8:96:
         1d:8b:25:c4:4a:59:a0:0a:8e:db:96:1d:04:3f:b3:b1:24:a4:
         fb:1f:76:12:b0:3a:99:66:fe:4f:c9:f6:a9:9f:7e:aa:bc:20:
         c9:fb:c9:1d:d9:8a:5b:f8:3d:f5:4f:35:1d:d9:75:bd:cf:b3:
         61:b9:cc:8b:ed:cf:1f:37:c7:61:1e:14:7d:3a:34:c6:b9:a3:
         11:dc:34:81:cb:ab:18:08:26:3b:29:d0:f0:f3:42:48:2a:49:
         25:87:41:0c:d9:48:51:18:d2:18:9c:2f:3c:37:3e:d7:49:4b:
         df:18:0f:62:c0:fd:51:8d:95:2f:3f:50:fa:d1:49:f7:9e:ef:
         59:72:28:d6:65:bd:6b:3b:79:0e:df:43:61:8d:c2:6b:60:44:
         f7:f8:c3:42:f5:d2:7f:56:2a:e5:be:53:b4:23:ae:13:00:e3:
         1b:be:41:3a:fe:86:7a:5c:97:b0:be:f7:8b:b1:43:83:50:7c:
         1f:80:b5:ae:b2:75:3e:90:bf:14:a8:2d:1b:b7:88:49:ce:8d:
         16:49:5f:61:48:83:c3:ee:d7:76:02:9d:bd:28:7c:f3:e2:17:
         40:7b:9a:79:cc:33:c0:e5:17:a8:20:b8:85:5c:bf:5c:e7:dc:
         ae:8a:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org