Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa
File:                     3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa (raw, json)
Hash identifier:          JKe9JssGkK0jOUmtC4JKpDAkq6pPD/8ZDi/d9vwlhSw=
Subject key identifier:   F5:E3:50:89:9A:36:90:95:E0:BB:94:84:70:1D:4A:D3:57:C1:C7:B5
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       2A8AD2C93B3F16A309D300E7C129299AAB66B3D7
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa
Signing time:             Wed 03 Apr 2024 18:32:38 +0000
ROA not before:           Wed 03 Apr 2024 18:27:38 +0000
ROA not after:            Wed 02 Apr 2025 18:32:38 +0000
asID:                     265477
IP address blocks:        168.197.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8a:d2:c9:3b:3f:16:a3:09:d3:00:e7:c1:29:29:9a:ab:66:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Apr  3 18:27:38 2024 GMT
            Not After : Apr  2 18:32:38 2025 GMT
        Subject: CN=F5E350899A369095E0BB9484701D4AD357C1C7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:93:27:c9:ff:70:32:08:21:24:8b:73:96:
                    d2:ac:15:60:db:91:f1:58:bd:c3:12:f1:1d:47:19:
                    a4:42:6d:cf:e7:39:56:83:01:61:d2:28:4d:bf:1b:
                    cb:a9:79:e7:0c:2e:98:02:a0:c9:32:2a:46:95:f3:
                    d4:60:d4:4a:82:8f:b8:9d:c4:5f:c2:5e:be:7f:f6:
                    6e:03:05:44:c5:33:da:b5:f5:06:5b:09:6f:68:67:
                    1e:d9:bc:57:3d:19:9c:c3:8f:0a:6e:ea:7a:c3:c3:
                    a2:63:71:34:ae:cf:98:d2:45:e0:36:03:63:71:1f:
                    cc:4f:82:e1:0e:c9:0a:0f:78:0c:50:a7:2e:79:d5:
                    a9:25:ab:19:3d:e6:ae:d7:62:ba:f2:09:50:22:2d:
                    2a:6d:cd:89:50:76:d2:12:ad:30:53:37:14:bb:a7:
                    0a:8d:33:78:1e:f6:c0:26:a2:e3:0d:e8:3a:41:24:
                    80:ba:26:cb:50:98:fa:f4:dc:f4:00:4b:15:9c:8d:
                    76:0f:34:3e:64:1c:2e:54:65:0c:c4:79:7b:99:31:
                    51:60:44:3b:d7:f7:a4:0a:18:63:e8:d8:76:01:d3:
                    04:50:21:52:eb:cb:0c:ba:cd:c5:f5:65:56:9d:7b:
                    41:eb:7c:95:db:8e:7f:83:8f:b3:7f:ea:41:fc:25:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E3:50:89:9A:36:90:95:E0:BB:94:84:70:1D:4A:D3:57:C1:C7:B5
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130362e302f32332d3233203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:71:35:7b:b1:8b:f4:c7:6d:5a:26:44:44:df:5b:e8:0b:8a:
         e0:4d:2b:ee:d2:66:e0:41:62:d6:b8:6e:80:fb:a0:3a:09:e0:
         d1:4f:1a:a3:07:15:eb:96:40:12:d7:e7:f4:82:b6:86:71:4d:
         0c:0b:d9:ca:45:27:6d:0e:f0:55:09:65:b2:eb:d6:22:2a:94:
         a8:51:85:46:a5:53:f0:11:b0:7f:91:ee:ac:85:f8:8d:89:18:
         ef:0a:eb:23:da:a7:61:7e:ff:d9:1d:76:0b:81:3f:ad:a6:7d:
         1c:ac:ba:1d:db:2d:22:b1:d2:3f:9e:8c:1c:62:f5:ee:24:a5:
         73:e6:76:86:f8:4e:7c:61:e5:65:0e:6a:11:8d:1e:8c:46:07:
         2d:2a:c1:3a:f1:93:89:4b:1b:ba:b3:a5:03:c2:f6:47:9a:09:
         1a:b1:c1:c9:15:06:4d:0e:23:d8:74:20:9d:2c:79:8d:e1:a4:
         81:55:c3:e7:29:e7:b7:16:3e:13:87:61:4d:3d:26:62:2b:35:
         13:ae:97:05:25:49:9f:d0:6a:7c:3a:2c:ab:60:f0:41:9c:48:
         53:b5:e8:d7:ac:32:7a:4a:33:89:16:f9:cd:75:d5:46:85:72:
         ee:e9:1a:c4:9c:40:6e:23:c0:a6:62:0b:2e:cb:c5:5e:24:e2:
         26:17:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org