Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32322d3232203d3e203631363134.roa
File:                     3136382e3232372e3230382e302f32322d3232203d3e203631363134.roa (raw, json)
Hash identifier:          P2S/2xtHiaUIF76rmAY6Uxs52d1CwjROVHDHFRdcVDE=
Subject key identifier:   4A:B8:63:DA:2A:86:B2:1D:AA:3E:37:6A:63:BC:84:28:B2:21:C6:D0
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       69D4AD457654767234606359C702C32B6994FA96
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32322d3232203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        168.227.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d4:ad:45:76:54:76:72:34:60:63:59:c7:02:c3:2b:69:94:fa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:0e:23:ac:64:08:58:a7:c1:ea:4d:40:ae:
                    09:94:d4:dc:23:38:68:ae:79:15:1e:f6:f1:23:c6:
                    3e:34:8e:a0:63:40:d4:b5:00:ad:0f:7c:d5:a8:23:
                    e3:62:6c:58:13:33:d1:1e:d0:79:49:bf:9d:6e:76:
                    17:57:8f:4d:c3:27:26:26:4d:59:d5:0a:d4:e9:2e:
                    e1:80:60:bf:4e:9d:ea:94:e5:ae:8d:e2:44:83:fd:
                    bd:f1:fc:0a:4d:b5:86:da:7c:d3:14:9e:f3:64:a1:
                    57:d3:7f:0c:0c:3a:61:ac:14:1a:6c:08:2e:4e:32:
                    d8:db:69:52:24:0c:60:11:dc:ce:67:66:ba:4a:75:
                    d9:56:63:e3:75:71:3d:f1:7c:7b:a6:4b:2d:fe:1e:
                    fd:75:11:2e:0a:c2:ba:cf:d4:63:fa:fe:a8:50:61:
                    c0:c8:1d:35:b2:73:c3:96:29:a0:c8:c9:2e:2b:63:
                    47:d0:15:47:12:27:86:97:e5:ec:cd:f5:5e:29:49:
                    f6:76:85:8a:a2:0c:65:4f:b4:1f:9b:c3:a6:a2:19:
                    6d:76:83:52:13:36:e4:d3:29:c4:af:38:75:3b:09:
                    47:20:78:e7:c7:c7:3c:e7:c5:3f:4a:53:f6:67:12:
                    85:fe:c1:5a:86:23:18:03:e6:09:2e:6b:e7:c9:0e:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B8:63:DA:2A:86:B2:1D:AA:3E:37:6A:63:BC:84:28:B2:21:C6:D0
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32322d3232203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:4e:a9:f9:0c:58:28:90:bc:32:ee:e2:b7:51:e3:f5:24:7e:
         99:4b:cd:ba:6b:80:c6:e4:65:01:72:73:7c:41:4e:e0:25:6e:
         ae:ad:5f:fd:b4:26:a9:4e:c4:3b:b8:05:05:d6:54:72:c0:27:
         da:6f:f8:66:c9:6c:4a:d0:6f:63:2e:36:9d:52:86:71:c3:f0:
         a8:73:96:c4:27:34:02:8a:67:de:34:18:3e:a9:b9:5d:36:b5:
         13:d5:f0:89:af:0c:c7:dd:40:77:44:dd:75:23:af:62:a5:f9:
         48:92:69:5c:44:1b:b1:41:5b:79:b9:c0:52:0f:62:fd:0e:eb:
         19:b6:c8:5f:c9:6a:11:0f:d9:a6:e6:f0:e5:61:43:f7:7e:74:
         5a:50:7d:b8:b9:98:68:05:17:b7:8a:3c:84:c2:92:39:e4:30:
         80:d8:bd:65:08:ab:f2:59:aa:9b:69:68:1e:05:7b:73:f1:ca:
         0b:78:09:d2:d1:c3:f9:1d:92:79:f7:72:ab:b6:48:96:c4:2a:
         49:92:5f:53:11:f6:32:a3:f6:83:8d:50:fd:bd:b5:2b:b3:22:
         95:2b:88:3b:05:eb:bb:d5:50:45:72:b5:0c:b7:b3:23:22:84:
         ca:fc:c4:1b:a2:c2:bc:c3:f5:ea:8e:a4:f8:fa:e6:ef:00:11:
         00:21:3e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org