Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa
File:                     3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa (raw, json)
Hash identifier:          zduoyA94Ufm4sLYizQdK3+HczKDiG1yyvgOQ1Qf8D3E=
Subject key identifier:   BB:1F:A2:26:50:07:2E:42:23:96:7B:BA:74:7E:EE:8A:7A:A4:37:80
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       68E35E497726EBE16D0CBF6F62FD3781B467EC50
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        168.227.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e3:5e:49:77:26:eb:e1:6d:0c:bf:6f:62:fd:37:81:b4:67:ec:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:ec:85:84:27:c5:22:d2:73:57:fa:52:c9:
                    e2:e4:7d:6a:2d:11:74:5c:9c:c6:26:ca:7e:fe:d5:
                    b0:61:66:12:d2:24:57:08:ce:99:03:b6:ea:86:32:
                    1c:03:c8:f1:39:23:2f:11:57:bf:2d:8a:01:11:56:
                    32:3d:f6:4b:0a:9c:bf:dd:d6:64:47:19:c2:2f:a1:
                    8d:6c:5d:f2:bf:c9:66:5b:ba:bd:71:38:20:19:be:
                    02:91:f5:46:8e:65:9f:61:b0:de:80:8a:ee:b3:93:
                    b0:60:ab:6d:4e:58:43:0e:b7:ed:be:46:a6:97:cf:
                    5e:53:d0:38:7e:0d:0e:76:d3:1e:ed:d5:f5:a5:6d:
                    43:eb:47:9d:15:63:0c:f3:91:a2:c9:e0:30:1e:cc:
                    91:5c:71:88:57:16:ab:05:e9:92:f3:9c:ee:30:65:
                    c8:14:88:e7:c8:84:2e:03:9d:df:bc:51:a0:3e:f5:
                    51:d9:31:18:53:20:ff:33:25:11:fc:ff:81:6b:a3:
                    47:61:bf:07:68:c1:4a:98:89:be:eb:16:71:93:6c:
                    ab:44:39:5c:17:45:d6:88:22:e8:d3:58:cf:e0:77:
                    62:19:88:b6:38:fc:68:1d:12:a1:80:d7:d1:01:ca:
                    fb:1c:95:e5:15:1f:95:9d:86:d5:d8:8d:76:68:d5:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1F:A2:26:50:07:2E:42:23:96:7B:BA:74:7E:EE:8A:7A:A4:37:80
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32332d3233203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:64:61:57:81:26:30:7d:86:6b:d2:a8:ea:b5:97:a5:25:4c:
         2b:ec:29:b9:33:1c:a1:35:6f:c5:04:6d:36:fc:35:3f:a6:62:
         6d:1a:8e:83:c3:a6:91:a3:c2:2c:4e:cc:1c:a4:61:de:78:a4:
         79:64:66:8b:b0:d7:d5:e1:af:b4:66:27:c9:d8:4e:87:51:d7:
         63:a3:d4:c5:02:0e:c3:60:3f:26:7c:0f:2a:fa:6a:fc:32:9e:
         e7:b5:f5:57:f2:68:24:ef:19:31:8c:cb:51:4b:b6:22:c2:7e:
         be:07:42:da:59:d3:d9:3d:2d:b6:23:93:44:b6:1b:aa:b3:53:
         55:71:ad:fe:b1:c2:81:b9:54:00:c7:b4:b4:30:02:85:87:11:
         ff:d6:89:1c:2a:f5:49:1e:74:ff:fc:c5:e8:c9:84:29:fe:ab:
         1b:ae:13:9d:3b:bf:01:f6:54:80:a6:5d:5f:86:7f:db:50:93:
         90:fb:fe:91:de:38:cf:0b:17:bc:fe:74:d2:c3:5a:f7:59:91:
         a9:12:93:e4:d4:0c:00:58:dd:83:4d:2d:e4:01:28:6f:ec:c7:
         64:f0:cf:03:d4:48:af:cf:bf:6c:61:0d:d8:a1:94:0d:aa:04:
         e5:de:1d:c2:c9:18:14:02:e0:33:9f:d1:61:d3:ec:4d:9d:35:
         87:90:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org