Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          v8XXXSbzgFxEkAH1CXGxWLU54Vvn6s3mlWRV6iO2Awk=
Subject key identifier:   3D:30:41:FF:F0:BF:A4:29:7E:A3:B3:E7:17:AE:E7:34:4A:03:08:7D
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       5F734B10CF829BB739A4F6C7DAEF42994B1E9CB9
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        168.227.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:73:4b:10:cf:82:9b:b7:39:a4:f6:c7:da:ef:42:99:4b:1e:9c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:8d:f8:69:a3:a7:48:c7:61:31:25:96:27:
                    4a:f5:f6:e9:d8:45:5c:03:a7:a5:39:07:f4:42:64:
                    06:25:95:ee:16:43:f4:ac:12:4f:8f:72:23:9d:1b:
                    1d:2c:bd:36:1b:d6:b7:b2:8e:f2:06:1e:45:26:fe:
                    a8:2d:da:ae:b4:da:df:33:9a:42:40:9a:ea:de:70:
                    fa:d9:2f:71:54:cf:31:9a:28:0a:12:26:78:cf:4d:
                    d9:be:8e:cb:f4:eb:53:8e:02:0e:6d:65:bf:29:6b:
                    c9:10:31:19:0c:ef:a5:49:b4:0b:1d:f2:8f:65:93:
                    38:38:82:56:17:9d:78:19:46:5a:77:36:59:59:4e:
                    9b:d2:8e:d4:11:e7:f7:36:d4:e7:06:f9:9a:df:87:
                    4c:e4:be:1e:32:8e:d1:9c:42:77:24:e2:50:b6:fb:
                    51:54:70:b8:12:2f:89:b5:66:bf:d3:00:a0:48:15:
                    38:59:73:f9:2b:ce:e7:e9:c8:d3:ff:be:a1:38:47:
                    d5:29:ba:86:87:cb:82:63:b8:08:a4:28:5b:f6:20:
                    50:b1:61:6a:ca:a9:86:c6:07:e0:fc:e2:c8:44:8e:
                    b0:dc:1a:6b:8e:ce:3d:3a:0d:00:94:2f:9a:9d:52:
                    0c:22:14:97:89:5e:ca:a4:49:89:bf:dc:7b:54:fb:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:41:FF:F0:BF:A4:29:7E:A3:B3:E7:17:AE:E7:34:4A:03:08:7D
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3230382e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5e:b1:bb:c0:9d:84:81:3c:aa:23:45:f2:bf:14:fc:16:8e:
         90:7b:61:6c:69:b9:aa:f0:ba:09:ad:2d:ca:3d:38:1a:46:bb:
         ed:5b:f2:2c:a3:36:16:75:8b:4a:0e:6d:97:7a:24:47:7d:4d:
         08:38:8d:df:7f:03:98:8c:4a:4d:ce:4a:79:a6:2c:a3:1b:f4:
         c5:06:92:7e:8d:51:88:75:7d:f0:2e:13:07:89:5c:4f:35:17:
         3e:e3:ec:51:1a:d9:09:79:3c:58:03:04:84:eb:5e:da:64:e2:
         52:b1:6d:5f:b4:9a:93:7b:aa:3b:db:ce:28:44:9a:23:ab:d1:
         ad:b6:ef:4d:29:a4:e5:8b:50:a8:88:74:ef:39:b6:0d:8f:0b:
         2b:9d:66:d7:24:b2:f7:3d:2b:6e:bc:ef:dc:26:72:2a:92:cc:
         ae:78:51:c2:39:76:bd:96:41:c9:75:c5:2e:f4:87:58:d8:ba:
         51:c2:35:e1:55:4e:5a:ea:4c:c2:f5:a1:e2:c1:95:f7:51:f4:
         f1:86:bc:dc:a3:95:43:12:ac:97:d1:28:9c:bb:c6:6b:70:bb:
         85:35:e2:48:8e:d3:02:cd:7c:05:4d:9b:2f:3f:2e:ee:cd:dc:
         7b:83:e6:a3:79:ad:c8:e6:c1:0b:9b:94:a5:63:e2:1f:78:49:
         e8:38:35:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org