Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa
File:                     3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          VDHUCSplWTHuezkskUD9hfEFSE73VJUpgWTBBPpXUcI=
Subject key identifier:   B8:D1:0C:0B:DD:11:B5:F5:68:F9:AA:FD:65:7B:0E:D1:31:F3:61:30
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       5E1E3410A0E2A8E20376A4450235EF341C3DEC38
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     61614
IP address blocks:        168.227.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1e:34:10:a0:e2:a8:e2:03:76:a4:45:02:35:ef:34:1c:3d:ec:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:44:08:95:60:16:bd:91:77:84:a2:c8:f6:
                    40:54:59:87:58:33:ea:1f:b0:f8:28:ad:c5:c8:75:
                    c2:6a:2c:6b:e3:8d:73:82:51:52:a3:99:cf:af:95:
                    cf:5e:fa:66:4b:4a:a0:a7:0a:7f:02:7f:36:78:d4:
                    4f:fe:78:14:4e:69:19:78:96:f1:ca:ef:05:c9:49:
                    8a:5e:24:aa:54:ff:94:86:8d:c4:fd:52:0a:96:6a:
                    39:4d:19:07:64:5e:68:c8:7d:7f:d3:6e:c4:08:49:
                    b4:e4:23:05:0d:18:1d:55:f3:bb:e0:1b:f2:e3:f1:
                    fa:f4:ec:4d:03:5d:81:e0:5e:e7:64:74:8b:22:8a:
                    64:10:0d:7b:c3:ec:89:e8:b0:61:e8:fd:7d:34:eb:
                    90:8c:b6:e2:3b:21:cf:1a:42:90:7a:f5:35:54:d9:
                    1e:e5:75:0e:6e:1f:ae:f0:80:c5:b0:59:28:ba:91:
                    f3:d1:bc:14:14:47:77:27:ea:c1:30:21:49:b7:03:
                    d6:70:64:ed:0d:e5:15:56:39:a0:91:dd:ac:0b:6b:
                    c6:e7:cc:72:0a:7a:11:38:57:9e:29:b3:61:63:71:
                    19:ca:dd:b0:58:30:dd:47:1e:ce:be:af:57:73:4b:
                    8a:ef:8d:a4:9d:bd:61:4e:f8:dd:c5:aa:d7:69:65:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D1:0C:0B:DD:11:B5:F5:68:F9:AA:FD:65:7B:0E:D1:31:F3:61:30
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/3136382e3232372e3231302e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:8b:b4:1e:fc:f5:67:0d:ff:fc:30:1c:d4:83:13:80:6b:
         d8:fc:f5:eb:ac:20:f5:6b:e3:6e:af:9c:e2:8c:5d:8a:f2:76:
         e8:59:b0:8c:e2:9d:dd:83:1b:07:29:70:7d:a3:44:7f:11:a5:
         70:b2:b3:41:ca:58:a0:76:96:03:4c:be:7a:21:37:f5:00:73:
         8e:09:85:ba:ff:a9:98:d5:07:24:8b:1f:3a:0a:22:c8:c9:c2:
         af:bd:83:5b:a7:6c:51:d2:56:fb:61:c1:fe:88:c6:95:10:5f:
         0c:6a:1e:a0:88:f3:10:e6:ca:9a:9a:c3:86:c1:da:30:26:a8:
         b3:c4:78:0b:2c:90:90:22:5c:41:f5:a4:bb:e8:52:bc:07:e1:
         10:44:f2:ab:dc:4a:90:e5:ec:2c:d4:e7:22:64:4f:5f:ac:b4:
         11:3f:f0:6b:89:2c:2c:21:92:98:62:f4:d8:e4:94:6b:d0:7b:
         0c:7d:bd:44:4d:26:af:86:d7:ac:c4:4f:2c:06:2c:e8:4b:dc:
         fd:ff:e1:05:96:d2:7a:7a:17:ce:99:a5:e4:3f:b9:77:9c:3c:
         59:7e:ca:27:68:73:56:31:25:5a:97:cc:78:1a:7d:6f:44:b3:
         13:f7:61:ad:3f:a6:3f:26:11:15:be:9e:7b:be:10:ca:87:c4:
         9f:9c:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org