Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa
File:                     3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (raw, json)
Hash identifier:          11Kuorsc2u6+dXmgxwQ4IPmblZ+1tcoHd85TXC8EJGA=
Subject key identifier:   23:40:5E:33:6F:E9:D7:B0:07:96:22:E4:AF:EB:16:8E:51:7D:BB:10
Certificate issuer:       /CN=0C688B1742C7B62FA4505F58367DC4F3A887407D
Certificate serial:       6B7F008829497FF7A5002B8E1A32CC8FB6EDD08F
Authority key identifier: 0C:68:8B:17:42:C7:B6:2F:A4:50:5F:58:36:7D:C4:F3:A8:87:40:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C688B1742C7B62FA4505F58367DC4F3A887407D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa
Signing time:             Tue 05 Nov 2024 13:55:49 +0000
ROA not before:           Tue 05 Nov 2024 13:50:49 +0000
ROA not after:            Tue 04 Nov 2025 13:55:49 +0000
asID:                     263252
IP address blocks:        168.197.228.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/0C688B1742C7B62FA4505F58367DC4F3A887407D.crl
                          rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/0C688B1742C7B62FA4505F58367DC4F3A887407D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C688B1742C7B62FA4505F58367DC4F3A887407D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:00:88:29:49:7f:f7:a5:00:2b:8e:1a:32:cc:8f:b6:ed:d0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C688B1742C7B62FA4505F58367DC4F3A887407D
        Validity
            Not Before: Nov  5 13:50:49 2024 GMT
            Not After : Nov  4 13:55:49 2025 GMT
        Subject: CN=23405E336FE9D7B0079622E4AFEB168E517DBB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:27:82:d4:52:f7:fd:69:f8:88:cb:64:40:
                    07:04:c3:d1:f1:e2:de:01:03:a3:ee:f4:55:2a:09:
                    49:f6:13:bc:7b:6a:17:63:8a:d4:6b:db:70:d6:bb:
                    b8:26:fe:53:ae:7c:96:50:3b:06:e5:b1:4a:39:1a:
                    ad:81:b6:86:93:a4:83:e6:e3:bb:16:c7:5e:44:d6:
                    35:6e:5d:4f:f6:b0:6d:c4:30:42:9b:e7:0e:a4:3f:
                    00:39:e6:e1:b9:74:ab:d1:11:12:4a:ce:fc:76:e0:
                    80:70:47:3d:a9:ad:65:c2:e7:4a:6e:f8:73:d2:fd:
                    b9:8a:8a:30:a6:3a:45:e0:04:f4:3e:98:57:3d:48:
                    63:70:39:ba:98:fc:7c:c5:70:1c:04:03:7f:5b:3e:
                    8b:77:b2:fd:41:a2:f8:d1:7c:3c:57:e1:05:c9:21:
                    16:11:c1:49:f2:36:c7:49:74:f1:dc:7b:a6:1a:b5:
                    f0:1f:35:9d:43:11:1f:bf:af:55:eb:5a:a5:a7:bf:
                    79:6b:e6:80:16:4e:44:6f:c8:13:f4:ce:7c:7e:b4:
                    c0:04:6a:bd:a7:99:61:ae:dd:57:7a:24:40:6f:3c:
                    f9:28:72:e8:f7:93:58:7e:40:6e:42:12:52:7a:2f:
                    3f:ec:e5:bf:01:f2:e7:b4:1e:06:68:c8:f6:8f:cc:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:5E:33:6F:E9:D7:B0:07:96:22:E4:AF:EB:16:8E:51:7D:BB:10
            X509v3 Authority Key Identifier:
                keyid:0C:68:8B:17:42:C7:B6:2F:A4:50:5F:58:36:7D:C4:F3:A8:87:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/0C688B1742C7B62FA4505F58367DC4F3A887407D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C688B1742C7B62FA4505F58367DC4F3A887407D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:b2:f9:ec:23:b1:22:6a:2b:43:23:31:23:81:4a:07:81:
         24:6e:24:2a:58:4b:40:11:66:1b:f2:89:ec:7d:ae:5c:2d:8e:
         e1:f3:36:85:5a:ae:4e:41:2c:bb:40:fd:d6:9d:4c:5c:f6:ef:
         42:ba:ee:76:9e:24:5d:01:09:db:e2:36:34:6d:a4:6b:0e:eb:
         8d:0c:7e:64:bd:7c:df:18:33:f1:c1:8c:c0:ff:77:f2:e9:ef:
         dd:be:e4:83:fe:86:47:00:b5:99:66:6b:83:33:bd:b5:f7:54:
         6b:f5:c3:98:2e:ac:e1:ac:51:83:b1:58:ee:9b:de:cb:2a:e7:
         75:69:f6:70:ba:13:1c:3f:c2:81:45:eb:c0:f2:2f:8b:7d:cc:
         e8:a3:7b:78:4f:0c:2b:22:12:57:9c:f6:e3:57:bf:1a:b2:ba:
         83:3b:9a:c0:04:43:30:23:92:e9:8d:5d:05:72:ce:4b:d9:2f:
         b9:04:5d:80:a1:b4:83:d1:2a:bb:b2:f9:05:56:52:cf:f8:03:
         d6:aa:1e:3f:79:e9:9d:57:e1:fa:de:c6:7a:50:85:cc:e7:e7:
         41:b2:d2:63:0e:a1:37:9a:b9:a6:fd:c1:d5:86:f1:6d:98:34:
         9f:33:42:d3:34:d4:b1:9c:27:d4:bc:99:29:15:99:e6:7d:41:
         25:cc:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:35 2024 by rpki-client on console-fra.rpki-client.org