Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3234203d3e20323634393030.roa
File:                     3136382e3232382e382e302f32322d3234203d3e20323634393030.roa (raw, json)
Hash identifier:          X30GDNhBATspB3Yc2jqiXrpLoxwNkXnbgmsx/7FaaSA=
Subject key identifier:   02:0F:6C:3F:F7:FC:18:E9:12:B9:32:DC:35:F7:53:C4:F0:44:21:18
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       1B7B73B205961A205DA725E9B8828B171EED806F
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3234203d3e20323634393030.roa
Signing time:             Wed 05 Jun 2024 19:26:02 +0000
ROA not before:           Wed 05 Jun 2024 19:21:02 +0000
ROA not after:            Wed 04 Jun 2025 19:26:02 +0000
asID:                     264900
IP address blocks:        168.228.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7b:73:b2:05:96:1a:20:5d:a7:25:e9:b8:82:8b:17:1e:ed:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Jun  5 19:21:02 2024 GMT
            Not After : Jun  4 19:26:02 2025 GMT
        Subject: CN=020F6C3FF7FC18E912B932DC35F753C4F0442118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:c2:ec:f0:49:5f:ff:06:a2:b3:ea:b7:56:
                    b6:56:bb:0c:09:2b:15:af:d4:b8:7a:c6:d4:6f:85:
                    cd:80:72:9a:ff:bb:b7:23:11:77:7e:4a:c2:a9:e8:
                    4d:42:e4:d2:ba:8f:1e:de:fd:2c:1c:7b:b8:7c:fe:
                    19:9e:e0:4b:3e:ab:23:61:64:96:a5:0d:e6:f2:1a:
                    82:38:67:51:c8:13:9b:88:b4:06:07:2c:2b:7d:49:
                    7e:91:46:42:9c:0c:79:c3:29:e3:7f:79:4c:b4:a1:
                    ce:7b:be:89:3f:14:6d:2d:1b:67:f1:43:e5:0d:0e:
                    5f:d1:46:ae:ab:7c:de:42:44:de:ed:b1:1c:a9:6d:
                    12:7b:12:4b:db:3b:8e:55:09:b8:90:c3:1c:14:84:
                    07:0d:6c:b9:2e:52:bc:08:7f:98:7b:5b:96:ac:84:
                    60:fe:d4:ea:61:26:7d:02:f2:53:a1:9e:e2:ab:7f:
                    9e:8d:fc:91:22:cc:8f:7b:c5:50:26:9a:91:0a:01:
                    74:ca:9e:cf:44:f3:c3:fd:ce:b2:bc:9e:d7:64:3b:
                    ad:e4:b6:b5:88:12:a9:ac:dd:e6:fa:06:48:cb:d1:
                    ab:ba:3f:c0:31:e5:aa:88:75:dd:c6:af:8e:4a:4d:
                    78:89:2b:28:d2:92:4c:6e:2f:7f:76:4b:70:dc:ae:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0F:6C:3F:F7:FC:18:E9:12:B9:32:DC:35:F7:53:C4:F0:44:21:18
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3234203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:3b:58:11:5c:cc:57:3b:5b:19:af:03:bc:36:e1:f1:98:
         b2:8c:96:fd:4b:d1:91:04:25:cc:3a:0e:63:71:44:7c:5a:eb:
         9c:a2:77:c0:f2:50:b9:08:91:d1:09:0c:2f:ac:ee:0a:3c:2d:
         37:39:c2:02:8c:47:00:7a:97:de:92:ef:31:d0:99:11:15:98:
         2d:43:92:b7:f0:a4:1c:8a:28:fd:67:39:47:df:c9:0c:65:ed:
         03:48:ae:4f:2c:8d:e7:d8:95:b3:90:31:0f:07:df:98:60:09:
         8e:45:34:27:d7:77:95:86:8a:9f:07:1b:1e:18:88:84:0e:10:
         54:c4:95:28:68:10:b2:9f:14:a1:65:4b:08:f0:ee:b6:72:20:
         54:c8:a2:21:ff:db:be:ab:11:b4:0c:dd:92:d4:63:53:d5:45:
         95:f5:71:18:89:9f:18:28:a1:77:7f:9d:25:0b:99:c4:0b:52:
         31:fb:f2:f3:24:82:d2:7f:69:d0:bb:9d:32:be:e0:06:37:4e:
         7c:55:e9:dc:b1:19:0c:b4:66:56:e6:c6:d4:ef:41:74:5e:78:
         32:70:e5:e5:91:22:df:b8:ec:cc:86:41:5c:6a:a3:21:75:29:
         c6:3c:6f:15:88:52:93:c9:70:5d:49:60:7c:eb:1b:63:d7:c9:
         21:7a:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:17:59 2024 by rpki-client on console-fra.rpki-client.org