Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3332203d3e20323634393030.roa
File:                     3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (raw, json)
Hash identifier:          y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=
Subject key identifier:   26:7E:16:DD:D1:19:77:8D:11:8D:9B:48:51:2C:88:A8:10:01:7A:E0
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       5CB18E4BD860D0CDFD39A37466A446E0F9BFDDAB
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3332203d3e20323634393030.roa
Signing time:             Thu 07 Nov 2024 14:03:07 +0000
ROA not before:           Thu 07 Nov 2024 13:58:07 +0000
ROA not after:            Thu 06 Nov 2025 14:03:07 +0000
asID:                     264900
IP address blocks:        168.228.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 22:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b1:8e:4b:d8:60:d0:cd:fd:39:a3:74:66:a4:46:e0:f9:bf:dd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Nov  7 13:58:07 2024 GMT
            Not After : Nov  6 14:03:07 2025 GMT
        Subject: CN=267E16DDD119778D118D9B48512C88A810017AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:1b:fd:9f:af:85:12:b4:93:c1:63:68:6f:
                    63:11:81:02:09:f4:ad:f5:12:c6:bb:6f:75:c2:38:
                    63:b3:36:67:a3:26:1d:06:ea:48:27:94:1e:8b:2b:
                    36:96:9b:d4:9d:42:2b:2d:47:ed:1a:48:ee:1c:c5:
                    9c:49:c4:4b:d2:81:7d:fe:44:8a:ad:c3:ac:9d:0a:
                    5a:7d:9d:ea:e9:94:d5:23:42:7b:89:49:b8:b8:7e:
                    52:56:37:81:08:f3:4c:8d:dd:c1:16:df:9f:3a:d9:
                    33:53:e2:52:ef:8f:43:fb:53:37:4b:bf:a2:25:fc:
                    32:c4:ce:0a:e2:74:f1:76:55:79:d3:b4:2e:70:92:
                    70:f5:2c:12:90:09:4b:5a:65:a5:ed:70:97:24:24:
                    61:19:3c:85:ba:a6:d1:2a:13:4b:5b:79:7e:51:d8:
                    2c:ff:9c:00:b1:04:43:dc:b2:89:e1:e4:20:b6:ba:
                    89:8f:b9:20:9f:25:93:b4:f4:6f:d3:72:1d:4e:2e:
                    03:cf:34:5e:5e:ae:00:3c:e7:ec:58:11:c5:b3:d1:
                    cf:a2:ec:e2:12:5a:05:54:90:cf:0a:6b:32:5f:2b:
                    9f:06:a3:a3:53:80:86:00:21:41:83:c2:db:84:c6:
                    67:58:6b:22:65:09:43:b9:cd:34:cc:88:7a:8d:e6:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:16:DD:D1:19:77:8D:11:8D:9B:48:51:2C:88:A8:10:01:7A:E0
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3332203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:89:83:82:60:3d:5d:ec:aa:55:c9:6f:db:c8:15:99:d0:c1:
         64:35:2e:4d:45:7e:e1:13:6c:a0:3c:22:44:4a:49:e5:05:39:
         22:ca:a4:94:51:12:2d:c5:7f:6a:e4:b8:64:94:20:4a:98:0d:
         51:ed:f4:b7:55:7c:9c:0b:f2:9a:9b:0f:dd:4f:a2:c0:0f:71:
         12:a8:a2:28:ca:46:5e:59:62:36:c1:18:fb:7c:8b:ef:83:f1:
         d8:97:2c:fc:15:a8:4e:88:7f:ec:0b:35:c5:1f:fd:7a:a8:53:
         06:2c:73:8b:3b:b5:26:dc:ad:ad:2d:5a:11:ab:a2:f9:98:49:
         f8:0f:8f:1e:c5:0a:02:ac:f9:2c:c7:5c:3f:9c:42:75:56:dd:
         17:90:98:44:c4:19:f5:92:ee:c8:6d:09:e8:10:80:61:89:4a:
         c4:44:66:e6:eb:f3:5f:f8:0d:7a:4f:e7:5d:9b:14:33:ee:2f:
         ac:1d:19:68:cc:7c:77:19:06:18:29:e9:80:37:29:27:b9:e0:
         96:72:74:fc:e2:4f:32:90:4c:4f:7b:e2:94:4f:5c:d4:20:f0:
         86:68:ab:95:72:25:bc:c9:1f:1c:a5:9a:0b:57:35:13:05:75:
         27:aa:1b:fb:07:be:9c:a9:00:f7:94:c2:6a:6f:7e:90:63:56:
         e5:5d:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:05 2024 by rpki-client on console-ams.rpki-client.org