Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3136382e3138312e35362e302f32322d3332203d3e203532393536.roa
File:                     3136382e3138312e35362e302f32322d3332203d3e203532393536.roa (raw, json)
Hash identifier:          N06XDsUZluxD/qX2XRmZBkqkBWb2RE5A8MjDC91aOnA=
Subject key identifier:   64:E8:7A:DA:1D:A8:3C:94:92:23:2C:D9:68:B4:88:0A:6A:2F:68:F8
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       0C0D7157C6017E81AE6ABDBBBAF70CDC0CD486A8
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3136382e3138312e35362e302f32322d3332203d3e203532393536.roa
Signing time:             Wed 03 Jul 2024 15:08:40 +0000
ROA not before:           Wed 03 Jul 2024 15:03:40 +0000
ROA not after:            Wed 02 Jul 2025 15:08:40 +0000
asID:                     52956
IP address blocks:        168.181.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0d:71:57:c6:01:7e:81:ae:6a:bd:bb:ba:f7:0c:dc:0c:d4:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: Jul  3 15:03:40 2024 GMT
            Not After : Jul  2 15:08:40 2025 GMT
        Subject: CN=64E87ADA1DA83C9492232CD968B4880A6A2F68F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:c6:2f:f4:19:3e:4a:6e:0c:47:ce:8e:8f:
                    d8:c7:34:04:6e:b4:b1:30:db:3a:26:89:b9:98:4e:
                    0c:cd:98:21:27:0a:3f:45:97:5c:ed:a7:6a:0a:f5:
                    2b:d1:61:ad:6d:06:6d:13:10:b6:e6:0a:dc:97:63:
                    86:e3:ef:72:59:5c:d8:78:ad:47:06:b3:57:4c:77:
                    6d:5d:b0:28:86:36:7e:eb:cb:5f:7a:96:3b:0e:05:
                    a9:89:d5:46:54:d6:ae:e1:8c:16:67:25:26:f2:c7:
                    53:58:b6:41:91:f8:6f:33:6c:d1:4f:0a:22:de:a4:
                    a0:18:4f:85:9d:ac:16:cb:a6:be:56:3a:ee:7a:b6:
                    3f:b3:d4:d7:30:ef:ac:27:3f:77:eb:72:7d:f5:5d:
                    bf:5e:86:9e:cb:b8:99:fa:6a:4e:ae:73:0c:4b:08:
                    de:11:57:a5:2b:3a:7f:1f:9a:bc:c2:be:ae:b9:55:
                    6d:09:31:f6:48:98:b0:23:9e:89:32:47:d0:03:e8:
                    e2:ba:e5:06:25:16:66:2a:b9:07:a1:5f:35:78:84:
                    a6:94:34:36:6a:9b:c3:d0:ac:fd:f1:b3:55:1c:e3:
                    2a:89:e0:62:64:1f:3c:a0:2e:63:0a:69:e9:ec:cc:
                    74:48:f7:95:7e:b2:17:e1:12:21:6f:8e:4d:2a:54:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E8:7A:DA:1D:A8:3C:94:92:23:2C:D9:68:B4:88:0A:6A:2F:68:F8
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3136382e3138312e35362e302f32322d3332203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:29:01:27:c1:c6:86:56:dc:c2:d2:7b:8b:b0:ef:fb:c4:72:
         40:19:a9:7c:47:c0:cc:f3:4b:0e:01:d1:2e:8d:75:14:6b:46:
         24:82:27:28:90:78:ef:22:b6:55:67:00:2e:63:eb:fd:37:e0:
         6a:1f:da:59:33:88:5e:02:8a:a5:3a:9c:bc:49:f7:17:82:89:
         19:40:1e:b2:98:1f:a7:1d:58:5c:a4:99:f6:d6:86:25:6e:f9:
         12:6b:a6:9d:6c:8a:c1:07:1d:cb:34:d9:b6:32:a5:4b:dc:15:
         0a:5c:b8:32:1f:09:a0:b2:62:0d:16:b9:7b:73:49:bb:34:c4:
         32:7a:c6:9c:9f:bc:b2:f0:a6:1d:50:a9:0f:81:ce:43:cf:c1:
         4d:d8:14:82:b6:08:c9:f7:11:b7:9c:3b:4a:a3:86:e4:19:19:
         8d:a6:a5:e9:af:26:c7:ff:8c:31:a2:05:1a:ec:9b:7a:c9:77:
         b1:90:15:f0:d2:b1:2e:ee:df:a5:bb:34:df:1e:f1:40:a9:78:
         0b:d5:0e:30:8a:61:86:49:14:01:32:d1:ca:a9:44:b4:43:ae:
         2d:93:eb:04:09:e6:3e:b1:85:c5:23:95:d4:05:7f:08:7f:de:
         67:e7:1c:52:4a:9e:86:fc:0c:3f:34:de:e9:a0:47:2c:35:01:
         5f:60:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org