Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa
File:                     3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa (raw, json)
Hash identifier:          x+gofVgnW+xlrLNif2ndX4qTroAFz7E301Znna5T/HQ=
Subject key identifier:   9E:48:1A:98:24:E7:FF:66:C4:B2:01:02:EF:03:7E:67:7C:C6:58:28
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       72DF5540AF62F8E339CDB81E3D84E7B5D9C691EB
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa
Signing time:             Thu 04 Apr 2024 10:06:21 +0000
ROA not before:           Thu 04 Apr 2024 10:01:21 +0000
ROA not after:            Thu 03 Apr 2025 10:06:21 +0000
asID:                     263289
IP address blocks:        168.196.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:df:55:40:af:62:f8:e3:39:cd:b8:1e:3d:84:e7:b5:d9:c6:91:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Apr  4 10:01:21 2024 GMT
            Not After : Apr  3 10:06:21 2025 GMT
        Subject: CN=9E481A9824E7FF66C4B20102EF037E677CC65828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:4d:a7:78:be:60:b8:fe:0f:c8:98:9c:d0:
                    4a:f3:11:c9:24:e3:4c:c5:be:f8:96:9d:9e:72:c1:
                    5f:0b:83:81:7a:f1:37:69:a2:dd:46:15:87:3d:4a:
                    03:4b:61:be:09:7f:07:19:ff:37:d6:d4:4b:c4:b5:
                    42:1c:18:83:39:f0:9f:76:e6:86:2b:73:18:82:2f:
                    39:77:a3:00:ef:47:c5:37:7e:c5:95:94:01:e3:9b:
                    71:9a:1d:d4:33:6b:9f:5c:54:12:a0:9d:9c:0c:84:
                    b5:b6:d3:0e:17:66:4a:f9:c6:8e:81:40:55:7f:4c:
                    b0:00:ed:45:0c:cd:a3:b0:ac:a3:0c:b9:de:cb:20:
                    53:9a:16:4a:88:fa:b8:40:1d:68:2b:a9:df:d1:db:
                    4b:e3:e2:75:bb:2c:65:1b:fc:63:d8:7d:c0:92:d4:
                    24:1b:51:45:97:24:f8:04:4f:61:d8:f8:7c:7c:ae:
                    ae:47:e6:db:96:26:e1:7e:4e:7e:15:15:36:2a:b7:
                    a1:7a:78:c4:ad:15:4f:b8:a8:9c:85:2d:e0:2c:49:
                    b0:00:5f:b0:61:0c:32:fa:eb:fc:e5:b0:89:90:e6:
                    72:d9:da:19:f5:2f:1c:d4:0f:36:0d:aa:ff:62:b8:
                    6d:ed:3a:20:79:38:db:e1:9f:3f:b0:ff:d1:fe:bc:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:48:1A:98:24:E7:FF:66:C4:B2:01:02:EF:03:7E:67:7C:C6:58:28
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3136382e3139362e3132382e302f32342d3234203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:97:12:25:2d:85:9a:50:5f:22:04:be:b9:c1:82:1e:10:0d:
         d9:16:61:cc:26:49:e3:68:ef:57:0a:74:64:7d:c0:80:8b:ca:
         20:d3:78:76:28:d7:59:76:ec:fd:b7:f9:26:b0:3d:cb:bd:1c:
         fa:03:56:4d:8c:b6:e7:dc:57:79:6d:d5:90:ac:7a:45:11:ca:
         7c:49:2e:71:5f:0e:e1:9f:fb:51:bc:e7:bb:5f:49:ae:54:c3:
         1a:a1:42:90:da:31:c7:e7:5c:a4:a0:3e:10:c6:48:d5:d1:5a:
         a5:3c:6e:9c:5a:d5:0d:e0:3e:f2:41:4a:75:74:f5:4e:c0:5d:
         13:12:b4:b9:ad:9b:ee:f5:c5:75:11:a3:de:5e:58:b7:58:f2:
         21:3c:fe:2e:02:08:47:d9:34:1d:d7:84:46:54:b4:c7:dd:63:
         12:df:dd:9b:83:0b:41:73:04:bb:c2:c1:15:a0:59:bb:f0:05:
         be:a3:38:1e:71:0e:49:a3:97:5f:32:55:ac:4a:95:f6:80:6e:
         0b:09:8b:8c:6e:74:c9:4d:d5:4a:4e:82:3d:7c:8d:35:2a:33:
         c0:0d:f9:6d:49:32:db:16:d1:fb:22:e6:75:08:f2:09:a1:55:
         09:66:83:0a:72:15:8a:99:00:87:b5:95:fe:32:8e:aa:18:85:
         ba:02:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org